Information Security Governance Papers
|
Paper Title
|
Hybrid Clouds Information Security Management and Hybrid CCEs
|
|
The Abstract of The Paper
|
Hybrid Clouds Information Security Management and Hybrid CCEs represent a combination of two or Governance Framework more cloud deployment models (e.g., two public Booz Allen developed the information security clouds, one public and one community cloud) that management and governance framework and has remain unique entities but are bound together by customized and deployed it in a variety of client standardized or proprietary technology that enables environments. This framework is a system of data and application portability throughout the hybrid management and functional processes implemented environment (see Exhibit 4). As a result, hybrid clouds in a standard quality management (or Plan, Do, Check, present a combination of the information security risks Act) cycle of continuous improvement. The framework and governance challenges inherent in the deployment is based on evolving international standards5 and models they combine. A combination of private and planned evolution of the National Institute of Standards community clouds represents the lowest risk; a and Technology (NIST) Risk Management Framework.6 combination of multiple public cloud environments Seven management processes—strategy and planning, presents the greatest information security risks and policy portfolio management, risk management, challenges to legal and regulatory compliance. awareness and training, communication and outreach, compliance and performance management, and Each CCE presents a different profile of benefits and management oversight—comprise this framework and risks that organizations should carefully consider support the functional processes of the Do phase (see before cloud adoption. Organizations should use a Exhibit
|
|
Web Link
|
http://www.slideshare.net/BoozAllen/information-security-governance-government-considerations-for-the-cloud-computing-environment
|
Back To Information Security Governance Papers List