4.7.2 Certification of the Account
Second, in order to build the account, a certain number of processes need to be in place. For example, incident reporting and analysis processes need to be defined, tested and implemented and evidence collection procedures need to be verified. Like any other organisational and technical processes, these elements are certifiable, provided that a reference organisational standard exists. These elements would have a place within an accountability management standard as we suggested in 1.2.2.
Download the preliminary release of the Cloud Accountability Reference Architecture and the relevant A4Cloud Toolkit.