Risks Associated with Cloud Computing Adoption Paper As an IT analyst for BallotOnline, a company providing voting solutions to a global client base, you a

Risks Associated with Cloud Computing Adoption Paper As an IT analyst for BallotOnline, a company providing voting solutions to a global client base, you are working to convince the organization to move the current infrastructure to the cloud. Your supervisor and the director of IT, Sophia, has asked you to summarize for the company executives the potential risks and compliance issues that BallotOnline will have to contend with in the transition to the cloud. As an IT analyst for BallotOnline, a company providing voting
solutions to a global client base, you are working to convince
the organization to move the current infrastructure to the cloud.
Your supervisor and the director of IT, Sophia, has asked you to
summarize for the company executives the potential risks and
compliance issues that BallotOnline will have to contend with in
the transition to the cloud.
Step 1: Research Risks Associated
With Cloud Adoption
•
The first step in assessing risk in cloud computing will be
to identify and describe risk concepts and cloud computing
risk factors associated with cloud adoption. As a software
as a service (SaaS) company considering an infrastructure
as a service (IaaS) cloud service provider for your hosting
needs, consider third party outsourcing issues and the
generally accepted best practices for cloud adoption and
review relevant cloud risk case studies. You should also
consider best practices for cloud adoption.
•
As part of the risk management process, identify and
describe other types of risk, such as risks associated with
having a service-level agreement (SLA). An example of a
potential risk could be if your company is obligated to
protect personal information, and then the cloud provider
that you use suffers a security breach exposing that
personal information.
•
Here, identify and describe other types of risks or potential
liability issues that apply to BallotOnline and discuss them
with your colleagues in the Discussion: Risk forum.
•
You will incorporate your research into your final report.
•
Step 2: Identify the Most
Appropriate Guidelines for
Managing Risks
•
In order to identify guidelines applicable to your company’s
industry, you must have an understanding of the different
types of risk management guidelines that exist and are
frequently applicable in cloud environments.
•
There are several cybersecurity standards applicable to
cloud computing environments such as the NIST
Cybersecurity Framework, ISO standards, and US federal
government standards (DoD/FIPS), as well as several major
sets of risk guidelines for dealing with the risks involved.
Also, there are organizations such as the Cloud Security
Alliance (CSA) that recommend best practices for managing
risks.
•
Review the different guidelines and determine which are
most appropriate for BallotOnline. For example, NIST has
responsibility for developing a number of elections industry
guidelineswithin the United States.
•
Identify why those guidelines are most appropriate and
compile these items into a brief (one page or less)
recommendation and justification of your choice. Your
recommendation will also be incorporated into your final
report in the final step.

Purchase answer to see full
attachment