Grupo Alarcos · Conference paper · 2013

Introducing a Security Governance Framework for Cloud Computing

Oscar Rebollo Martínez, Daniel Mellado Fernández, Eduardo Fernández-Medina Patón

Proceedings of the 10th International Workshop on Security in Information Systems (WOSIS 2013) · 2013 · 4 citations (OpenAlex)

The cloud computing paradigm provides a more efficient way in which to provide IT services, introducing on-demand services and flexible computing resources. The adoption of these cloud services is being hindered by the security issues that arise with this new environment. A global security solution, which deals with the specific particularities of the cloud paradigm, is therefore needed, and literature fails to report on such a solution. As a consequence, in this paper we propose a novel security governance framework focused on the cloud computing environment (ISGcloud). This framework is founded upon two main standards: on the one hand, we implement the core governance principles of the ISO/IEC 38500 governance standard; and on the other hand, we propose a cloud service lifecycle based on the ISO/IEC 27036 outsourcing security draft. The paper includes an overview of the framework and the description of a collection of activities and their related tasks.