Providing Assurance to Cloud Computing through ISO 27001 Certification: How Much Cloud is Secured After Implementing Information Security Standards

Tariq, Muhammad Imran

ISBN 10: 1503085902 / ISBN 13: 9781503085909

Published by CreateSpace Independent Publishing Platform, 2015

About this Item

Seller Inventory # ABLIING23Mar2716030256326

Bibliographic Details

• Title: Providing Assurance to Cloud Computing through ISO 27001 Certification: How Much Cloud is Secured After Implementing Information Security Standards
• Publisher: CreateSpace Independent Publishing Platform
• Publication Date: 2015
• Language: English
• ISBN 10: 1503085902
• ISBN 13: 9781503085909
• Binding: Soft cover
• Condition: New

About this title

Synopsis

Cloud Computing provides a scalable, high availability and low cost services over the internet. Security and privacy concerns have been creating obstacles for the enterprise to entirely shift to cloud. The increase security risks are required to be identified to assist Cloud customers and Cloud Service Providers (CSP) for better information technology (IT) governance. ISO / IEC 27001: 2005 is most widely used security standard by the CSPs to mitigate Cloud risks. In this book, a systematic literature review has been carried out to analyze different Information Security risks relates to Cloud Computing, and identified 59 key risks relating to Cloud Computing. These identified Cloud risks are mapped to selected ISO 27001:2005 standard to know whether this certification attained by a CSP can provide assurance to its customers that the risks relates to the Cloud computing have been adequately mitigated.

About the Author

Muhammad Imran Tariq is PhD Scholar at Superior University, Lahore. He is Lecturer (Computer Science) and Deputy Director (Commerce) at Higher Education Department, Lahore, Pakistan, where he has been since 2006. He received a Bachelor of Computer Science in 2003, M.Sc Computer Science in 2008 and Master of Science in Computer Science in 2013. Moreover, he has MCSE, MCP+I, A+ and CCNA certifications. He has 14 years teaching and administration experience in different Private and Government sectors. He is author of SLA based Information Security Metrics in Cloud Computing book. His research interests include Cloud Computing, Information Security, ISO / IEC 27001:2013, NIST SP 800-53 Rev. 4, COBIT 5, Service Level Agreement, Information Security Metrics, Cloud Risks and its mitigation techniques, Wireless Networks Security and Risk Management. His previous works Wireless Security and Threat, Designing Software Maintenance Service Level Agreement in Outsource Contract, Towards Information Security Metrics Framework for Cloud Computing and SLA Based Information Security Metric for Cloud Computing from COBIT 4.1 Framework was published in difference conferences and journals. In Cloud Security Alliance, the Author worked as member / contributor of Research group for the development of Clod Control Matrix V.3.0. Furthermore, now in days he is working with Cloud Security Alliance in Virtualization Working Group.