Overview

The purpose of security management is risk management. Choosing to migrate business to the cloud does not mean a reduction in security risks or that the cloud provider will assume responsibility for the security of the enterprise.

The cloud security responsibility model is a shared responsibility model. Based on the customer applications in the cloud, the cloud provider is responsible for ensuring the security of the cloud platform itself and providing corresponding security capabilities and services to customers on the cloud. Customers are responsible for building a secure system for their applications or business based on the services or capabilities provided by the cloud provider.

As enterprises migrate to the cloud at an increasingly rapid pace and the cost of network attacks decreases, security protection has not kept up with business development. Therefore, it is essential to plan and design the security system during cloud migration preparation phase, rather than considering security protection after the business workloads already migrated.