Download (Registration Required, 217K)
  Download (French; Registration Required, 205K)
  Download (Portuguese; Registration Required, 206K)
  Download (Spanish; Registration Required, 202K)

  Provide feedback on this document
  Visit the Cloud Computing Knowledge Center community

  View News Release

Cloud computing is an emerging technology that may help enterprises meet the increased requirements of lower total cost of ownership (TCO), higher return on investment (ROI), increased efficiency, dynamic provisioning and utility-like pay-as-you-go services. However, many IT professionals are citing the increased risks associated with trusting information assets to the cloud as something that must be clearly understood and managed by relevant stakeholders. In addition to the white paper, information on cloud computing, and understanding how a cloud initiative could align with a business, is provided by the following resources:

The book issued in July 2011 contains the audit program:

• IT Control Objectives for Cloud Computing:  Controls and Assurance in the Cloud

Listen to the Cloud Webcast presented by Peet Rapp and Phil Lageschulte

• Cloud Computing:  Business Benefits with Security, Governance and Assurance Perspectives

Additional Information on Cloud Computing:

• Study on Cloud Security in Japan (733K)
• Cloud Computing Management Audit/Assurance Program
• Cloud Security Alliance
• NIST Cloud Computing Resource Center
• ENISA
• Jericho Forum
• Wikipedia
• Infoworld
• Cloud Standards Coordination Wiki
• Cloud Security Blog