Recommendations on hosting sensitive information systems in the cloud

In order to meet this challenge, ANSSI has developed specific recommendations for cloud hosting, identifying the most appropriate cloud offerings depending on the type of information system used, the sensitivity of the data, and the level of associated threat.

These recommendations serve as an effective decision-making tool for entities which may be considering a switch to cloud hosting for their restricted information systems, for the sensitive IS of critical operators and service providers, and for information systems of critical importance (SIIV). It should however be noted that ANSSI’s recommendations do not apply to classified information systems and cloud solutions are not suitable for all information systems. These recommendations are consistent with the “cloud at the centre” (“cloud au centre“) doctrine.