“…Meanwhile, the shared infrastructure in a cloud computing environment exposes severe information security risks, making many organizations hesitate to migrate to a cloud environment. Cloud security control can be categorized into four major types: preventive, deterrent, detective, and corrective control mechanisms (Paul and Aithal 2019). In their chapter, Yoo and Li develop a framework of information security management in the cloud computing environment.…”