(2) Security Control Selection - The selection of the
security controls to be implemented in protecting tenants’
assets has two steps: (a) baseline security controls selection.
The FISMA standard provides a catalogue of security
control templates categorized into three baselines (low,
medium and high). Based on the security categorization of
the tenant or the service we select the initial baseline of
controls that are expected to provide the required level of
security specified by tenants; (b) Tailoring of the security
controls baseline. We tailor the security controls baseline
identified to cover the service possible vulnerabilities,
threats, risks and the other environmental factors as follows: