Auditing Cloud Computing

Ben Halpert 지음

Wiley 2011년 07월 05일 출간

작품소개

책소개

The auditor's guide to ensuring correct security and privacy practices in a cloud computing environmentMany organizations are reporting or projecting a significant cost savings through the use of cloud computingm-utilizing shared computing resources to provide ubiquitous access for organizations and end users. Just as many organizations, however, are expressing concern with security and privacy issues for their organization's data in the quot;cloud.quot; Auditing Cloud Computing provides necessary guidance to build a proper audit to ensure operational integrity and customer data protection, among other aspects, are addressed for cloud based resources.Provides necessary guidance to ensure auditors address security and privacy aspects that through a proper audit can provide a specified level of assurance for an organization's resourcesReveals effective methods for evaluating the security and privacy practices of cloud servicesA cloud computing reference for auditors and IT security professionals, as well as those preparing for certification credentials, such as Certified Information Systems Auditor (CISA)Timely and practical, Auditing Cloud Computing expertly provides information to assist in preparing for an audit addressing cloud computing security and privacy for both businesses and cloud based service providers.

목차

Preface xiiiChapter 1: Introduction to Cloud Computing 1History 1Defining Cloud Computing 2Elasticity 2Multitenancy 3Economics 3Abstraction 3Cloud Computing Services Layers 4Infrastructure as a Service 5Platform as a Service 5Software as a Service 6Roles in Cloud Computing 6Consumer 6Provider 6Integrator 7Cloud Computing Deployment Models 8Private 8Community 8Public 9Hybrid 9Challenges 9Availability 10Data Residency 10Multitenancy 11Performance 11Data Evacuation 12Supervisory Access 12In Summary 13Chapter 2: Cloud-Based IT Audit Process 15The Audit Process 16Control Frameworks for the Cloud 18ENISA Cloud Risk Assessment 20FedRAMP 20Entities Using COBIT 21CSA Guidance 21CloudAudit/A6&m-The Automated Audit, Assertion, Assessment, and Assurance API 22Recommended Controls 22Risk Management and Risk Assessment 26Risk Management 27Risk Assessment 27Legal 28In Summary 29Chapter 3: Cloud-Based IT Governance 33Governance in the Cloud 36Understanding the Cloud 36Security Issues in the Cloud 37Abuse and Nefarious Use of Cloud Computing 38Insecure Application Programming Interfaces 39Malicious Insiders 39Shared Technology Vulnerabilities 39Data Loss/Leakage 40Account, Service, and Traffic Hijacking 40Unknown Risk Profile 40Other Security Issues in the Cloud 41Governance 41IT Governance in the Cloud 44Managing Service Agreements 44Implementing and Maintaining Governance for Cloud Computing 46Implementing Governance as a New Concept 46Preliminary Tasks 46Adopt a Governance Implementation Methodology 48Extending IT Governance to the C

출판사 서평

"To summarize, the book is a good review of the current situation in the field. Every CISO and CIO should be aware of the developments in the cloud regardless of the intention of actually implementing its use." (Blog.itgovernance.co.uk, April 2012)

작가정보

저자(글) Ben Halpert

저자 :

저자 :

저자 :

저자 :

저자 :
저자 :
저자 :
BEN HALPERT, CISSP, is an information security researcher and practitioner. He has keynoted and presented sessions at numerous conferences and was a contributing author to Readings and Cases in the Management of Information Security and the Encyclopedia of Information Ethics and Security. Halpert writes a monthly security column for Mobile Enterprise magazine as well as an IT blog (www.benhalpert.com). He is also an adjunct instructor and on the advisory board of numerous colleges and universities.