VI. CONCLUSION AND FUTURE WORK
In our work, we gave an overview of the types of
cloud collaborations from the security perspective and
outlined the role of the IS governance in the cloud
collaborations.
We also described advantages and disadvantages of
the existing IS governance mechanisms – cloud risk
assessments, cloud certifications, and trusted security
entities.
Furthermore, we proposed our IS governance driven
cloud brokerage model, which can bring more dynamic in
cloud collaborations by using security labeling of tradable
cloud products instead of requiring long lasting negotiations
and assessment processes on the cloud providers’ side. The
ISGDCB takes over this role, ensures the quality of related
IS governance processes, and provides transparency to
collaborative cloud providers.
Our future work aims at the technical
implementation and simulation of our IS governance driven
cloud brokerage model to identify and improve its weak
points. Furthermore, we plan to analyze security labeling
mechanisms for tradable products and their requirements to
provide a proper security framework for the Pre-Governance
module. Our security labeling for cloud products can support
the standardization of cloud products and cloud markets,
which is necessary for the building of the secure cloud
ecosystem.
Our next challenge is the definition and technical
implementation of event-based patterns to establish an
optimal real-time monitoring of the IS governance processes
and detection of occurring security breaches and violations
during ad hoc collaborations within cloud markets.
ACKNOWLEDGMENT
This work is supported in part by E-Finance Lab e.
V., Frankfurt am Main, Germany
(http://www.efinancelab.com)
VI. CONCLUSION AND FUTURE WORKIn our work, we gave an overview of the types ofcloud collaborations from the security perspective andoutlined the role of the IS governance in the cloudcollaborations.We also described advantages and disadvantages ofthe existing IS governance mechanisms – cloud riskassessments, cloud certifications, and trusted securityentities.Furthermore, we proposed our IS governance drivencloud brokerage model, which can bring more dynamic incloud collaborations by using security labeling of tradablecloud products instead of requiring long lasting negotiationsand assessment processes on the cloud providers’ side. TheISGDCB takes over this role, ensures the quality of relatedIS governance processes, and provides transparency tocollaborative cloud providers.Our future work aims at the technicalimplementation and simulation of our IS governance drivencloud brokerage model to identify and improve its weakpoints. Furthermore, we plan to analyze security labelingmechanisms for tradable products and their requirements toprovide a proper security framework for the Pre-Governancemodule. Our security labeling for cloud products can supportthe standardization of cloud products and cloud markets,which is necessary for the building of the secure cloudecosystem.Our next challenge is the definition and technicalimplementation of event-based patterns to establish anoptimal real-time monitoring of the IS governance processesand detection of occurring security breaches and violations
during ad hoc collaborations within cloud markets.
ACKNOWLEDGMENT
This work is supported in part by E-Finance Lab e.
V., Frankfurt am Main, Germany
(http://www.efinancelab.com)
การแปล กรุณารอสักครู่..