The new-and-improved Cloud Profile v2.0 includes:

• Alignment with the NIST CSF v2.0 and CRI Profile v2.0
• A shared responsibility checklist implementation tool
• Cloud Implementation Guidebook with examples of effective evidence
• Mappings to global cloud frameworks in the UK and EU

These documents were developed with the assistance of the Financial Services Sector Coordinating Council (FSSCC), the Cloud Security Alliance, key partners from the UK and EU, and CSPs.

The Cloud Profile was released by CRI in July 2024 at a U.S. Treasury press conference with the Office of the Comptroller of the Currency (OCC) and the Consumer Financial Protection Bureau (CFPB) and the Financial Services Sector Coordinating Council (FSSCC) in July 2024 to “serve as a common tool developed for effective practices in secure cloud implementation” for the sector.

The CRI Cloud Profile (v2.0) and Cloud Profile Guidebook provide a suite of tools to make it easier for financial institutions and cloud service providers (CSPs) to protect the financial ecosystem.

These tools enable companies to:

• Develop a mutual understanding of expectations between financial institutions, CSPs, control owners, and cloud implementers within the same firm.
• Help all parties speak the same language.
• Simplify regulatory engagements, setting a baseline understanding of requirements and responsibilities between financial institutions and CSPs.
• Standardize contractual terms and language, leading to efficiencies.
• Highlight key deployments for targeted analysis for cloud launch.
• Address the full life cycle of the CSP and customer relationship.