Well-implemented and effectively managed cloud services can provide significant benefits, including scalability, automation, resilience, and security. However, poorly implemented and mismanaged cloud migrations can expose an organisation to increased risk of successful cyber attacks, amongst other risks. This document provides high-level guidance on relevant threats, risks and controls, and common misconceptions. It has two key objectives: 1) what needs to be considered for cloud security, and the pros and cons of different approaches; and 2) how technical teams can achieve specific outcomes.

Click here to access the document.