Control table

The table below lists the operational controls that are covered in this guide. The controls are organized into categories and levels of maturity. You can use this table to identify the controls that are most relevant to your organization and to track your progress as you implement them.

Category	Control name	level 1	level 2	level 3	level 4	level 5
Data Backup and Recovery	Establish a regular backup schedule for critical data
Data Backup and Recovery	Store backups in multiple locations (offsite and/or cloud-based storage)
Data Backup and Recovery	Implement a versioning system to track and restore previous versions of data
Data Backup and Recovery	Encrypt backups to protect sensitive data
Data Backup and Recovery	Test backup and recovery processes periodically to ensure data integrity
Network redundancy and failover	Implement redundant network connections to prevent single points of failure
Network redundancy and failover	Use load balancers to distribute traffic evenly across resources
Network redundancy and failover	Employ network failover solutions (e.g., redundant routers, switches)
Network redundancy and failover	Monitor network performance and latency to detect potential issues
Network redundancy and failover	Test network redundancy and failover processes to ensure proper functioning
Infrastructure monitoring and alerting	Implement a Monitoring System to Track the Health and Performance of Cloud Infrastructure
Infrastructure monitoring and alerting	Set Up Alerts for Critical Events and Performance Thresholds
Infrastructure monitoring and alerting	Monitor Resource Usage to Identify Potential Bottlenecks and Capacity Issues
Infrastructure monitoring and alerting	Establish a Centralized Logging System to Collect and Analyze Logs from Various Components
Infrastructure monitoring and alerting	Regularly Review Monitoring Data to Identify Trends and Improve Infrastructure Resilience
Incident response planning	Develop a formal incident response plan, including roles and responsibilities
Incident response planning	Establish a communication plan for internal and external stakeholders during incidents
Incident response planning	Perform regular incident response drills to test and refine the plan
Incident response planning	Document lessons learned from incidents and update the incident response plan accordingly
Incident response planning	Provide training for staff on incident response processes and best practices
Capacity planning and scaling	Regularly assess infrastructure capacity and plan for growth
Capacity planning and scaling	Implement auto-scaling strategies to handle fluctuating workloads
Capacity planning and scaling	Use load testing to identify capacity limits and potential bottlenecks
Capacity planning and scaling	Monitor resource usage to anticipate and address potential capacity issues
Capacity planning and scaling	Review and update capacity plans based on changing business requirements and growth
Security and access controls	Implement strong authentication and authorization mechanisms
Security and access controls	Regularly review and update user access permissions
Enable encryption for data at rest and in transit	Apply security patches and updates promptly
Enable encryption for data at rest and in transit	Conduct regular vulnerability assessments and penetration testing
Application resiliency and fault tolerance	Design applications to be stateless and horizontally scalable
Application resiliency and fault tolerance	Implement circuit breakers and retries to handle transient faults
Application resiliency and fault tolerance	Use health checks and load balancing to distribute traffic among instances
Application resiliency and fault tolerance	Isolate application components to limit the impact of failures
Application resiliency and fault tolerance	Monitor application performance and error rates to identify potential issues
Data center and geographic redundancy	Deploy infrastructure across multiple data centers or availability zones
Data center and geographic redundancy	Use geo-replication to store data redundantly across different regions
Data center and geographic redundancy	Implement global load balancing to distribute traffic across data centers
Data center and geographic redundancy	Test failover processes between data centers to ensure smooth recovery
Data center and geographic redundancy	Regularly review and update data center redundancy strategies based on evolving needs
Regular resilience testing and validation	Conduct regular disaster recovery and failover tests
Regular resilience testing and validation	Use chaos engineering techniques to simulate failures and test system resilience
Regular resilience testing and validation	Test backup and recovery processes to validate data integrity
Regular resilience testing and validation	Perform load and stress tests to identify capacity limits and potential bottlenecks
Regular resilience testing and validation	Use the results of testing to inform updates and improvements to infrastructure resilience
Documentation and Knowledge Sharing	Document architecture, processes, and best practices for cloud resilience
Documentation and Knowledge Sharing	Maintain a centralized knowledge base for easy access to documentation
Documentation and Knowledge Sharing	Regularly review and update documentation to reflect changes and improvements
Documentation and Knowledge Sharing	Encourage knowledge sharing and collaboration among team members
Documentation and Knowledge Sharing	Provide training and resources to help staff stay informed about resilience