Cloud Computing Security Policy Analysis

The ISO Standards explains security guidelines for cloud computing and assists users with the implementation of security controls for maintaining security. ISO added other two standards and provided guidelines in setting SLA, interoperability and the data flow across different clouds.

Organizations use the Cloud in a variety of different service models (SaaS, PaaS, IaaS) and deployment models (Private, Public, Hybrid). There are a number of security issues/concerns associated with cloud computing but these issues fall into two broad categories: Security issues faced by cloud providers (organizations providing software-, platform-, or infrastructure-as-a-service via the cloud) and security issues faced by their customers.In most cases, the provider must ensure that their infrastructure is secure and that their clients’ data and applications are protected while the customer must ensure that the provider has taken the proper security measures to protect their information.

Furthermore, one may look toward such avenues as negotiating terms with their cloud provider and having the cloud provider provide them with their security and compliance requirements (Mishra, D.P., Mishra, R., & Tripathy, 2011, p. 58).

The vendor controls the cloud and their employees may have access to the client’s information. It’s vital that the client organization seek clarity on exactly who has that access and their credentials—level of expertise, exact job title and company responsibility, etc.

The majority of us have been found out about the most cloud security disappointments in which all the cloud innovation organizations are kept on developing, despite everything they endure a similar kind of issues in-house infrastructure's. Distributed computing has turned into a greatest market in the present innovation. In a report of 2016, experts at Gartner anticipated that exchanging to cloud will influence $1 Trillion in Information innovation in the following five years. Cloud administrations showcase has developed to a degree level that it was not a striking level of aggregate it is spending, which was creating new innovations and new businesses which are conceived in the cloud. At the point when cloud administrations are going

A significant paradigm shift is represented by public cloud computing from conventional norms of an organizational data center to a de-parameterized infrastructure which opens gates for potential adversaries to use. Cloud computing should be approached carefully with any emerging information technology area with due consideration to the sensitivity of data. A good planning helps and ensures that the computing environment is secure to the most possible extant and is in compliance with all relevant policies of an organization and makes sure the privacy is maintained.

The scope of this memorandum is to develop a research project on the subject of cloud computing security and specifically the innovative ways developers are trying to secure data in the cloud. I will briefly describe the current cloud computing security structure and discuss measurement protocols that have been developed recently in order to test and measure the effectiveness of cloud security (Yesilyurt, et al.,

According to Prasad, Gyani and Murti (2012), “Cloud computing can be defined as a new style of computing in which dynamically scalable and often virtualized resources are provided as a service over the Internet” (p.7). This statement is from five years ago, and although cloud computing is no longer considered new, this definition still describes what cloud computing means today. Cloud computing being private or public is becoming more primordial in the IT sector due to the numerous advantages it gives to its end users (Basmadjian et al. 2012). Since the interest in cloud computing keeps on increasing, efforts need to continue to evaluate current trends in security and privacy. Cloud computing

The main issue that slows down the growth of cloud computing is security. No matter how many security management tools are released or assurances of reliability are made, complications with data privacy and data protection continue to plague the market. Covering all potential security issues in this article is simply impossible. This is because of the fact that we 're still discovering many of the security issues which challenges cloud computing as it is still a work-in-progress. Cloud Computing is rapidly evolving and hence what we see today may quickly become irrelevant.

The use of cloud computing creates a growing interdependence among both public and private sector entities and the individuals served by these entities. This paper provides a snapshot of the advantages of cloud computing and the risk areas specific to cloud services which clients of cloud services should be aware of. The future of cloud computing is certainly exciting, but moving more of our lives online means we will inevitably have to consider the consequences. Cloud computing means dependence on others and that could limit our privacy because

Cloud computing has formed the basis for future computing. The global computing infrastructure is rapidly moving towards cloud computing. While it is important to take advantages of it by means of deploying it in diversified sectors, the security aspects in a cloud based computing environment should be considered (Ahmed, 2014). Cloud computing is still a new technology in many enterprises. Findings show that most organizations are reluctant to adopt it and the demand to reduce computing cost has led to this great innovation (Agarwal, 2012). A sample size of 150 technical IT people will be used for data collection through questionnaires and interviews and the data collected will be analyzed using SPSS. The purpose of this study is to identify the cloud computing concepts as well as security issues inherent within cloud infrastructure. The adoption of cloud computing is not as complex as many organizations have thought and by moving the applications and hardware out of the organization the user can focus on its core strategies.

In this paper, the authors survey many sources and literature on cloud security issues, namely vulnerabilities, threats, and attacks. A total of 504 articles were look at to gather the data used in this paper. While the authors use this number to say that the research trend is up on mitigating security risks, they also suggest that security is the main priority of most research to the detriment of other areas. They offer no concrete numbers to back up this claim..

The main purpose of this paper is to research requirements for a Cloud Computing Security Policy and to develop a draft policy for the non-profit organization, SNPO-MC which will provide guidance to managers, executives, and cloud computing service providers.

The data stored by the cloud service providers is not only under the policies of the service provider but are also affected by the countries’ legislation policies where the data is stored. This makes the service providers hand over sensitive information in accordance to the countries’ law and its law enforcement requests. If someone subpoena the data stored then the service provider has to hand over that data without any consent from the owner of the data.

Usage of remote servers via internet to store, manage and process data instead of using a personal computer is known as Cloud computing. It’s a set of Information Technology services with the ability to scale up or down their service requirements. Most of the cloud services are provided by a third party service provider. In cloud computing, organizations can utilize IT services without in advance investment. Despite its benefits obtained from the cloud computing, the organizations are slow in accepting it due to security issues and challenges. Security is one of the major problems which hinder the growth of cloud. It’s not wise to handing over the important data to another company; such that clients need to be vigilant in understanding the risks of data infringement in this new environment. This paper discusses a detailed analysis of the cloud computing security issues and challenges. (Ayoleke)