IS Risks Governance for Cloud Computing Service

Abstract

Cloud computing services have become important to IS/IT recently. Cloud service providers (CSPs) support different types of cloud computing services (Infrastructure as a Service, Platform as a Service, and Software as a Service). There are many challenges and concerns in using cloud computing services that may cause many risks. These risks need addressing while using cloud computing. CSPs provide procedures in order to control risk areas while providing their services. There are many studies that assess risks in cloud computing services. They provide evaluation tools and/or frameworks to manage the risk in cloud computing services. Moreover, IS/IT governance is one of the most powerful ways to achieve IS/IT business alignment. The main goals of IS/IT governance are to ensure that the investments in IS/IT generate business values and to mitigate the risks associated with IS/IT. Even though there are various risks in cloud computing services, there is no comprehensive framework to support risk assessment according to user's needs. In this paper, we aim to provide a conceptual framework for governance in cloud computing services. This framework will focus on cloud client (CC) requirements to achieve the governance.