Cloud platform security

ScotPayments has been designed using NCSC’s Cloud Security Principles, and is delivered by the Scottish Government’s Cloud Platform.  

The cloud platform aligns with the following security standards and bodies: 

• Cloud Service Alliance Security, Trust & Assurance Registry (CSA STAR) 
• Cloud Security Cloud Controls Matrix (CCM) 
• National Cyber Security Centre Cloud Security Principles (NCSC CSP) 
• ISO/IEC 27001:2013 security techniques and controls 
• Open Web Application Security Project (OWASP) 
• Centre for Internet Security (CIS) 
• National Cyber Security Centre Cyber Assessment Framework (NCSC CAF)