CHAPTER 2

Governance and Enterprise Risk Management

This chapter covers the following topics from Domain 2 of the CSA Guidance:

•   Tools of Cloud Governance

•   Enterprise Risk Management in the Cloud

•   Effects of Various Service and Deployment Models

•   Cloud Risk Trade-offs and Tools

The buck stops here.

—President Harry S. Truman

Although cloud computing didn’t exist when President Truman was in office, his statement is something to remember about your accountability when you outsource to the cloud. You can choose the third-party provider to which you will outsource the building and operational responsibilities of a cloud environment, but you can never outsource accountability. This is why proper governance is critical to your firm ...

Get CCSK Certificate of Cloud Security Knowledge All-in-One Exam Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.