|
Number
(1) |
Evaluation
purpose |
Evaluation
content |
Number
(2) |
Evaluation
item |
Description |
Number
(3) |
Verification item | Method |
Essential |
| Document | Actual inspection |
|
|
1 |
Availability | Cloud service provider needs to take necessary actions to constantly provide cloud service according to contracted contents. |
1.1 |
Availability policy establishment |
For ensuring the conformance of service availability level, cloud service provider needs to establish and document availability policy including present condition on the application of cloud related technologies such as virtualization and physical resource retention/management and system operation/management method. In addition, corresponding policy needs to conform to related legislations, and so forth. | 1.1.1 | For ensuring cloud service availability level, has the policy been established and documented by defining the items required for management/operation? | O | X | Essential |
| 1.1.2 | Does the availability policy reflect related legislations and include the contents of guidelines provided by the government and cloud service industry? | O | X | Essential |
| 1.2 | Availability goal and result notification | Cloud service provider needs to inform service availability level in advance in documents and prepare related processes periodically to allow users to be aware of availability level. | 1.2.1 | Is the cloud service availability level being provided to users in advance in documents through basic contract terms and conditions or service level agreement (SLA)? | O | X | Essential |
| 1.3 | Organization and responsibilities | For ensuring the availability level presented to users, cloud service provider needs to appropriately assign organization and personnel and corresponding duties need to be responsibly performed. | 1.3.1 | For maintaining cloud service availability level, are the organizational roles and responsibilities and correlation with other duties defined and included in availability policy? | O | X | Essential |
|
1.4 |
System implementation/
management |
For ensuring service availability, cloud service provider needs to compose the system by implementing appropriate cloud technologies/software such as virtualization and distributed computing, and so forth. In addition, monitoring, clustering and maintenance/repair need to be available in case of any system trouble. | 1.4.1 | Does the cloud system consist of technologies and software needed to provide high availability? | O | O | Essential |
| 1.4.2 | In the case of any cloud service trouble, is there any monitoring technology/system available to detect and identify such trouble in real-time? | O | O | Essential |
| 1.4.3 | Are the core system components composed in clustering to prepare for any cloud service trouble? | O | O | Essential |
| 1.4.4 | Is periodic maintenance/repair being performed to prepare for any cloud service trouble? | O | X | Essential |
| 1.5 | Internal management | Cloud service provider needs to prepare for any service availability limitations to predict/analyze/improve them and retain/manage necessary technical data. | 1.5.1 | Is the process for analyzing/predicting cloud service availability level available? | O | X | Essential |
|
