Security and control in the cloud

Information Security Journal

Volumn 19, Issue 6, 2010, Pages 299-309

  Julisch, Klaus ^a   Hall, Michael ^b  

^a IBM RESEARCH ZURICH   (Switzerland)

^b Forbes Sinclair   (Spain)

Author keywords

Cloud computing; ISMS; Iso27001; Security

Indexed keywords

CLOUD PROVIDERS; CLOUD SERVICES; COMPUTING RESOURCE; CONTROL ENVIRONMENT; DATA ASSETS; INFORMATION OFFICERS; INFORMATION SECURITY MANAGEMENT SYSTEMS; ISMS; ISO/IEC; ISO27001; ON-DEMAND SERVICES; SECURITY; SECURITY CONTROLS;

COMPUTER SYSTEMS; DISTRIBUTED DATABASE SYSTEMS; ENVIRONMENTAL MANAGEMENT; INFORMATION MANAGEMENT; SECURITY OF DATA; STANDARDIZATION; WEB SERVICES;

CLOUD COMPUTING;

EID: 79952969005     PISSN: 19393555     EISSN: 19393547     Source Type: Journal    
DOI: 10.1080/19393555.2010.514654     Document Type: Article

References (32)

1. AICPA. (1992). Reports on the processing of transactions by service organizations (SAS 70). American Institute of Certified Public Accountants, Inc
2. Amazon. (2008). Amazon EC2 service level agreement. Available from: http://aws.amazon.com/ec2-sla/
3. Amazon. (2009). Amazon Web services: Overview of security processes. Available from: http://aws.amazon.com/security
4. Amazon. (2010). AWS completes SAS70 Type II audit. Available from: http://aws.amazon.com/about-aws/whats-new/2009/11/11/aws-completes-sas70-type-ii-audit/
5. Archer, J., Boehme, A., Cullinane, D., Kurtz, P., Puhlmann, N., and Reavis, J. (2010). Top threats to Cloud computing V1.0. Cloud Security Alliance
6. Bayuk, J. L. (2004). Stepping through the IS audit: What to expect, how to prepare (2nd edition). ISACA
7. Brunette, G. and Mogull, R. (2009). Security guidance for critical areas of focus in cloud computing V2.1. Cloud Security Alliance
8. Carr, N. (2008). The big switch: Rewiring the world, from Edison to Google. New York: Norton & Company
9. Catteddu, D. and Hogben, G. (2009). Cloud computing: Benefits, risks, and recommendations for information security. Heraklion, Greece: ENISA
10. Chong, F. and Carraro, G. (2006). Architecture strategies for catching the long tail. Microsoft Corporation
11. Cullen S. and Willcocks, L. P. (2003). Intelligent IT outsourcing: Eight building blocks to success. Butterworth-Heinemann
12. Datamonitor (2009). Can cloud computing help enterprises weather the economic storm? Gauging the disruptive potential of a new model of IT consumption. Report DMTC2267, Datamonitor
13. Gens, F., Mahowald, R. P., and Villars, R. L. (2009). IDC cloud computing 2010 an IDC update. Doc #TB20090929. IDC
14. Gewald, H. and Helbig, K. (2006). A governance model for managing outsourcing partnerships. Proceedings of the 39th Hawaii International Conference on System Sciences, 4-7 January 2006
15. Goertzel, K. M., Schmidt, H. L. M., Winograd, T., and Mosteller, K. (2009). Cloud computing security. Booz Allen Hamilton
16. Goldman Sachs. (2009). Independent insight: IT spending survey. New York: Goldman Sachs
17. Google. (2010A). Google Apps service level agreement. Available from: http://www.google.com/apps/intl/en/terms/sla.html
18. Google. (2010B). SAML single sign-on (SSO) service for Google Apps. Available from: http://code.google.com/intl/ja/googleapps/domain/sso/saml_reference_implementation.html
19. Hax, A. C. and Majluf, N. S. (1982). Competitive cost dynamics: The experience curve. Interfaces, 12, 50-61
20. Intacct. (2010). Intacct buy with confidence. Available from: http://us.intacct.com/why_intacct/buy_with_confidence.php
21. ISO/IEC. (2005A). Information technology security techniques information security management systems requirements. ISO/IEC, 27001
22. ISO/IEC. (2005B). Information technology security techniques information security management systems guidelines. ISO/IEC, 27002
23. Maiwald, E. (2009). The issue of SaaS security. Burton Group's Security and Risk Management Blog. Available from: http://srmsblog.burton-group.com/2009/09/the-issue-of-saas-security.html
24. Mather, T., Kumaraswamy, S., and Latif, S. (2009). Cloud security and privacy: An enterprise perspective on risks and compliance (theory in practice). CA: O'Reilly Media
25. OpenCrowd. (2009). Cloud computing cloud landscape. Available from: http://www.opencrowd.com/views/cloud.php
26. Reeves, D. (2009A, April). Cloud computing: Transforming IT. Burton Group
27. Reeves, D. (2009B, July 8). Cloud infrastructure secrecy: A competitive advantage or disadvantage. Burton Group Blog
28. Roth, C. (2008). SaaS implementation survey: Where, when, and how to use SaaS. Burton Group
29. Salesforce. (2008). Saleforce.com is first major SaaS vendor to achieve ISO 27001 certification. Available from: https://www.salesforce.com/uk/company/news-press/press-releases/2008/05/080507-2.jsp
30. Schadler, T. (2009). Should your email live in the Cloud? A comparative cost analysis. Forrester Research
31. States, L. and Lindquist, D. (2008). IBM's perspective on cloud computing. Presentation, October
32. Thompson, C., Griffin, J., and Bialick, T. (2010). New Level of Trust and Transparency. Pricewasterhousecoopers