Multi-Tiered Cloud Computing Security (SS 584)

What it is

MTCS is Singapore Standard SS 584:2020, "Specification for multi-tiered cloud computing security", published under the Information Technology Standards Committee. The standard's own abstract says it "describes the relevant cloud computing security practices and controls for public CSCs, public CSPs, auditors and certifiers" and "covers the minimum requirements for each tier that CSPs are to meet". It has three levels: as published by IMDA in October 2020, Level 1 carries 297 clauses, Level 2 carries 450 ("the 297 clauses in Level 1 and in addition, 153 unique Level 2 clauses") and Level 3 carries 538 ("the 450 clauses in Level 2 and in addition, 88 unique Level 3 clauses"), spread across nineteen control areas.

Who owns it

The standard is published under the Information Technology Standards Committee (Singapore Standards eShop).

Levels

• Level 1 — 297 clauses, as published by IMDA in the MTCS Gap Analysis Report (October 2020).
• Level 2 — 450 clauses — "the total clauses of 450 comprises of the 297 clauses in Level 1 and in addition, 153 unique Level 2 clauses" — as published by IMDA (October 2020).
• Level 3 — 538 clauses — "the total clauses of 538 comprises of the 450 clauses in Level 2 and in addition, 88 unique Level 3 clauses" — as published by IMDA (October 2020).