[ad_1]
Amazon Internet Service (AWS) is happy to announce that it has achieved the QI2/QC2 qualification degree, set out by the Italian Nationwide Cybersecurity Company (ACN) in Dedication No. 307/2022, for AWS cloud infrastructure and 130 AWS cloud companies. The scope of this qualification degree contains the administration of Crucial knowledge and workloads for Italian public administration prospects. Clients and companions who handle workloads recognized as Crucial, in response to the principles set out in ACN Dedication No. 307/2022, can now profit from the qualification achieved by AWS.
Acquiring the ACN QI2/QC2 qualification for managing essential knowledge and workloads implies that AWS meets the 366 necessities for safety, processing capability, infrastructure reliability, and scalability of cloud companies, together with being licensed in response to safety and compliance requirements equivalent to ISO 9001, ISO/IEC 27001:2013, ISO/IEC 27017:2015, ISO/IEC 27018:2019, Cloud Safety Alliance – Star Stage 2, ISO 22301, and ISO 20000.
Qualification of cloud infrastructure and companies is an integral a part of the Italian Cloud Technique, issued by the Division for Digital Transformation and ACN. The technique comprises pointers for migrating knowledge and digital companies of the Italian Public Administration to the cloud.
The Italian Cloud Technique begins from the precept that public administrations handle knowledge and workloads that function at totally different ranges of criticality. When migrating from an on-premises resolution to the cloud, public administrations should establish which danger class their workloads and knowledge belong to.
ACN has recognized the next three lessons of knowledge in relation to the injury that may very well be precipitated to the nation within the occasion of a breach by way of confidentiality, integrity, and availability.
Unusual: Information and companies whose deterioration doesn’t trigger the interruption of the state service nor, in any case, hurt the financial and social wellbeing of the nation.
Crucial: Information and companies whose compromise may compromise the upkeep of essential features for society, well being, security, and the financial and social wellbeing of the nation.
Strategic: Information and companies that, if compromised, can have an effect on nationwide safety.
Completely different ranges of criticality require totally different ranges of qualification in response to the next scheme.
Determine 1. Completely different ranges of criticality require totally different ranges of qualification
Due to the presence of the AWS Europe (Milan) Area since April 2020, and the brand new QI2/QC2 qualification obtained by AWS, our prospects and companions can now really feel assured to develop revolutionary cloud companies that handle the essential workloads of the Italian Public Administration that run on AWS cloud infrastructure. The qualification obtained by AWS will probably be accessible on the ACN Cloud Market Place within the subsequent weeks.
Our prospects can check with the AWS QI2/QC2 qualification to substantiate that the AWS management surroundings is designed and carried out appropriately. By receiving the qualification to handle Crucial workloads, AWS demonstrates our dedication to satisfy the best safety expectations for cloud service suppliers set out by ACN.
As all the time, we worth your suggestions and questions. Attain out to the AWS Compliance group by the Contact Us web page. To study extra about our different compliance and safety packages, see AWS Compliance Applications.
When you’ve got suggestions about this submit, submit feedback within the Feedback part under. When you’ve got questions on this submit, contact AWS Help.
Need extra AWS Safety information? Comply with us on Twitter.
Giuseppe Russo
Giuseppe is Safety Assurance Supervisor for Italy, based mostly in Rome. Giuseppe has a Grasp’s Diploma in Laptop Science with a specialization in cryptography, safety and coding idea. Giuseppe is a seasoned info safety practitioner with a few years of expertise participating regulators, key stakeholders, creating pointers, and influencing the safety market on strategic matters equivalent to privateness and important infrastructure safety.
Daniele Basriev
Daniele is a safety audit program supervisor at AWS based mostly in Amsterdam, the Netherlands. Daniele leads safety audits, attestations, and certification packages throughout Europe. For the previous 19 years, he has labored with a variety of applied sciences, management frameworks, and enterprise dangers inside advanced fast-paced environments. He constructed his experience initially throughout the worldwide consultancy surroundings and Massive 4 accounting corporations, after which moved into IT safety technique, IT governance, and compliance throughout a number of industries. His experience contains, however not restricted to, info programs audits, third-party and vendor danger administration, IT danger administration, enterprise continuity, safety governance, and compliance.
[ad_2]
Source link
