{"id":904,"date":"2024-03-08T15:43:35","date_gmt":"2024-03-08T15:43:35","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/cisa-i-nsa-upute-za-sigurnost-cloud-servisa\/"},"modified":"2026-11-04T08:56:02","modified_gmt":"2026-11-04T08:56:02","slug":"cisa-i-nsa-upute-za-sigurnost-cloud-servisa","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/novosti\/cisa-i-nsa-upute-za-sigurnost-cloud-servisa\/","title":{"rendered":"CISA i NSA upute za  sigurnost cloud servisa"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/cisa-nsa-share-best-practices-for-securing-cloud-services\/\" target=\"_blank\" rel=\"noreferrer noopener\">NSA i CISA su izdali upute najboljih praksi za sigurnost usluge u oblaku.<\/a><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Tvrtke rado odabiru uslugu u oblak jer ne moraju same postavljati infrastrukturu. Usluge oblaka moraju biti dobro za\u0161ti\u0107ene jer su \u010desto mete napada zbog podataka koji se na njima nalaze.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>NSA i CISA izdali su pet dokumenata u kojima su opisane najbolje prakse za za\u0161titu usluge u oblaku. Donosimo vam ih u nastavku:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\" type=\"1\"><li><a href=\"https:\/\/media.defense.gov\/2024\/Mar\/07\/2003407866\/-1\/-1\/0\/CSI-CloudTop10-Identity-Access-Management.PDF\">Primjenjujte sigurne prakse upravljanja ra\u010dunima i pristupom usluzi<\/a><\/li><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">U ovom su dokumentu obja\u0161njene uobi\u010dajene prijetnje upravljanju ra\u010dunima u oblaku te najbolje prakse za ubla\u017eavanje tih prijetnji.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Savjeti za upravljanje ra\u010dunima i pristupom, najbolje prakse za konfiguraciju dvofaktorske autentifikacije, pohranjivanje vjerodajnica i podjele ovlasti korisnicima.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/media.defense.gov\/2024\/Mar\/07\/2003407858\/-1\/-1\/0\/CSI-CloudTop10-Key-Management.PDF\">Primjenjujte sigurne prakse upravljanja klju\u010devima<\/a><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Dokument ocrtava najbolje prakse za upravljanje klju\u010devima. Prilikom kori\u0161tenja cloud KMS-a, va\u017eno je razumjeti i dokumentirati zajedni\u010dke odgovornosti.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kako sigurno konfigurirati rje\u0161enja za upravljanje klju\u010devima (KMS).<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/media.defense.gov\/2024\/Mar\/07\/2003407861\/-1\/-1\/0\/CSI-CloudTop10-Network-Segmentation.PDF\">Napravite enkripciju i segmentaciju mre\u017ee<\/a><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Dokument pru\u017ea savjete o \u0161ifriranju podataka prilikom prijenosa i kako najbolje segmentirati usluge u oblaku kako bi mogle me\u0111usobno komunicirati samo ako je to potrebno.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/media.defense.gov\/2024\/Mar\/07\/2003407862\/-1\/-1\/0\/CSI-CloudTop10-Secure-Data.PDF\">Za\u0161titite podatke u oblaku<\/a><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">U dokumentu se nalaze smjernice za \u0161ifriranje podataka u mirovanju, osiguravanje podataka o neovla\u0161tenog pristupa i stvaranje sigurnosnih kopija te plana oporavka.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/media.defense.gov\/2024\/Mar\/07\/2003407859\/-1\/-1\/0\/CSI-CloudTop10-Managed-Service-Providers.PDF\">Umanjite rizik kompromitacije pru\u017eatelja usluga u oblaku<\/a><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Dokument popisuje pet aspekata koje treba uzeti u obzir prilikom kori\u0161tenja pru\u017eatelja usluga u oblaku budu\u0107i da oni ostvaruju visoku razinu pristupa mre\u017ei korisnika, a zbog toga su \u010desto na meti napada\u010da.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iako se ne radi o op\u0161irnim dokumentima, vrijedi ih pro\u010ditati jer mo\u017eda sadr\u017ee ne\u0161to \u0161to dosad niste znali.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Kako bi doprinijeli otkrivanju napada na Azure usluge u oblaku, CISA je pro\u0161le godine izdala alat \u201e<a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/new-cisa-tool-detects-hacking-activity-in-microsoft-cloud-services\/\">Untitled Goose Tool<\/a>\u201c pomo\u0107u kojeg sigurnjaci mogu lak\u0161e prebaciti podatke iz Azure Active Direcotrya, Microsoft Azurea i Microsoft 365 okru\u017eenja.<\/strong><\/p>","protected":false},"excerpt":{"rendered":"<p>NSA i CISA su izdali upute najboljih praksi za sigurnost usluge u oblaku. Tvrtke rado odabiru uslugu u oblak jer ne moraju same postavljati infrastrukturu. Usluge oblaka moraju biti dobro za\u0161ti\u0107ene jer su \u010desto mete napada zbog podataka koji se na njima nalaze. NSA i CISA izdali su pet dokumenata u kojima su opisane najbolje [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1449,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[12],"tags":[],"tema":[],"class_list":["post-904","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/904","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=904"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/904\/revisions"}],"predecessor-version":[{"id":1450,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/904\/revisions\/1450"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1449"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=904"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=904"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=904"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=904"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=904"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}