Plan: Establishing your security scope and model
Planning is an iterative process as you mature your security model. Key steps in the planning process include:
Understanding the security scope – Security scope varies and depends on how the cloud is used.
Choosing a security model – Identify the best-fitting security model for your security use case.
Creating a business objective model – Define clear goals and mechanisms to measure success.
As you develop your plan, consider the following:
Be willing to iterate. Iteration is constant in the cloud. Iteration helps you identify gaps in the plan.
Do not start with services. Start with your plan instead of picking out what services you need. This helps drive your organization to its intended outcomes.
