Chapter 3

Cloud-Based IT Governance

Mike Whitman Herb Mattord

Cloud computing is not just a new technology. It is a whole new way of providing IT services to an enterprise. There will be technical, security, privacy, and business process and governance issues to be addressed. The cloud computing FUD factor is still dangerously high. Opportunities may be being missed whilst risks may be improperly addressed. Knowledge is essential. All businesses will need to consider whether or not the cloud is for them. Ignorance or denial can only bring grief.

—Paul Williams, ComputerWeekly

Cloud computing is not a new concept; rather, it is a new label for an innovation in networking applied to tried and true outsourcing. Some would say that cloud computing has made the first turn on the hype cycle1 and is moving into the mainstream. Others disagree, but governing the operations of cloud computing initiatives appears to be in the future of quite a few IT practitioners. Put simply, cloud computing is another way to outsource IT capital goods. Leasing access to advanced technologies is a concept older than the computer itself. Now, however, organizations don't have to host and support the leased technology themselves. Organizations can lease the capability (hardware, operating systems, applications, and support) as needed, paying only the type and quantity of resources necessary to accomplish their business goals. No longer will an organization have banks of computers, servers, and applications ...

Get Auditing Cloud Computing: A Security and Privacy Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.