QUICK GUIDE TO THE

TCI REFERENCE ARCHITECTURE WHITEPAPER Introduction

Introduction

The permanent and official location for the Cloud Security Alliance Trusted Cloud Initiative research is:

https://www.cloudsecurityalliance.org/research/initiatives/tci/

© 2011 Cloud Security Alliance.

All rights reserved. You may download, store, display on your computer, view, print, and link to the Cloud Security Alliance “Trusted Cloud Initiative Quick Guide” at https://www.cloudsecurityalliance.org/research/initiatives/tci/ subject to the following: (a) the Guidance may be used solely for your personal, informational, non-commercial use; (b) the Guidance may not be modified or altered in any way; (c) the Guidance may not be redistributed; and (d) the trademark, copyright or other notices may not be removed. You may quote portions of the Guidance as permitted by the Fair Use provisions of the United States Copyright Act, provided that you attribute the portions to the Cloud Security Alliance “Trusted Cloud Initiative Quick Guide” Version 1.0 (2011).

©2011 Cloud Security Alliance | 2

TCI REFERENCE ARCHITECTURE WHITEPAPER Table of Contents

Table of Contents Introduction.......................................................................................................................................................... 2 Foreword.............................................................................................................................................................. 4 Acknowledgments................................................................................................................................................. 5 Overview of the Reference Architecture.................................................................................................................. 7 How to Use the TCI Reference Architecture. ............................................................................................................ 8 Security and Risk Management............................................................................................................................... 9 Information Technology Operation & Support........................................................................................................ 12 Business Operation Support Services. ................................................................................................................... 15 Technology Solution Domains: Presentation, Application, Information, and Infrastructure Services. .......................... 18 Presentation Services. ................................................................................................................................. 18 Application Services. ................................................................................................................................... 19 Information Services.................................................................................................................................... 20 Infrastructure Services................................................................................................................................. 22

©2011 Cloud Security Alliance | 3

TCI REFERENCE ARCHITECTURE WHITEPAPER Foreword

Foreword

Welcome to the Cloud Security Alliance’s “Trusted Cloud Initiative Quick Guide,” Version 1.0. This is one of many research deliverables CSA will release in 2011. Trusted Cloud Initiative is a comprehensive approach for the architecture of a secure, identity-aware cloud infrastructure. TCI leverages four industry standard architecture models: TOGAF, ITIL, SABSA, and Jericho. This approach combines the best of breed architecture paradigms into a comprehensive approach to cloud security. By combining business drivers with security infrastructure, TCI increases the value proposition of cloud services within an enterprise business model.