Identifying the security risks associated with governmental use of cloud computing

Government Information Quarterly

Volumn 27, Issue 3, 2010, Pages 245-253

  Paquette, Scott ^a   Jaeger, Paul T ^a   Wilson, Susan C ^a  

^a UNIVERSITY OF MARYLAND   (United States)

Author keywords

Cloud computing; Governmental computing; Grid computing; IT governance; IT security; Risk management

Indexed keywords

EID: 77953614890     PISSN: 0740624X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.giq.2010.01.002     Document Type: Article

References (74)

1. Anderson C. The end of theory: the data deluge makes the scientific method obsolete. Wired 2008, (February 27, 2009 Retrieved June 12, 2009 from http://www.wired.com/science/discoveries/magazine/16-07/pb_theory).
2. Armburst M., Fox A., Griffith R., Joseph A.D., Katz R., Konwinski A., et al. Above the clouds: a Berkley view of cloud computing 2009, (Retrieved June 12, 2009, from http://radlab.cs.berkeley.edu/).
3. Aubert B.A., Patry M., Rivard S. A Framework for information technology outsourcing risk management. The DATABASE for Advances in Information Systems 2005, 36(4):9-28.
4. Baker S. Google and the wisdom of the clouds 2007, (Retrieved February 27, 2009, from http://www.msnbc.msn.com/id/22261846/).
5. Balding C. U.S. Government creates cloud computing security group 2009, (Retrieved April 15, 2009, from http://cloudsecurity.org/2009/03/04/us-government-creates-cloud-computing-security-group/).
6. Beizer D. DISA debuts self-service computing 2008, (Retrieved Aril 15, 2009, from http://fcw.com/Articles/2008/07/14/DISA-debuts-selfservice-computing.aspx).
7. Beizer D. USA.gov will move to cloud computing 2009, Retrieved April 15, 2009, from http://www.fcw.com/Articles/2009/02/23/USAgov-moves-to-the-cloud.aspx.
8. Bernstein P.L. Against the gods: The remarkable story of risk 1998, John Wiley & Sons, Inc., New York, NY.
9. Bertot J., Jaeger P.T., Shuler J.A., Simmons S.N., Grimes J.M. Reconciling government documents and e-Government: Government information in policy, librarianship, and education. Government Information Quarterly 2010, 26:433-436.
10. Brodkin J. Loss of customer data spurs closure of online storage service "the link up" 2008, Retrieved March 14, 2009, from http://www.networkworld.com/news/2008/081108-linkup-failure.html?hpg1=bn.
11. Burroughs J.M. What users want: assessing government information preferences to drive information services. Government Information Quarterly 2009, 26:203-218.
12. Buyya R., Yeo C.S., Venugol S. Market-oriented cloud computing: vision, hype, and reality for delivering IT services as computing utilities. Paper presented at the 10th IEEE International Conference on High Performance Computing and Communications 2008.
13. Chen Y.-C., Perry J. Outsourcing for e-Government: managing for success. Public Performance and Management Review 2003, 26(4):404-421.
14. Clarke T.D., Zmud R.W., McCray G.E. The outsourcing of information services: transforming the nature of business in the information industry. Journal of Information Technology 1995, 10(221-237).
15. Cohen R. The U.S. federal government defines cloud computing. Cloud Computing Journal 2009, (Retrieved June 10, 2009, from http://cloudcomputing.sys-con.com/node/954002).
16. Condon S. Experts: policy could make, break cloud computing 2009, Retrieved August 7, 2009, from http://news.cnet.com/8301-13578_3-10201461-38.html.
17. Cooney M. Lots of excuses, little use of encryption on government mobile computers 2008, Retrieved August 7, 2009, from http://www.networkworld.com/community/node/30482.
18. Crandall R., Waverman L. Who pays for universal service? 2000, Brookings Institute, Washington, D.C.
19. Crouhy M., Galai D., Mark R. The essentials of risk management 2006, McGraw-Hill, Toronto, ON.
20. Cubrilovic N. Letting data die a natural death 2009, Retrieved October 13, 2009, from http://www.washingtonpost.com/wp-dyn/content/article/2009/10/11/AR2009101100109.html?nav=hcmodule.
21. Daconta M. Cloud computing and five other IT fads that aren't always right for government 2009, Retrieved May 4, 2009, from http://gcn.com/Articles/2009/08/10/Reality-Check-IT-fads-not-fit-for-government.aspx.
22. Dibbern J., Goles T., Hirschhiem R., Jayatilaka B. Information systems outsourcing: a survey of analysis of the literature. The DATABASE for Advances in Information Systems 2004, 35(4):1-97.
23. Gabel D. Broadband and universal service. Telecommunications Policy 2007, 31:347-358.
24. Goodwin B. Social networks and government 2008, Retrieved April 2, 2009, from http://www.usa.gov/webcontent/technology/social_networks.shtml.
25. Gourley B. Wall Street crisis, enterprise technology and cloud computing 2008, Retrieved May 6, 2009, from http://ctovision.com/2008/09/wall-street-crisis-enterprise-technology-and-cloud-computing/.
26. Greenberg A. If the clouds burst 2009, Retrieved June 11, 2009, from http://www.forbes.com/2009/06/04/cloud-computing-nist-intelligent-technology-cloud-computing.html.
27. Grubesic T.H. The spatial taxonomy of broadband providers in the United States: 1999-2004. Telecommunications policy 2006, 32:212-233.
28. Hand E. Head in the clouds. Nature 2007, 449:963.
29. Harbick R., Ritchey R., Fontecilla R. Cloud computing: myth or reality? 2009, Retrieved April 17, 2009, from http://gcn.com/articles/2009/03/06/commentary-cloud-computing.aspx.
30. Harris D. DISA CIO: Cloud computing "something we absolutely have to do" 2008, Retrieved May 6, 2009, from http://www.on-demandenterprise.com/features/DISA_CIO_Cloud_Computing_Something_We_Absolutely_Have_to_Do_31270309.html.
31. Hart K. Tech firms seek to get agencies on board with cloud computing. Washington Post 2009, A13. March 31, 2009.
32. Hoover J.N. GSA backs away from federal cloud CTO appointment 2009, Retrieved June 9, 2009, from http://www.informationweek.com/news/showArticle.jhtml?articleID=217800386.
33. Horrigan J.B. Use of cloud computing applications and services 2008, Retrieved February 27, 2009, from http://www.pewinternet.org.
34. Jackson J. Agencies tap online channels to spread the word on swine flu outbreak 2009, Retrieved May 5, 2009, 2009, from http://gcn.com/Articles/2009/05/04/UpDate1-CDC-swine-flu-networking.aspx?s=gcndaily_050509&Page=1.
35. Jaeger, P. T. & Bertot, J. in press. Designing, implementing, and evaluating user-centered and citizen-centered e-Government. International Journal of Electronic Government Research.
36. Jaeger P.T., Bertot J., McClure C.R., Rodriguez M. Public libraries and Internet access across the United States: a comparison by state from 2004 to 2006. Information Technology and Libraries 2007, 26(2):4-14.
37. Jaeger P.T., Lin J., Grimes J.M. Cloud computing and information policy: computing in the policy cloud?. Journal of Information Technology & Politics 2008, 5(3):269-283.
38. Jaeger P.T., Lin J., Grimes J.M., Simmons S.N. Where is the cloud? Geography, economics, environment, and jurisdiction in cloud computing. First Monday 2009, 14(5).
39. Jaeger P.T., McClure C.R., Bertot J. The e-rate program and libraries and library consortia. Information technology and libraries 2005, 24(2):57-67.
40. Kash W. USA.gov, GobiernoUSA.gov move into the Internet cloud 2009, Retrieved February 15, 2009, from http://gcn.com/articles/2009/02/23/gsa-sites-to-move-to-the-cloud.aspx?s=gcndaily_240209.
41. Klems M. Merrill Lynch estimates "cloud computing" to be $100 billion market 2008, (Retrieved March 14, 2009, from http://markusklems.ulitzer.com/node/604936).
42. Knowlton B. White House names first Chief Information Officer. The New York Times 2009, (Retrieved from http://thecaucus.blogs.nytimes.com/2009/03/05/white-house-names-first-chief-information-officer/).
43. Kubicek H. Next generation FoI between information management and Web 2.0. Paper presented at the 2008 International Conference on Digital Government Research, Montreal, QC 2008.
44. Lipowicz A. Living NOAA's Second Life 2009, (Retrieved March 6, 2009, from http://www.fcw.com/Articles/2009/03/23/Eric-Hackathorn-NOAA.aspx).
45. Mack E.A., Grubesic T.H. Forecasting broadband provision. Information economics and policy 2009, 21:57-67.
46. 1998, Managing business risks in the information age, The Economist Intelligence Unit, New York, NY.
47. Mark R. Do federal agencies belong in cloud computing networks? 2008, Retrieved April 30, 2009, from http://www.eweek.com/c/a/Government-IT/Should-Feds-Climb-on-the-Cloud/.
48. Mell P., Grance T. Perspectives on cloud computing and standards 2009, from http://www.scribd.com/doc/13427395/Effectively-and-Securely-Using-the-Cloud-Computing-Paradigm.
49. Military training: Actions needed to more fully develop the Army's strategy for training modular brigades and address implementation challenges. (2007). (GAO-07-936). Washington, D.C.
50. Miller E. The Verterans Administration goes Web 2.0 2009, Retrieved June 11, 2009, from http://blog.sunlightfoundation.com/taxonomy/term/Facebook/.
51. Miller R. Lightning strike triggers Amazon EC2 outage 2009, Retrieved June 11, 2009, from http://www.datacenterknowledge.com/archives/2009/06/11/lightning-strike-triggers-amazon-ec2-outage/.
52. Miller R. Obama tech team envisions federal cloud 2009, Data center knowledge, from http://www.datacenterknowledge.com/archives/2009/01/20/obama-tech-team-envisions-federal-cloud/.
53. O'Hara C. Virtual learning gets second wind from Second Life 2009, Retrieved May 6, 2009, from http://fcw.com/articles/2009/05/04/feature-virtual-learning.aspx.
54. Obama B. Revocation of certain executive orders concerning regulatory planning and review 2009, Retrieved August 1, 2009, from http://www.whitehouse.gov/the_press_office/Revocation-Of-Certain-Executive-Orders-Concerning-Regulatory-Planning-And-Review/.
55. Obama B. 2009, January 21 Retrieved May 1, 2009, from http://www.whitehouse.gov/the_press_office/Transparency_and_Open_Government/.
56. Ortutay B. Twitter service restored after hacker attack. The Baltimore Sun 2009, Retrieved from http://www.baltimoresun.com/technology/bal-twitter-outage-0806,0,2941226.story.
57. Priebe T., Welch A., MacGilvray M. The U.S. Government Printing Office's initiatives for the federal depository library program to set the stage for the 21st century. Government Information Quarterly 2008, 25:48-56.
58. Quinn A.C. Keeping the citizenry informed: early congressional printing and 21st century information policy. Government Information Quarterly 2003, 20:281-295.
59. Recommended security controls for federal information systems and organziations. (2009) Retrieved August, 2009, from http://csrc.nist.gov/publications/nistpubs/800-53-Rev3/sp800-53-rev3-final.pdf.
60. Richey W. Swiss Bank UBS to name American clients with secret accounts 2009, Retrieved August 9, 2009, from http://news.yahoo.com/s/csm/20090731/ts_csm/aubs.
61. Rosston G.L., Wimmer B.S. The "state" of universal access. Information Economics and Policy 2000, 12:261-283.
62. Shuler J.A. A critique of universal service, e-rate, and the chimera of the public's interest. Government Information Quarterly 1999, 16:359-369.
63. Shuler, J. A., Jaeger, P. T., & Bertot, J. in press. Implications of harmonizing e-Government principles and the federal depository library program to set the stage for the 21st Century. Government Information Quarterly.
64. Standards for Security Categorization of Federal Information and Information Systems. (2004), from http://csrc.nist.gov/publications/fips/fips199/FIPS-PUB-199-final.pdf.
65. Stoneburner G., Goguen A., Feringa A. Risk management guide for information technology systems. Washington, DC 2004.
66. Straub D., Welke R. Coping with systems risk: security planning models for management decision making. MIS Quarterly 1998, 22(4):441-469.
67. United States Federal Budget. (2010). Washington, DC.
68. Weill P., Ross J.W. IT Governance 2004, Harvard Business School Press, Boston, MA.
69. Weinrich N. The CDC's Second Life 2006, Retrieved August 1, 2009, from http://www.social-marketing.com/blog/2006/11/cdcs-second-life.html.
70. NPR 2009, Will cloud computing work in the White House, Retrieved August 21, 2009, from http://www.npr.org/templates/story/story.php?storyId=98578519.
71. Wyld D. The blogging revolution: government in the age of Web 2.0 2008, Retrieved April 2, 2009, from http://www.businessofgovernment.org/pdfs/WyldReportBlog.pdf.
72. Wyld D. Moving to the cloud: an introduction to cloud computing in government E-Government Series 2009, 82. IBM Center for the Business of Government.
73. Youseff L., Butrico M., Da Silva D. Toward a unified ontology of cloud computing. Paper presented at the Grid Computing Environments Workshop at GCE 2008, Austin, Texas 2008.
74. Zetter K. Medical records: stored in the cloud, sold on the open market. Wired Magazine 2009, Retrieved August 21, 2009 from http://www.wired.com/threatlevel/2009/10/medicalrecords.