Communications of the ACM
| Hi-index | 0.00 |
Cloud computing is composed of complex systems using many different technologies, services, and delivery mechanisms and growing dramatically. Potential benefits of cloud computing include reducing IT capital expenditure, providing rapid dynamic scaling of resources on a metered basis, as well as transparency related to platforms, storage, transmission and processing of data. However, these benefits come with many potential problems. There is an urgent need to investigate and understand security assurance in cloud computing. Small to medium enterprises (SMEs) may be unable to dedicate specialized staff and other resources to this end. This paper argues that emerging taxonomies, frameworks and guidelines, collectively referred to as instruments in this paper, can facilitate SME enquiry into cloud computing. The instruments have been developed and refined by industry and government consortia. Yet, these instruments are rarely referenced in the academic literature, drawing attention to a continuing gap between industry and academia. The proposal is oriented in the context of a prevailing definition and model of cloud computing. Potential benefits and drawbacks in cloud computing are presented. Organizations responsible for developing the instruments are depicted followed by the systematic approach based upon the cloud instruments. Risk assessment and several of the cloud instruments are central to illuminating cloud computing for SMEs. Additionally, the proposal offers an opportunity for industry and academic collaboration.