Although on-demand self-service is important in allowing elasticity, the advice adds on page 109, "Elasticity enables greater use of immutable infrastructure."
Documents should not be regarded as more or less acceptable or reliable just because they were generated or saved in the cloud. This is on page 52 of the Guidance (version 4).
The management plane components of the cloud metastructure are network-enabled and remotely accessible.
There is no need to pay for the auditor to be taught on the issue by hiring auditors with experience in the cloud domain. It should be noted that this is mentioned in domain 4 of the guideline (V4) with the phrase "Attempt to select auditors with experience in cloud computing," but does not explain why, as it did in the previous version of the guidance.
Although data security measures are provided, all other alternatives are characterized as controls for enforcing information lifecycle management security, rather than safeguarding and managing data in the cloud. This is shown on page 120 of the guideline.
An Identifier is the means through which one's identity is declared. Persona is identity plus contextual characteristics. The CSA does not use the name Authorizer as SAML is a federation standard.
