Cloud Security Technical Reference Architecture from CISA
The Cloud Security Technical Reference Architecture offers approaches to cloud migration and data protection.
Cybersecurity and Infrastructure Security Agency (CISA):
The purpose of the Cloud Security Technical Reference Architecture is to guide agencies in a coordinated and deliberate way as they continue to adopt cloud technology. This approach will allow the Federal Government to identify, detect, protect, respond, and recover from cyber incidents while improving cybersecurity across the .gov enterprise. As outlined in Executive Order 14028, this document seeks to inform agencies of the advantages and inherent risks of adopting cloud-based services as they begin to implement zero trust architectures . The Cloud Security Technical Reference Architecture also illustrates recommended approaches to cloud migration and data protection for agency data collection and reporting.
I am a big fan of reviewing these documents. It helps me determine if I have any blind spots in my cloud deployments.