While organizations of any size are seeing the benefits of running their software applications on the Cloud, the decision-making process is yet not an easy one due to security concerns.
When deciding about a Cloud vendor – in other words – whom to trust your valuable IP, you want to make sure the vendor fulfills the latest security standards and is able to manage these long-term.
An Information Security Management System (ISMS) is a framework of policies, procedures and systems to provide the highest possible security. The key term here is "management" as technologies, requirements and the environment inside the organization are undergoing constant change so it is essential that the security framework is treated with priority and properly administered and adjusted.
Industry standards and regional regulations differ so when engaging with a Cloud vendor it is important to check if the relevant standards for your specific organization are being fulfilled.
There is a detailed description of ISMS at http://www.iso.org/iso/home/standards/management-standards/iso27001.htm if you would like to do some further reading.
PTC Cloud Services and Security
PTC Cloud Services’ approach to security is that we have an information security management system which consists of documented policies and procedures to meet ISO and FedRAMP, as well as a variety of specific other industry requirements.
Among others, the PTC Cloud Services ISMS covers aspects like
- User authentication
- Vulnerability scans
- Intrusion detection and prevention
We will be happy to discuss any security questions with you in detail. Feel free to ask using the commenting option below or talk to a PTC Cloud Services expert.