ESP CCN Virtualization Best Practices

On Sep. 13, ESP CCN issued CCN-CERT BP/15 re virtualization.

  • ESP CCN-CERT BP/15 best practices in virtualization issued, also in English, French.
  • The guide, dated Aug. 2021, was published in Spanish, English, French on Sep. 13.
  • Overview
  • Virtualization is term used for multiple technologies; in computing, it is understood as recreation of physical (hardware) or logical (software) resource by means of hypervisor that allows the execution of more than one environment at the same time.
  • In virtual machine environment, hypervisor allows simultaneous use of hardware for over 1 operating system, controls physical layer (RAM, CPU, disk) that can be accessed only by it and presents virtual machines with a compatible hardware interface.
  • Virtualization rise came with cloud use where resource sharing system indispensable.
  • Although there were already multiple systems from many manufacturers, the development and progress of these systems has recently increased exponentially.
  • Currently systems like Citrix's XenServer, Dell's VMware ESXi, Oracle's Oracle VM Server, Oracle's VirtualBox and Microsoft's Hyper-V, among others, are available.
  • Then guide delves into details of Microsoft approach, different types of virtualization.
  • When categorization is based on virtualized element, main virtualization possibilities are hardware, applications or user sessions.
  • Focus of guide is on virtualization of hardware both with soft and hard partitioning.
  • In turn covers security challenges in virtualization, types of virtualized networks, hyper-V best practices (with tables, graphics and other educational elements), etc.
  • Towards the end it contains a catalog of 10 recommendations for firms to follow.

Regulators ESP CCN
Entity Types B/D; Bank; Corp; IA; Ins; Inv Co
Reference Gd, CCN-CERT BP/15, 9/13/2021
Functions Operations; Outsourcing; Privacy; Risk; Technology
Countries Spain
Products Banking; Corporate; Fund Mgt; Insurance; Securities
Regions EMEA
Rule Type Guidance
Rule Date 9/13/2021
Effective Date 9/13/2021
Rule Id 115743
Linked to
Reg. Last Update 9/13/2021
Report Section EU

Last substantive update on 09/14/2021