Security concerns regarding Cloud Computing
Gartner defines cloud computing as a style of computing where massively scalable IT-related capabilities are provided “as a service” using Internet technologies to multiple external customers.
Besides the benefits, there are risks associated with cloud computing, e.g.:-
User administration occurs over the Internet, if there is no encrypted line or secure line, communication over Internet happens in clear text.
Usage of browsers e.g. IE, Firefox may have vulnerabilities if not updated with latest security patches.
Auditors need to review the criticality of application data sent over the cloud, cloud vendor's policy on vulnerability and commitment to security breaches.
As per other outsourcing risk, auditor needs to determine whether an independent auditor's report or audit rights is included in the contract or service level agreement.
Besides the benefits, there are risks associated with cloud computing, e.g.:-
User administration occurs over the Internet, if there is no encrypted line or secure line, communication over Internet happens in clear text.
Usage of browsers e.g. IE, Firefox may have vulnerabilities if not updated with latest security patches.
Auditors need to review the criticality of application data sent over the cloud, cloud vendor's policy on vulnerability and commitment to security breaches.
As per other outsourcing risk, auditor needs to determine whether an independent auditor's report or audit rights is included in the contract or service level agreement.
Labels: cloud computing
posted by man at 12:12 AM
0 comments
