Skip to main content

AWS Cloud Security

DESC CSP Security Standard

Dubai Electronic Security Centre Cloud Service Provider Security Standard - Tier 1 License

Overview

Amazon Web Services (AWS) is licensed by Dubai Electronic Security Centre (DESC). This license requires compliance with international security standards: ISO/IEC 27001, ISO/IEC 27002, ISO/IEC 27017, CSA Level 2 STAR; as well as the local DESC Information Security Regulation (ISR). Achieving this certification demonstrates that AWS provides a framework for technical and governance measures to securely serve Government entities in the Emirate of Dubai. AWS worked with an independent third-party auditor to achieve the certification.

Missing alt text value

Page topics

FAQs

Open all

DESC CSP license is a certification system to assess if a Cloud Service Provider’s Information Security Management System is properly established, managed and operated. Government and semi-government organizations in Dubai must ensure that any CSP they're using complies with this standard.

The covered AWS services that are within the scope of the DESC certification can be found within AWS Services in Scope by Compliance Program. If you would like to learn more about using these services and/or have interest in other services please contact us.

The verification audit will take place yearly, with recertification every 3 years.

DESC certification provides the necessary cybersecurity assurance for Dubai-based government and semi-government entities who wish to host their workloads in the cloud.

Yes. The certification can be downloaded via AWS Artifact.

The DESC certification covers the AWS Middle East (UAE) Region.

Customers with access to the AWS platform can make use of the DESC ISR CloudFormation Template via the Compliant LandingZone allowing them to deploy a compliant architecture using minimal effort.