You are a Security Manager for an Australian Government Agency.
You are looking to start using a cloud service provided by ACME Corporation
You are part of a team responsible to provide a recommendation to the Chief Executive whether the cloud service adequately meets ACSCs cyber security requirements for cyber services based on suppliers Cloud Security Alliance STAR Attestation.
Review three ACSC requirements against supplied reports and discuss with other team members (who reviewed other sections of ACSC requirements) what actions you would need to undertake (if any) to obtain sufficient comfort to recommend the supplier.
Supply Chain Security Activity.xlsx