Accountability for cloud and other future Internet services

IT controls in the public cloud: Success factors for allocation of roles and responsibilities

“…The administrators of cloud computing are principally concerned with security and compliance (Modi, Patel, Borisaniya, Patel, & Rajarajan, 2013;Puthal et al, 2015). This introduces a number of cloud-related risks and threats (Khan, 2012;Zissis & Lekkas, 2012), thus leading to a shift in the roles of the staff ISACA, 2011;Pearson et al, 2012) in response to such concerns. In order to manage the increasing business and operational risks inherent in a complex global environment, integrated governance risk and compliance has become one of the most important business requirements for organisations (Vicente & da Silva, 2011).…”

“…(VOA) are high in the public cloud environment (Pearson et al, 2012) where services can be used by competing clients and where the number of cloud users is much higher. Other security threats specifically related to the use of virtualisation in cloud computing lead to concerns like Virtual Machine (VM) theft, VM escape (EMC, 2014) and Hyper Jacking (Jasti, Shah, Nagaraj, & Pendse, 2010) to name a few.…”

“…(EMC, 2014; Hashizume et al, 2013;ISACA, 2011;Pearson et al, 2012) An analysis of the IT outsourcing relationship models and the academic and practical literature on outsourcing in the context of public cloud computing resulted in the induction of twelve factors (Tables 3.2 and 3.3) that impacts upon the allocation of people to roles and responsibilities in a cloud environment. The allocation of roles and responsibilities of IT controls is an ITG decision making mechanism (Sambamurthy & Zmud, 1999).…”

“…(EMC, 2014; Jasti et al, 2010;Liu et al, 2015;Pearson et al, 2012) 10. CSP management  Skills are required for handling activities to evaluate and select CSPs.…”

“…(EMC, 2014; Hashizume et al, 2013;ISACA, 2011;Pearson et al, 2012) 9. Security management  Competencies to handle security concerns in public cloud where services can be used by competing clients and where the number of cloud users is much higher.…”