risk management

Asia Cloud Conference Manila unfolds risk and legal issues
At the recently concluded Asia Cloud Conference held in Manila, CloudRisk Asia CEO Thomas Shaw stressed that a risk-aware approach helps private and public sector companies move forward in their cloud strategies.
by: Eden Estopace 01-Dec-2011
Survey: 52% businesses not yet implement cloud risk controls
Ernst & Young's new survey findings show that 48% of the global respondents finds implementation of cloud computing is a difficult challenge, and more than half of them (52%) have not implemented any controls to mitigate the risks associated with cloud computing.
by: Asia Cloud Forum staff 18-Nov-2011
ISACA launches new book on cloud controls and assurance
ISACA's new book "IT Control Objectives for Cloud Computing: Controls and Assurance in the Cloud" book advises how the use of cloud impacts business processes, and how proper governance can effectively manage increasing risks, handle myriad regulations, and adapt effectively.
by: Asia Cloud Forum staff 22-Jul-2011

Cloud legal issues II: Potential legal liabilities

This second part of "Cloud legal issues" series discusses the role of in-house legal counsels in the process of cloud service contract negotiations, and the potential legal liabilities that lawyers should bear in mind in three unfortunate circumstances.
by: Carol Ko 13-Jul-2011

Cloud legal issues I: 'Must-do' items in contract negotiations

Cloud users are advised to self-assess and understand the relevant threats, controls, parameters, and metrics in any cloud SLA. Perform a risk assessment of each cloud vendor based on a wide range of criteria: legal, technical, business, service, security, governance, audit and response.
by: Carol Ko 11-Jul-2011

9 contractual terms to reduce cloud contract risks

When assessing cloud offerings, IT procurement or sourcing managers need to understand what can be negotiated relative to risk elements, what they need to pressure cloud providers to offer, and what will likely not be negotiated.
by: CFO Innovation Asia Staff 24-May-2011

Dealing with the top 10 risks in public cloud computing

Some lists of top public cloud computing risks are sweeping and philosophical. Most include some combination of the following items: network security, identity management, compliance, data integration, vendor lock-in, vendor viability, manageability, availability, shared resources and legal ambiguity.
by: Laura Smith, Features Writer, SearchCIO.com 04-Mar-2011
Challenges migrating to the cloud: an AON story
Suk-wah Kwok, CIO for AON Hong Kong discusses the drivers that led the company to deploy a cloud solution, the criteria used to selection the right vendor partner for them, and the challenges the organization faced as it went about migrating to the cloud.
by: 24-Jan-2011
IDC: Business-as-a-Service to fuel private cloud adoption
In 2011, the public sector in APEJ will continue to explore Business-as-a-Service, resulting in wider adoption of private clouds. BaaS is a cloud model that helps to deliver an end-to-end cloud computing solution expected to articulate clear business/operationality benefits and viability.
by: Carol Ko 13-Jan-2011
Cloud Security Alliance launches audit & compliance tools
The Governance, Risk Management and Compliance Stack toolkit will help the key stakeholders of the cloud assess private and public clouds against industry established best practices, standards and critical compliance requirements.
by: Asia Cloud Forum staff 18-Nov-2010