Where is your cloud located, and what laws & regulations apply to you?
stc Cloud Cloud is physically located within the geographic boundaries of the Kingdom of Saudi Arabia. We have cloud data centers in multiple regions and cities. Our Cloud Services are governed by Saudi laws and regulations.
You provide multi-tenant infrastructure; Does that mean competitors and other companies might be able to see my workloads or data?
How do we secure our cloud infrastructure?
What security standards or compliances do you meet or follow?
What security are you as a provider, responsible for, and what security is the customer responsible for?
What are the liabilities if there is an attack and/or data loss?
What steps can I take to protect my data and workloads?
Do I get notified of any breach in my systems and network?
How do you respond to incidents?
Will my data be lost if the cloud service crashes?
How is my data protected from your cloud administrators or insider attacks?
Clouds are attractive targets for hackers, what are your mitigations against such concentrated risk?
Do you have any kind of risk management?
What are your business continuity and disaster recovery capabilities?
Do I get any compensation for periods of service unavailability?
How do I get my data & workload after I exit from your cloud service?