|
|
|
|
| LEADER |
02072nmm a2200289 u 4500 |
| 001 |
EB002177435 |
| 003 |
EBX01000000000000001314969 |
| 005 |
00000000000000.0 |
| 007 |
cr||||||||||||||||||||| |
| 008 |
231006 ||| eng |
| 245 |
0 |
0 |
|a Data Classification Matrix and Cloud Assessment Framework
|h Elektronische Ressource
|b Cloud Assessment Framework and Evaluation Methodology
|
| 260 |
|
|
|a Washington, D.C
|b The World Bank
|c 2023
|
| 653 |
|
|
|a Information Technology
|
| 653 |
|
|
|a Information and Communication Technologies
|
| 653 |
|
|
|a PII
|
| 653 |
|
|
|a Cloud Computing
|
| 653 |
|
|
|a Security
|
| 653 |
|
|
|a Public Sector
|
| 653 |
|
|
|a Data Classification Matrix
|
| 710 |
2 |
|
|a World Bank Group
|
| 041 |
0 |
7 |
|a eng
|2 ISO 639-2
|
| 989 |
|
|
|b WOBA
|a World Bank E-Library Archive
|
| 490 |
0 |
|
|a Equitable Growth, Finance and Institutions Insight
|
| 028 |
5 |
0 |
|a 10.1596/39550
|
| 856 |
4 |
0 |
|u http://elibrary.worldbank.org/doi/book/10.1596/39550
|x Verlag
|3 Volltext
|
| 082 |
0 |
|
|a 330
|
| 520 |
|
|
|a This data classification matrix and cloud assessment framework supports the policy goals articulated in the World Bank's Institutional and procurement practice note for cloud computing services in the public sector. The framework is intended to support World Bank client countries, practitioners, and multilateral and bilateral development partners to manage the risks of acquiring public cloud solutions. These suggestions are based on good practices identified in the practice note. The framework first offers a data classification scheme for government data and personally identifiable information (PII) of citizens that governments and their contractors handle based upon the confidentiality, integrity, and availability security objectives. The framework then suggests cloud security requirements corresponding to each proposed data classification level. These security requirements are based upon international standards and good practices identified in the practice note. The framework also offers a checklist for procuring agencies seeking to procure cloud services
|