Cloud computing risk management, governance and compliance

Cloud computing risk management, governance and compliance processes are evolving as organizations increasingly turn to cloud services for storage, infrastructure and software needs, rather than running their own. But in moving to the cloud, enterprises also potentially expose themselves to myriad threats. In this SearchCompliance handbook, we examine how compliance officers reduce this risk.

In the first story, Christine Parizo speaks with practitioners and experts about how to maintain security and compliance as part of a larger cloud computing risk management strategy, and offers a checklist of questions to ask your cloud providers about their GRC readiness. In our second piece, Ben Cole examines how services and tools have evolved in the face of regulatory and cloud risk management concerns. In our final piece, Karen Goulart discusses how enterprise cloud strategies reflect a renewed focus on security, and looks at why cost reduction is no longer the bottom line in cloud adoption.