Protection Profile for SaaS Multi-Tenant Cryptographic Isolation (M02b)
Presented is a customer experience journey in creating a draft Protection Profile for multi-tenant Software-as-a-Service (SaaS) applications running in a commercial public cloud. We define the security problem, threats, and objectives pertaining to ensuring cryptographic isolation between tenants on a shared hardware and software in an operational environment.