CLOUD COMPUTING INFORMATION SECURITY ASSURANCE

dr.sc. Haris Hamidović

Abstract: If sensitive company data are stored, processed or transmitted in a cloud environment, data protection and other laws will apply to that environment too. The allocation of responsibility 

between client and provider for managing security controls does not exempt a client from the responsibly of ensuring that their sensitive data is properly secured according to applicable law requirements. In this regard, it is necessary to get appropriate assurance that cloud service provider information security management system covers the security of the computers and computing environment that it uses in processing sensitive company data. This paper addresses some of the security issues related to business in cloud environment.

Key words: Information security, Legal requirements, Cloud Computing