Advisory Note: Cloud Provider Assurance - 70586
Report Details
Can an organization trust an IT service provided through the Cloud? A survey by KuppingerCole showed that “Cloud security issues (84.4%) and Cloud privacy and compliance issues (84.9%) are the major inhibitors preventing organizations from moving to a private Cloud.” The answer to this question can be found in the old Russian maxim, which was often quoted by President Ronald Regan: “trust but verify”.
Cloud services are outside the direct control of the customer organization, and their use places control of the IT service and infrastructure in the hands of the CSP (Cloud Service Provider). This fits with the KuppingerCole IT Paradigm for IT Governance. A governance based approach allows trust in the CSP to be assured through a combination of internal processes, standards and independent assessments.
The governance process starts with a clear understanding of the business requirements for the service. The risks and the technical, compliance and legal requirements follow directly from these business needs. These business needs, technical requirements and risks form the basis for what needs to be assured.
| Date | Title | Price | |
|---|---|---|---|
| Oct 02, 2012 |
Advisory Note: Cloud Provider Assurance - 70586Can an organization trust an IT service provided through the Cloud? A survey by KuppingerCole showed that “Cloud security issues (84.4%) and Cloud privacy and compliance issues (84.9%) are the major inhibitors preventing organizations from moving to a private Cloud.” The answer… |
€495.00
excl. VAT
|
Get Access
|
INVOICE
|
|||
Latest Related Reports
Discover KuppingerCole
KuppingerCole Select
Register now for KuppingerCole Select and get your free 30-day access to a great selection of KuppingerCole research materials and to live trainings.
Blog
Future-Proofing Your Cybersecurity Strategy
It’s May 25 today, and the world hasn’t ended. Looking back at the last several weeks before the GDPR deadline, I have an oddly familiar feeling. It seems that many companies have treated it as another “Year 2000 disaster” - a largely imaginary but highly publicized issue [...]
Latest Insights
Hot Topics
Spotlight
Learn more
Compliance, Risk & Security
Whether public, private or hybrid clouds, whether SaaS, IaaS or PaaS: All these cloud computing approaches are differing in particular with respect to the question, whether the processing sites/parties can be determined or not, and whether the user has influence on the geographical, qualitative and infrastructural conditions of the services provided. Therefore, it is difficult to meet all compliance requirements, particularly within the fields of data protection and data security. The decisive factors are transparency, controllability and influenceability of the service provider and his [...]