IT Security Risk Management in the Context of Cloud Computing Toward
This work adds a new perspective to the stream of organizational IT security risk management literature, one that sheds light on the importance of IT security risk perceptions. Based on a large-scale empirical study of Cloud providers located in North Ame
- PDF / 1,424,521 Bytes
- 181 Pages / 419.52 x 595.2 pts Page_size
- 96 Downloads / 205 Views
André Loske
IT Security Risk Management in the Context of Cloud Computing Towards an Understanding of the Key Role of Providers’ IT Security Risk Perceptions With a foreword by Prof. Dr. Peter Buxmann
André Loske Darmstadt, Germany Dissertation, TU Darmstadt, 2015 Hochschulkennziffer D17
ISBN 978-3-658-11339-1 ISBN 978-3-658-11340-7 (eBook) DOI 10.1007/978-3-658-11340-7 Library of Congress Control Number: 2015954946 Springer Vieweg © Springer Fachmedien Wiesbaden 2015 This work is subject to copyright. All rights are reserved by the Publisher, whether the whole or part of the material is concerned, speci¿cally the rights of translation, reprinting, reuse of illustrations, recitation, broadcasting, reproduction on micro¿lms or in any other physical way, and transmission or information storage and retrieval, electronic adaptation, computer software, or by similar or dissimilar methodology now known or hereafter developed. The use of general descriptive names, registered names, trademarks, service marks, etc. in this publication does not imply, even in the absence of a speci¿c statement, that such names are exempt from the relevant protective laws and regulations and therefore free for general use. The publisher, the authors and the editors are safe to assume that the advice and information in this book are believed to be true and accurate at the date of publication. Neither the publisher nor the authors or the editors give a warranty, express or implied, with respect to the material contained herein or for any errors or omissions that may have been made. Printed on acid-free paper Springer Vieweg is a brand of Springer Fachmedien Wiesbaden Springer Fachmedien Wiesbaden is part of Springer Science+Business Media (www.springer.com)
Foreword Cloud Computing is one of the most strongly growing types of IT outsourcing and companies, governments, and non-profit organizations alike are increasingly leveraging this emerging paradigm. For example, SAP recently announced a major strategy change and invests heavily in the expansion of its Cloud business. Most of the SAP applications will be readily available as a service in the near future. However, the acceptance of Cloud solutions by clients lags far behind the predictions of leading market analysts. In the last years, the promised technological and economic advantages of the Cloud were once too often accompanied by serious IT security incidents which not only jeopardized the reputation of the respective service providers but also daunted many clients for the long term. Considering the existence-threatening consequences of IT security incidents in the context of the Cloud, it could be expected that the service providers do everything in their power to mitigate these risks. Nonetheless, a closer look at the security whitepapers of well-established Cloud services in many cases reveals a lack of crucial IT security measures, which are, for example, defined as minimum IT security standards for service providers by the Federal Office for Information Security. Intrigued by t
Data Loading...