Cloud Computing Security

CHAPTER 8

Cloud Security Risk Management

Marco Cremonini

Università degli Studi di Milano

Crema (CR), Italy

CONTENTS

8.1  Introduction

8.2  What Is Risk?

8.2.1  Risk and Uncertainty

8.2.2  Indirect Measurements and Metrics

8.2.3  Contractual Obligations and Uncertainty

8.3  Definitions of Risk

8.3.1  Definitions in Information Technology Standards

8.4  Risk and Cloud

8.4.1  Security Risks Not Specific to Cloud Computing

8.4.2  Cloud-Specific Risks

8.4.2.1  Fate Sharing

8.4.2.2  Mutual Auditability

8.4.2.3  Insider Threats

8.5  Cloud Computing Risk Assessment and Management

8.5.1  Security SLA for Cloud Services

8.5.1.1  Cloud SLA

8.5.1.2  Cloud Audit and Assessment

8.5.1.3  Cloud Security SLA

8.6  Summary

Further Readings

References

8.1  INTRODUCTION ...