Cloud Computing Security, 2nd Edition

CHAPTER 7

Managing Risk in the Cloud

Michaela Iorga

National Institute of Standards and Technology

Gaithersburg, Maryland

Anil Karmel

C2 Labs, Inc.

Reston, Virginia

Contents

7.1 Introduction

7.2 The Risk Management Framework

7.3 Cloud Provider’s Risk Management Process

7.4 Cloud Consumer’s Risk Management Process

7.5 Summary

References

7.1 Introduction

Due to economies of scale, cloud providers have the potential to offer state-of-the-art cloud ecosystems that are resilient and secure—far more secure than the environments of consumers who manage their own systems. This has the potential to greatly benefit many organizations. In Chapter 3, we discussed the need for businesses to gain visibility into a cloud provider’s service, to build the necessary ...