IISRI® External Ratings 

 

Security Camera

The following organizations and/or services have been granted a rating according to the IISRI® rating scale.  While still transparent, the reports of the external assessments are sanitized to protect the assessed organization and its customers. Any identified significant risks have been communicated in advance to the assessed organization.

Grant date: 2017-01-28 
Valid to: 2017-12-28

Amazon Web Services, nominated by many as the king of Cloud, have consistently outperformed its competitors. While they were placed most favorably in Gartner’s magic quadrant, the king was not so royal when it came to security in the past years. This has now changed and AWS is now also catching up with security aiming at being also on the top with security. They have demonstrated that security is a top priority to them by complying with numerous local and international security standards, ensuring resiliency, understanding and promoting security architectures, and ensuring the security of tenant data. Not only are they ensuring securing of their own infrastructure AWS is also more and more offering security services to their tenants.

Grant date: 2017-02-15 

Valid to: 2017-12-15

The best assurance IISRI® could find on privacy is that QingCloud states that they “promise” to keep tenant’s data confidential and not to disclose tenant’s data to third parties. It is possible that in China a promise has a different meaning and provides more assurance than in Western countries, but we would not bet our privacy on it. There are also other statements made by QingCloud that indicate that they may not respect tenants' rights. It seems that QingCloud has other priorities than ensuring privacy and intellectual property rights of tenants' information.

pngegg.png

Grant date: 2017-04-28 

Valid to: 2018-01-28

Since intellectual property (IP) is one of Fujitsu group's main business drivers, they have dedicated a full capability to IP: IP teams, IP governance, IP framework, IP strategy, IP annual reports, and participation in global and regional IP standardization efforts. Fujitsu Cloud is outstanding because while they encourage all employees to acquire, maintain and use intellectual property rights, they also direct them to respect those of other companies." It is also clear that Fujitsu Cloud considers cloud security very important. They have not only published "The White Book of Cloud Security" but also defined their own cloud security standard, ie. "Fujitsu Cloud Data Security Standard (FJC DSS)."

Grant date: 2017-03-06 Valid to: 2018-02-06

The privacy of tenants in the East Asian region is not always the same as on the European or US continent we knew, but that even major players like Alibaba Cloud struggle to meet some common privacy principles. While privacy is a challenge Alibaba Cloud offers innovative security services, like Ali Green Network to help protect intellectual property rights, and security insurance to cover costs in case of security breaches.

Grant date: 2017-02-09 

Valid to: 2018-01-10

Azure recent improvements are considered a great leap forward in the security of their cloud services. In the last months, Azure has, for example, removed RC4 as a weak cipher, is certified to meet the EU –US Privacy Shield requirements, added Information Protection Azure, enabled integration with external Hardware Security Modules (HSM), and even supports the Lamp stack. Azure also sets the bar high by providing good transparency around security, and by doing so, Azure shows confidence in its security posture. While some minor flaws exist, Azure tops the list of IISRI's cloud security ratings.

Grant date: 2017-03-31 Valid to: 2018-03-01

Tencent Cloud also referred to as QCloud, is a significant market player in China with a presence in Singapore, Canada, and the USA. QCloud is one of the few cloud providers that take tenants' intellectual property rights seriously. That is not surprising if you consider that Tencent Group has a separate business dedicated to IPR-related business activities. But besides that, Tencent Cloud offers its tenants also a Security Certification service, and tenants can gain recognition for their security posture and provide their customers with security assurance.

Nature Reflecting on Crystal Glass