The Inner Circle

 View Only

  • 1.  GxP Checklist Template for Cloud Infrastructure Validation ?

    Posted Dec 11, 2023 05:35:00 AM

    Does anyone know where to get a GxP Checklist Template for Cloud Infrastructure Validation ?



    ------------------------------
    Antony Paul
    ------------------------------


  • 2.  RE: GxP Checklist Template for Cloud Infrastructure Validation ?

    Posted Dec 12, 2023 10:52:00 AM

    For your GxP Checklist Template for Cloud Infrastructure Validation, while there's no generic source or standard checklist, CIS Benchmarks and DISA STIGs (Defense Information Systems Agency Security Technical Implementation Guides) offer relevant guidance. The Center for Internet Security (CIS) provides benchmarks as secure configuration guidelines for numerous technologies, recognized by many industry frameworks. These benchmarks can be an acceptable alternative to STIGs for cloud infrastructure, as indicated by the DoD Cloud Computing SRG. CIS offers specific benchmarks and hardened images for cloud environments, which could be adapted for GxP compliance requirements.
    For more detailed information and resources, you can refer to the CIS website.



    ------------------------------
    Morning Ellergraces
    Consumer Advocate
    Cloud Security Alliance
    ------------------------------

    Original Message


  • 3.  RE: GxP Checklist Template for Cloud Infrastructure Validation ?

    Posted Dec 12, 2023 12:06:00 PM
    Edited by Antony Paul Dec 12, 2023 12:06:47 PM

    Thanks.  I will also refer to some of the document published under https://ispe.org/ ,  plus there is something AWS and GCP published  for GxP( CFR Part11 of Title 21) compliance.  



    ------------------------------
    Antony Paul
    ------------------------------

    Original Message


  • 4.  RE: GxP Checklist Template for Cloud Infrastructure Validation ?

    Posted Dec 12, 2023 10:54:00 AM

    Here is a link that seems relevant to this topic.

    https://www.cisa.gov/news-events/alerts/2023/12/12/cisa-releases-scuba-google-workspace-secure-configuration-baselines-public-comment



    ------------------------------
    Morning Ellergraces
    Consumer Advocate
    Cloud Security Alliance
    ------------------------------

    Original Message


  • 5.  RE: GxP Checklist Template for Cloud Infrastructure Validation ?

    Posted Dec 12, 2023 01:01:00 PM

    Not sure what you mean specifically around Cloud Infrastructure, but as an example AWS has Audit Manager with pre-built items for CFR part 11.  Without knowing what GxP you need to maintain or cloud provider, I do not have much to add on how to validate your IaaS.



    ------------------------------
    Ross Kovelman
    Cloud Cybersecurity
    NA
    ------------------------------

    Original Message