The CloudTrust Program instituted by MVISION Cloud is an objective and comprehensive assessment of a cloud service’s security capabilities based on the 55 attributes developed along with the Cloud Security Alliance (CSA). MVISION Cloud evaluates cloud services and awards those services that fully satisfy the program’s stringent requirements with the MVISION Cloud Enterprise-Ready™ seal. There are currently over 100 cloud service providers who are part of the CloudTrust program.
MVISION Cloud’s assessment of a cloud service consists of three steps:
- Assessment. MVISION Cloud collects and reviews attribute values from many sources, including public-facing company information, support forums, real-time news feeds, adverse security events, automated scripts, and questionnaires. The MVISION Cloud team also subscribes to the service and engages with support teams for more details about service attributes and security controls.
- Scoring. MVISION Cloud calculates a risk score for the cloud service.
- Validation. MVISION Cloud interacts with the cloud service provider to validate the attribute information and make sure the risk score is accurate. Once cloud service providers have gained entry into the CloudTrust program, they are needed to provide validation of their registry attributes on a quarterly basis.