Governance, Risk, and Compliance in Cloud Scenarios

Abstract

Cloud computing is changing the way organizations approach technology and its infrastructure. However, in spite of its attractiveness, cloud computing can be seen as a threat in terms of compliance. Given its intrinsic distributed nature, regulations and laws may differ and customers and cloud providers must find a way to balance increasing compliance pressures with cloud computing benefits. In this paper, the authors present a framework aimed to help organizations to cope with compliance aspects in their cloud-oriented environments. Built upon current literature on the topic and qualitative approaches, the framework has been implemented in two organizations. Results from its contribution are encouraging, leading to adopter organizations to less reported compliance violations and higher contribution of cloud computing to overall quality of service and organizational compliance management.

Board engagement with digital technologies: A resource dependence framework

“…The existing research on boards of directors needs to extend for a more holistic view, addressing the impacts of DT on businesses operating in an increasingly digitalized world. Board members' acknowledgement of and advocating for the benefits of DT is pivotal in assuring a brand's reputation, and undertaking adequate risk assessments of the algorithmic direction (Kellogg et al, 2020) of the workforce, cloud computing migration (Brandis et al, 2019) and big data governance (Abbady et al, 2019).…”

IS Risks Governance for Cloud Computing Service

“…Also, they focused on negotiation for control and legal terms after that and developing SLA [24]. K. Brandis et al developed a framework to show the effect of using standards in cloud computing in mitigating risks according to five aspects which are legal, organizational, technical, cultural, and financial in order to use the cloud without risk in these aspects [25]. S. M. Faizi et al divided cloud computing security domains into storage, software, network security, trust management, Internet and services, compliance, legal, and virtualization [26].…”

Cloud Computing Trends: A Literature Review

“…Researchers have offered several definitions for the term IT governance. Brandis, Dzombeta, Colomo-Palacios, and Stantchev (2019) defined IT governance as "IT governance is about the configuration of organizational resources to ensure effective management" (p. 1). An important aspect of IT governance is the alignment of IT objectives with corporate strategy.…”