NIST SP 800-145
Definition
The 2011 NIST Special Publication that codified the definition of cloud computing as five essential characteristics, three service models (IaaS, PaaS, SaaS) and four deployment models (public, private, hybrid, community). Still the reference cited in Indian regulatory documents and CERT-In advisories.
- Publisher
- NIST
- Published
- 2011
- Essential characteristics
- Five
- Service models
- IaaS, PaaS, SaaS
- Deployment models
- Public, private, hybrid, community
Common questions
Why does the choice of service model (IaaS, PaaS, SaaS) matter for a cloud forensic examination?+
The layer of the stack a customer controls versus the provider controls shifts depending on the service model, so it determines what logs and forensic artifacts the customer can access directly and what must be obtained from the provider through legal process.
Is this 2011 definition still current given how much cloud technology has changed?+
The five essential characteristics and service/deployment model taxonomy have proven durable as a conceptual framework and continue to be cited in current regulatory and advisory documents, even though specific cloud technologies and provider offerings have evolved considerably since 2011.
Why do Indian CERT-In advisories still reference a 2011 US document?+
SP 800-145 functions as a widely accepted, vendor-neutral conceptual baseline for describing cloud computing, so regulators in multiple jurisdictions cite it as common terminology rather than needing to redefine cloud computing from scratch.
Related terms
- BYOK / HYOK
- Bring Your Own Key lets the customer supply the master key to a provider KMS, the provider stores it. Hold Your Own...
- Hypervisor
- Software or firmware that creates and runs virtual machines. Type 1 runs on bare metal (ESXi, Xen, KVM, Hyper-V Server). Type 2...
- MeghRaj
- The Government of India cloud initiative launched in 2014 as the GI Cloud, providing shared cloud infrastructure for central and state government...
- MeitY Empanelment
- The Indian Ministry of Electronics and IT framework that certifies cloud service providers fit for government workloads. AWS, Azure, GCP and OCI...
- Shared Responsibility Model
- The cloud security split where the provider secures the underlying infrastructure (security of the cloud) and the customer secures their data, identity,...