INFORMATION SECURITY GOVERNANCE FRAMEWORKS IN CLOUD COMPUTING AN OVERVIEW

Abstract

adoption and transition of information systems to cloud is the implementation of a strategic proactive information security management and governance framework. Information security governance framework can help inform agency leaders, information security professionals, and information security governance participants on how to move into cloud environment without excessive information security risk or potential legal and regulatory compliance failures. However, very few sound ISG frameworks exist that can effectively guide most organizations in their ISG endeavors. This paper provides an overview of current information security governance frameworks in cloud computing, and demonstrates the stages and activities of a security governance framework. The paper also introduces the current efforts of evaluating these frameworks.