The Australian Signals Directorate (ASD) will be shuttering the current form of its cloud certification program after an independent review recommended for the system be reworked.
The Cloud Services Certification Program (CSCP) will be replaced with new cloud security guidelines that will be formed following consultation with industry. The Information Security Registered Assessors Program (IRAP), meanwhile, will “grow” and be “enhanced”.
The ASD will also establish government and industry “consultative forums for cybersecurity”.
ASD will no longer be the certification authority and said it would not progress certification activities, which includes re-certification activities.
All services listed on the Certified Cloud Services List (CCSL) will remain ASD-certified until 30 June 2020, after which time all ASD certifications and re-certification letters will be void.
ASD said the vendors and their certifications will be removed from the Australian Government Information Security Manual (ISM).
“The cessation of the CSCP will open up the Australian cloud market to allow for more…
