130 likes | 234 Views
33.RISK MANAGEMENT AROUND LEVERAGING THE CLOUD
E N D
The primary issues of governance and enterprise risk management in Cloud Computing concern the identification and implementation of the appropriate organizational structures, processes, and controls to preserve effective information security governance, risk management, and compliance. Source: Unknown / Missing
Cloud Service Models & Risks • Not a “one-size-fits-all” proposition • Service model options provide choices, depending on needs. • For each service model, there are differently balanced options to mitigating risk Source: Unknown / Missing
Security Departments, Risks & Cloud • Existing institutional processes that ensure the identification and remediation of risk will in many cases not be adequate as higher education moves into the cloud.” • To meet regulatory and compliance requirements, in every case organizational policies require careful review and consideration must be given to whether the choice of a particular model is valid.
Risk Management & Agility • Risk management is not about predicting changes as much as it is the capacity to respond and react to them. • Robust external information systems that are plugged into trends in the economy, technology, government and social arenas. • Constantly creating scenarios based on this information • Models that characterize risk in terms of probability and probable causation. • Systems for documenting and tracking assumption