Cybersecurity Governance: Cloud Security

A set of flashcards covering key concepts related to Cloud Security and Cybersecurity Governance, highlighting definitions and features important for understanding cloud computing.

Cloud Computing

The on-demand availability of computer system resources, especially data storage and computing power, without direct active management by the user.

Infrastructure as a Service (IaaS)

A cloud service model that provides processing, storage, networks, and other fundamental computing resources.

Platform as a Service (PaaS)

A cloud service model that delivers a computing platform and solution stack as a service for deploying applications.

Software as a Service (SaaS)

A cloud computing service that allows users to use the provider's applications without maintaining the infrastructure.

Public Cloud

Cloud services run by third parties, offering scalability and accessibility, typically recommended for software development.

Private Cloud

Cloud infrastructure utilized by a single organization, providing full control over data and security.

Community Cloud

A collaborative cloud platform that serves multiple organizations with shared concerns and policies.

Hybrid Cloud

A cloud environment that combines public and private clouds, allowing for interaction between the two.

Data Breaches

Unintended exposure of sensitive data due to weaknesses in cloud security.

Denial of Service (DoS)

An attack that makes cloud services unavailable to users by overwhelming the resources.

Vulnerability

Weakness in the system that can be exploited by attackers, often leading to security incidents.

Multi-tenancy

A cloud architecture where multiple customers share the same physical resources while keeping their data separate.

Threat Vector

A path or means by which an attacker can gain access to a computer or network server in order to deliver a payload or malicious outcome.

Encryption

The process of converting information into a code to prevent unauthorized access.

Service Level Agreement (SLA)

A contract that outlines the expected level of service between a provider and a customer.

Compliance

The process of ensuring that cloud services meet regulatory and legal requirements.