What is SS 584 multi tiered cloud services (MTCS)?
In order to help businesses understand cloud computing certifications provided by different cloud service providers (CSPs), the SS 584, which is the Multi-Tier Cloud Security Standard for Singapore (MTCS SS), was introduced, and is the world’s first cloud security standard that covers multiple tiers.
While this cloud security standard is voluntary, it is mandatory for CSPs participating in bulk tenders from the Government. TÜV SÜD is one of the qualified certification bodies identified by Infocomm Development Authority of Singapore (IDA) and Enterprise Singapore to conduct the cloud computing certification for CSPs, against the MTCS Standard. SS 584 (MTCS) has three different tiers of cloud security, Tier 1 being the base level and Tier 3 being the most stringent.
- TIER 1:
Designed for non-business critical data and systems with basic security control, that address security risks and threats targeting low-impact information systems. (e.g.: Web site hosting public information)
- TIER 2:
Designed for organizations that use cloud services to protect business or personal information, and run critical business data and systems in a moderate impact information systems. CSPs in this tier have more stringent security controls (e.g.: Email / CRM – Customer relation management systems)
- TIER 3:
Designed for companies with specific needs and more stringent security requirements. Industry specific regulations may also be applied, to supplement and address security risks and threats, in a high impact information systems using cloud services (e.g.: Financial / Medical records)
SS 584 CERTIFICATIOnPROVIDES YOUR ORGANISATION WITH MULTIPLE BENEFITS:
- Facilitate matching of security needs between companies and cloud service providers
- Increase clarity of security levels and implications
- Help local and foreign cloud service providers to promote their services
- Enhance quality, security and reliability of cloud service
TÜV SÜD IS YOUR CERTIFICATION PARTNER FOR SECURITY OF CLOUD COMPUTING
TÜV SÜD offers a comprehensive range of solutions for the IT industry. As an independent body, we provide objective and farsighted recommendations to optimise our clients’ products and services. We can help customers to ensure that the best practices in information security are being adopted, and to harness the maximum potential that are technologically possible.