Press release, June 5, 2019 at Nixu 10.00 am EEST
The Finnish National Cyber Security Centre (NCSC) has released new audit criteria for cloud services called PiTuKri. The implementation of the criteria improves security in situations where authorities process classified information in the cloud.
Katakri, the national security audit criteria (kansallinen turvallisuusauditointikriteeristö), has been a suitable auditing tool for authorities in Finland for over a decade now. However, the fact that Katakri does not consider the particularities of cloud environments