CLD-007 Cloud Services
Who is the cloud provider?¶
The cloud provider supplies or operates the service, but the visible brand may not identify the legal or organisational entity controlling every relevant record.
Evidence and questions to consider¶
- exact product and application name;
- website and account domain;
- tenant or organisation name;
- billing and legal notices;
- reseller or managed-service relationships;
- which entity controls each record and request process.
Keep the sources separate¶
A provider record, customer-administrator report, application screen and device artefact may describe related activity without proving the same thing. Preserve exact identifiers, dates, times and time zones, and test shared access, delegation, automation, compromise and changing account control.
Key takeaway
Direct enquiries to the entity that controls the specific record needed, not merely the first familiar company name.