DESC CSP Security Standard

Dubai Electronic Security Centre Cloud Service Provider Security Standard - Tier 1 License

Overview

Amazon Web Services (AWS) is licensed by Dubai Electronic Security Centre (DESC). This license requires compliance with international security standards: ISO/IEC 27001, ISO/IEC 27002, ISO/IEC 27017, CSA Level 2 STAR; as well as the local DESC Information Security Regulation (ISR). Achieving this certification demonstrates that AWS provides a framework for technical and governance measures to securely serve Government entities in the Emirate of Dubai. AWS worked with an independent third-party auditor to achieve the certification.

DESC CSP logo

Page topics

DESC CSP FAQs
7

DESC CSP FAQs

Open all

DESC CSP license is a certification system to assess if a Cloud Service Provider’s Information Security Management System is properly established, managed and operated. Government and semi-government organizations in Dubai must ensure that any CSP they're using complies with this standard.

DESC certification provides the necessary cybersecurity assurance for Dubai-based government and semi-government entities who wish to host their workloads in the cloud.

The covered AWS services that are within the scope of the DESC certification can be found within AWS Services in Scope by Compliance Program. If you would like to learn more about using these services and/or have interest in other services please contact us.

The DESC certification covers the AWS Middle East (UAE) Region.

The verification audit will take place yearly, with recertification every 3 years.

Yes. The certification can be downloaded via AWS Artifact.

Customers with access to the AWS platform can make use of the DESC ISR CloudFormation Template via the Compliant LandingZone allowing them to deploy a compliant architecture using minimal effort.
Have Questions? Connect with an AWS Business Representative
Exploring compliance roles?
Apply today »
Want AWS Compliance updates?
Follow us on Twitter »