Summary
As organizations continue to migrate to using cloud environments, these environments are becoming increasingly valuable targets for malicious cyber actors (MCA). Many cloud breaches occur due to misconfigurations in cloud tenants. NSA’s Top Ten Cloud Security Mitigation Strategies inform cloud customers of the most important practices to improve the security posture of their cloud environments. As organizations shift their data to the cloud for ease of processing, storing, and sharing, they must take precautions to maintain parity with on-premises security and mitigate additional cloudspecific threats. The following sections outline NSA’s top ten recommended mitigation strategies that cloud customers should take to improve their security posture. Each strategy has an associated cybersecurity information sheet that describes it in more 1.