BTIT: Cloud computing code of practice

BTIT cloud computing practice guidance supports secure and reliable use of cloud-hosted systems.

Customer considerations

  • Understand where data is hosted and who can access it.
  • Confirm backup, monitoring and recovery expectations.
  • Use least-privilege access and strong authentication.
  • Keep configuration and ownership information current.
  • Review cloud costs, security posture and service dependencies regularly.