The Security pillar includes the ability to protect data, systems, and assets to take advantage of cloud technologies to improve your security. Key topics include confidentiality and integrity of data, identifying and managing who can do what with privilege management, protecting systems, and establishing controls to detect security events.

There are seven design principles for security in the cloud:

• Implement a strong identity foundation
• Enable traceability
• Apply security at all layers
• Automate security best practices
• Protect data in transit and at rest
• Keep people away from data
• Prepare for security events