Providing Assurance to Cloud Computing through ISO 27001 Certification: How Much Cloud is Secured After Implementing Information Security Standards

Cloud Computing provides a scalable, high availability and low cost services over the internet. Security and privacy concerns have been creating obstacles for the enterprise to entirely shift to cloud. The increase security risks are required to be identified to assist Cloud customers and Cloud Service Providers (CSP) for better information technology (IT) governance. ISO / IEC 27001: 2005 is most widely used security standard by the CSPs to mitigate Cloud risks. In this book, a systematic literature review has been carried out to analyze different Information Security risks relates to Cloud Computing, and identified 59 key risks relating to Cloud Computing. These identified Cloud risks are mapped to selected ISO 27001:2005 standard to know whether this certification attained by a CSP can provide assurance to its customers that the risks relates to the Cloud computing have been adequately mitigated.