usnistgov / FederalProfile-8259A

4 stars 8 forks source link

Potentially move bullet/language about cloud to LAI #56

Closed jmarron-acd closed 4 years ago

jmarron-acd commented 4 years ago

There is a bullet in Data Protection/Secure Storage that says: Ability to secure IOT device data stored locally or in remote storage areas (e.g., cloud, server, etc.).

Mike had a comment before: I would put cloud under “external connections,” which includes language about policy adherence by third parties. In either case, I think breaking our cloud from internal data storage as separate would be better than including in DP.

Possible resolutions to this issue: 1) Break data locally stored and data stored remotely into two separate bullets 2) Also potentially move the remote data storage (cloud) to LAI/External connections. I'm not sure about this suggestion since my opinion is that the bullet is primarily about protecting the data, not connections to external providers.