Re: Cyber Essentials Plus
> since most cloud providers do not seem to be certified to anything;
But not all. Eg. https://www.microsoft.com/en-us/trustcenter/Compliance/default.aspx
Includes one for UK.GOV (towards the bottom).
[This is no way a suggestion that Azure is "secure" (whatever that means), just that there is at least one provider that is getting certified.]
Biting the hand that feeds IT
