Apply industry-specific requirements

1. Apply industry-specific requirements

Everybody loves getting things done more efficiently and in less time. As a cloud security professional, you’ll need to know how to apply industry-specific standards, rules, and requirements using tools and frameworks. It’s important to call out our discussion in this course should not be considered legal advice. Asking the right questions can help you choose the best risk management framework for your industry’s compliance standards. Some important questions your security team should answer are: what standards, rules, and requirements apply to our industry? This is one of the largest factors that drives most regulatory coverage. What kind of data do we plan to work with? Do we work with PHI, PII, or financial and credit data? In which geographies and jurisdictions do we operate? This is very important for sovereignty requirements, data movement, and processing and control responsibilities. In addition to these questions, you could also ask, do we plan to work with governments? If so, which ones? Will these workloads be in the cloud, on premises, or mixed? Let’s explore a workplace scenario to understand the process of applying specific requirements for your industry and organizational needs. Imagine you are part of the cloud security team for a large statewide healthcare provider. The organization handles PHI, takes electronic payments, and works with insurance companies and federal health insurance. In this scenario, if your organization is determined to be a covered entity by HIPAA, your team will be obliged to follow all HIPAA laws for handling PHI. Some states create additional healthcare laws, so the team will also want to follow any statewide laws and regulations based on location. Your team can use a framework to map controls for those laws. Your team will also want to consider how payments are handled, like patient copays at the office. Critical thinking is not always listed as a qualification on a job listing, but it’s a highly valuable skill to a lot of employers. When you know the specific regulations and standards associated with your industry, you can get answers to the right questions. These answers will help your team choose the right frameworks and controls.

2. Let's practice!

Create Your Free Account

By continuing, you accept our Terms of Use, our Privacy Policy and that your data is stored in the USA.