Securing Cloud and Mobility

9Enterprise Cloud Governance

9.1 Security Exposure of Public Cloud Use

The Cloud Security Alliance (CSA) is one of the leading think tanks around cloud security. Its latest white paper, entitled, “Security Guidance for Critical Areas of Focus in Cloud Computing Version 3,”¹ provides a comprehensive set of guidelines for securing cloud implementations across 14 domains. Additionally, CSA also provides a checklist called the Cloud Control Matrix (CCM) Version 1.2² that has 98 rows of control specification to be considered when planning for cloud adoption.

CSA’s methodology is completely appropriate for evaluating public cloud providers in the context of significant IT and business transformation projects, such as:

• Migrating traditional ...