This template outlines how an organization’s end users can securely use cloud services through acceptable usage guidelines. It is applicable for varying cloud services (SaaS, PaaS, and IaaS, as well as private, hybrid, and fully hosted) and should be customized based on your organization’s cloud usage. The template includes the following sections:
- Scope
- Data Classification and Restrictions
- Identity and Access Management
- Data Encryption
- Acceptable Devices and Locations
- Cloud Procurement Guidelines