Security Compliance Service

Based on the rich experience of Alibaba Cloud in cloud security compliance, this service can help you meet security compliance requirements in different countries and regions.This service provides professional services for security compliance consultation and implementation, including security compliance consultation, solution design, solution implementation and solution verification.

Scenarios
Cloud Security Compliance Consultation
On the basis of your security compliance requirements in different countries and regions, Alibaba Cloud can provide you with a comprehensive cloud security compliance solution to ensure that your systems can fulfill the applicable compliance requirements after the systems are migrated to the cloud.
Secure Design and Deployment based on New Compliance Requirements
When new compliance requirements are introduced, we can help you understand the new requirements, identity gaps, and provide a comprehensive cloud secure design and deployment solution. This ensures that your cloud assets can meet the latest compliance requirements.
Strengthen the security compliance posture of your Alibaba Cloud infrastructure
If you need to migrate new business or systems to the cloud, Alibaba Cloud helps you analyze the security compliance requirements for cloud environments based on the regulations you are subject to, and design and implement cloud adoption solutions that meet compliance requirements. This way, you can migrate your business and systems to the cloud and implement digital transformation.
Benefits
Strong Expert Team for Security Compliance
All experts in the Alibaba Cloud security compliance team have obtained authoritative industry certifications such as the CISA certification. Each expert has more than 10 years of experience in cloud security compliance and has provided security compliance consulting services for many large enterprises.
Rich Experience in Various Industries
With rich security compliance experience in various industries such as finance and banking, Alibaba Cloud can translate complex regulatory security requirements into detailed security enhancement plans in Alibaba Cloud.Alibaba Cloud has helped many customers meet security compliance requirements in multiple regions.
Comprehensive Security Compliance Solution
With years of practical experience, Alibaba Cloud can help you design and deploy secure cloud infrastructure by using appropriate Alibaba Cloud services based on security compliance requirements in relevant aspects such as prevention detection, recovery, and response.
Service Content
Situation Analysis
Alibaba Cloud can review your current infrastructure in Alibaba Cloud through remote or on-site interview. Then, Alibaba Cloud determines the security compliance requirements and standards that are applicable to you, and provides a preliminary gap analysis between your current cloud infrastructure and the corresponding compliance requirements.
Compliance Requirement Study & Explanation
During the preliminary communication, if you have questions about specific security compliance requirements, such as network and infrastructure security, identity and access control, and security operations, the Alibaba Cloud security compliance team can help you fully understand these requirements by explaining them in great detail.
Solution Design
Alibaba Cloud designs a set of security compliance solutions for you based on the gap between your current cloud infrastructure and the corresponding security compliance requirements combined with relevant factors such as cloud usage, costs, self-management characteristics, and business scalability and continuity.
Technical Verification
After the solution design is complete, Alibaba Cloud performs technical verification to ensure that the solutions are feasible and can be implemented. For example, Alibaba Cloud verifies the compatibility of the solution with the existing cloud infrastructure, the security services, and the IT infrastructure to ensure the feasibility of the solution.
Solution Implementation
If you have purchased implementation services, Alibaba Cloud helps you configure and implement solutions to ensure that the online business system is not affected.
Delivery Verification
Alibaba Cloud confirms the delivery environment and the solution configurations, and assess the environment to ensure that the solutions can be implemented as expected and the cloud systems can address relevant security compliance requirements.
Situation Analysis
Alibaba Cloud can review your current infrastructure in Alibaba Cloud through remote or on-site interview. Then, Alibaba Cloud determines the security compliance requirements and standards that are applicable to you, and provides a preliminary gap analysis between your current cloud infrastructure and the corresponding compliance requirements.
Compliance Requirement Study & Explanation
During the preliminary communication, if you have questions about specific security compliance requirements, such as network and infrastructure security, identity and access control, and security operations, the Alibaba Cloud security compliance team can help you fully understand these requirements by explaining them in great detail.
Solution Design
Alibaba Cloud designs a set of security compliance solutions for you based on the gap between your current cloud infrastructure and the corresponding security compliance requirements combined with relevant factors such as cloud usage, costs, self-management characteristics, and business scalability and continuity.
Technical Verification
After the solution design is complete, Alibaba Cloud performs technical verification to ensure that the solutions are feasible and can be implemented. For example, Alibaba Cloud verifies the compatibility of the solution with the existing cloud infrastructure, the security services, and the IT infrastructure to ensure the feasibility of the solution.
Solution Implementation
If you have purchased implementation services, Alibaba Cloud helps you configure and implement solutions to ensure that the online business system is not affected.
Delivery Verification
Alibaba Cloud confirms the delivery environment and the solution configurations, and assess the environment to ensure that the solutions can be implemented as expected and the cloud systems can address relevant security compliance requirements.
Service Acceptance Criteria
The acceptance criteria are specified in the report of Security Compliance Solution submitted by Alibaba Cloud.
Both parties shall agree on the report content.
Service Process
Prerequisites
The customer must request the service at least 15 business days in advance. Both parties must agree on the service requirements and objectives.Both parties need to clarify the names of the security compliance standards that the project must meet.
Status Survey
Customer
Fill in survey forms to inform Alibaba Cloud of your business system's current status and future plans and your desired project schedule.
Alibaba Cloud
Answer customer questions about security compliance standards. Communicate with the customer to confirm customer’s current status and future plans on the business system.
Consultation Service Performance
Customer
Organize reviews, support infrastructure and business system verification, offer feedback, and support consulting service acceptance.
Alibaba Cloud
Design solutions, perform technical verification, communicate with the customer to resolve problems, and deliver the Compliance Solution of the Consultation Service.
Implementation Service Performance
Customer
Organize reviews, support infrastructure and business system verification, offer feedback, authorize Alibaba Cloud to modify solutions, confirm solution modifications, and check and accept the solution implementation result.
Alibaba Cloud
Design solutions, perform technical verification, communicate with the customer to resolve problems, implement technical solutions, perform delivery testing, and deliver the Implementation Report on the International Security Compliance Consultation Service.
Service Acceptance
Alibaba Cloud delivers the Acceptance Report on the International Security Compliance Consultation Service. Both parties confirm the implementation result and complete the acceptance process.
Pricing
Description
Description
This service provides the international security compliance consultation service package for scenerio requiring consulting services. While on the other hand consultation and implementation are both required, Alibaba Cloud provide international security compliance consultation and implementation service package. Each type of service package has three editions: Basic Edition, Standard Edition, and Advanced Edition. We recommend that you select an appropriate edition based on your business complexity, system complexity, and system scale.In addition, you and Alibaba Cloud can negotiate with each other about the service fees based on the actual project implementation cycle.
Price
Purchasing