HUAWEI CLOUD Recognized for World-Leading Security Assurances with BSI Award for Excellence
Aug 16, 2018
The British Standards Institution (BSI) announced HUAWEI CLOUD as recipient of its much-coveted Award for Excellence for its outstanding achievements in security and contributions to the industry. Quan Zhenjun, Strategic Cooperation Director of BSI Greater China, presented the award.
During the presentation, Director Quan commented: "In just over one year, HUAWEI CLOUD has passed CSA-STAR, ISO 27018, ISO 27001, PCI-DSS, and other prestigious certifications for the full range of its platforms and nodes, demonstrating its world-leading levels in compliance, security, and protection assurance. Augmented with Huawei's time-tested practices, the cloud arm has built security from the ground up in its full-stack of systems to protect user information and promote the overall level of security in the cloud industry."
Full-stack security and protections
To ensure data is always protected, HUAWEI CLOUD has built a full-stack security system and provides more than 10 services and solutions geared specifically to the security context, including everything from application security to management utilities.
Web Application Firewall (WAF) and Vulnerability Scan Service (VSS) keep all site elements fully protected. WAF adopts AI utility to yield the highly sought after real-time detection and protection features in handling website traffic. The service is able to identify malicious requests like SQL injections and defend against even unknown threats. VSS provides full-lifecycle security detection from the coding to online operation phases.
In the network security area, Huawei Anti-DDoS service diverts attack traffic to an IP address with high defense capabilities for cleaning.Services on the origin server remain up and running with the comprehensive reliability assurance available in the configuration.
Host Security Service (HSS) reduces intrusion risks with asset management, vulnerability management, intrusion detection, baseline inspection, anti-tampering, and a long list of other available features.
Database Security Service (DBSS) adopts reverse proxy and machine learning technologies and provides such functions as sensitive data discovery, data masking, database auditing, and injection prevention. Data Encryption Workshop (DEW) is a full-stack data encryption service in the cloud that covers Dedicated Hardware Security Module (Dedicated HSM), Key Management Service (KMS), Key Pair Service (KPS), and a number of other features.
Cloud Bastion Host (CBH), Security Expert Service (SES), Situation Awareness (SA), and other management functions complete the security profile with protection-focused O&M practices, in-depth threat/vulnerability discovery, and security threat awareness.
Compliance milestones
HUAWEI CLOUD continues to build up its vast store of compliance certifications for its cloud platforms and services. In 2017, Huawei earned CSA-STAR gold medal certification and many other high-level recognitions. Huawei continued to stack up more acknowledgements in 2018. The following are some of the achievements so far this year with more to come.
February: HUAWEI CLOUD passes BSIMM security assessment
Huawei became the exclusive cloud service brand in the China to earn the certification. Not only did Huawei pass, its software security capabilities ranked TOP 3 worldwide. The certification is further acknowledgement from a third-party assessor of Huawei’s commitment to full compliance in user privacy protection and cloud service security. Users have the added assurance that HUAWEI CLOUD has been fully vetted and can use all services, platforms, and nodes with complete confidence that their data will remain 100% secure.
March: First in-country vendor with all platforms/nodes placed in scope of PCI-DSS
PCI-DSS is the world's strictest and most authoritative security certification standard for financial institutions. HUAWEI CLOUD passing PCI-DSS certification for all platforms, nodes, and services means that all users can enjoy financial-level security regardless of their industry.
June: HUAWEI CLOUD passes MPS level 4 security certification with flying colors
The test administered by the Ministry of Public Security (MPS) covered all in-country cloud nodes. Huawei’s extensive expertise, accumulated best practices, and long-standing commitment to security with internal standards that exceed the strictest of external certifications made gearing into the scope a rather easy task. HUAWEI CLOUD is able to fully satisfy the compliance requirements of Security 2.0 in delivering full reliability and security in all its cloud services.
July: HUAWEI CLOUD obtains ISO 27018 certification
Alignment with the standard demonstrates that the personal data protection management system in place at HUAWEI CLOUD is able to thoroughly safeguard user information and gives customer-owners complete sovereignty over their data assets. HUAWEI CLOUD is the first major player to advocate delineation of clear service boundaries in which it vows to not access or operate user data or engage in development of profile-/enterprise-specific applications, leaving that to its partners and independent developers so everybody wins in the ecosystem.
August: HUAWEI CLOUD earns advanced-level rating during cyber security review from Central Cyberspace Affairs Commission
The review looked at the broad scope of requirements, covering everything from development, supply chain security, system and communication protections, maintenance, and emergency response and disaster recovery to audit, risk assessment, and continuous monitoring capabilities. The dedicated platforms exclusively reserved for government agency use on HUAWEI CLOUD earned the highest rating possible thanks to the effectiveness of the full lifecycle and robust security and management systems Huawei has put in place.
Huawei Cloud has earned dozens of other internationally recognized certifications, including BSI C5, SOC 2 Type 1, and TCDP 1.0.
Setting that bar that becomes industry standard
HUAWEI CLOUD is known for its high reliability and security. It is enthusiastic in its willingness to share its practices to help form up industry standards. Though being a new business unit, the arm has already participated in the formulation of several national standards related to cloud computing and cloud security. In August, HUAWEI CLOUD and other participants lead by a national university won the China Standard Innovation Contribution Award presented by the Standardization Administration of China. Huawei Cloud is the exclusive cloud service brand to earn the award.
Yang Song, General Manager of Huawei Cloud Security, said that the recognition from such a prestigious global organization like BSI is an honor. He was also quick to point out that there is still a lot of work to be done. Yang commented: "We will continue to adhere to our customer-centric approach in service delivery and constantly improve the level of security for our customers in the cloud. We are completely committed to promoting an everybody-wins ecosystem and we will continue to share our excellent security practices in support of prospering the industry."