T/IAC 36-2019 Cloud computing insurance risk assessment guidelines
T/IAC 36-2019 Cloud computing insurance risk assessment guidelines
Basic Information
Scope
Scope: This standard specifies the method of risk assessment for cloud computing, and proposes management methods for the risk consequences such as service unavailability, data loss, and data leakage that may occur during the operation of cloud computing. This standard applies to insurance companies when they insure cloud platforms with cloud service providers. The assessment of the risk management level of cloud service providers is conducted by insurance companies or third-party assessment agencies, serving as a valid basis for insurance underwriting. Note: This standard does not apply to the risk assessment of technical route risks and political risks. Main technical content: The method of risk assessment for cloud computing, and proposes management methods for the risk consequences such as service unavailability, data loss, and data leakage that may occur during the operation of cloud computing.