The auditor's guide to ensuring correct security and privacy practices in a cloud computing environment Many organizations are reporting or projecting a significant cost savings through the use of cloud computing--utilizing shared computing resources to provide ubiquitous access for organizations and end users. Just as many organizations, however, are expressing concern with security and privacy issues for their organization's data in the 'cloud.' Auditing Cloud Computing provides necessary guidance to build a proper audit to ensure operational integrity and customer data protection, among other aspects, are addressed for cloud based resources. Provides necessary guidance to ensure auditors address security and privacy aspects that through a proper audit can provide a specified level of assurance for an organization's resources Reveals effectivemethods for evaluating the security and privacy practices of cloud services Acloud computing reference for auditors and IT security professionals, as wellas those preparing for certification credentials, such as Certified Information Systems Auditor (CISA) Timely and practical, Auditing Cloud Computing expertly provides information to assist in preparing for an audit addressing cloud computing security and privacy for both businesses and cloud based service providers. INDICE: Preface. Acknowledgements. Chapter 1 Introduction to Cloud Computing. History. Defining Cloud Computing. Cloud Computing Services Layers. Roles in Cloud Computing. Cloud Computing Deployment Models. Challenges. In Summary.Chapter 2 Cloud Based IT Audit Process. The Audit Process. Control Frameworksfor the Cloud. Recommended Controls. Risk Management and Risk Assessment. In Summary. Chapter 3 Cloud Based IT Governance. Governance in the Cloud. Understanding the Cloud. Security Issues in the Cloud. Governance. IT Governance in the Cloud. Implementing and Maintaining Governance for cloud Computing. Implementing Governance as a New Concept. In Summary. Chapter 4 System and Infrastructure Lifecycle Management for the Cloud. Every Decision Involves Making a Tradeoff. Example: business continuity/disaster recovery. What about Policy and Process Collisions? The System and Management Lifecycle Onion. Mapping Control Methodologies onto the Cloud. ITIL. COBIT. NIST. CSA. Verifying Your Lifecycle Management. Always Start with Compliance Governance. Verification Method. Illustrative Example Risk Tolerance. Special Considerations for Cross-Cloud Deployments. The Cloud Provider's Perspective. Questions that Matter. In Summary. Chapter 5 Cloud-Based IT Service Delivery and Support. Beyond Mere Migration. Architected to Share, Securely. Single-Tenant Offsite Operations (Managed Service Providers). Isolated-Tenant Application Services (Application Service Providers). Multi-Tenant (Cloud) Applications Defining Cloud Solutions and their Characteristics. What Makes a Cloud Solution? Understanding the Characteristics. The Cloud Security Continuum and a Cloud Security Reference Model. Cloud Characteristics, Data Classification and Information Lifecycle Management. Cloud Characteristics and Privacy and the Protection of Information Assets. Information Asset Lifecycle and Cloud Models. Data Privacy in the Cloud. Data Classification in the context of the cloud. Regulatory and Compliance implications. A Cloud Information Asset Protection and Privacy Playbook. In Summary. Chapter 7 Business Continuity and Disaster Recovery. Business Continuity Planning and Disaster Recovery Planning Overview. Problem Statement. The Planning Process. Augmenting Traditional Disaster Recovery with Cloud Services. Cloud Computing andDisaster Recovery: New Issues to Consider. Cloud Computing Continuity. AuditPoints to Emphasize. In Summary. Chapter 8 Global Regulation and Cloud Computing. What is Regulation? FISMA Federal Information Security Management Act. SOX Sarbanes/Oxley Law. HIPAA Health Information Privacy Accountability Act. GLBA Graham/Leach/Bliley Act. Privacy Laws. Why do Regulations Occur? Some Key Takeaways. The Real World A Mixing Bowl. Some Key Takeaways. The Regulation Story. Privacy. International Export law and Interoperable Compliance. Effective Audit. Identifying Risk. In Summary. Chapter 9 Cloud Morphing. Shaping the Future of Cloud Computing Security and Audit. Whe
- ISBN: 978-0-470-87474-5
- Editorial: John Wiley & Sons
- Encuadernacion: Cartoné
- Páginas: 208
- Fecha Publicación: 17/08/2011
- Nº Volúmenes: 1
- Idioma: Inglés