VI. CONCLUSION AND FUTURE WORK
In our work, we gave an overview of the types of
cloud collaborations from the security perspective and
outlined the role of the IS governance in the cloud
collaborations.
We also described advantages and disadvantages of
the existing IS governance mechanisms – cloud risk
assessments, cloud certifications, and trusted security
entities.
Furthermore, we proposed our IS governance driven
cloud brokerage model, which can bring more dynamic in
cloud collaborations by using security labeling of tradable
cloud products instead of requiring long lasting negotiations
and assessment processes on the cloud providers’ side. The
ISGDCB takes over this role, ensures the quality of related
IS governance processes, and provides transparency to
collaborative cloud providers.
Our future work aims at the technical
implementation and simulation of our IS governance driven
cloud brokerage model to identify and improve its weak
points. Furthermore, we plan to analyze security labeling
mechanisms for tradable products and their requirements to
provide a proper security framework for the Pre-Governance
module. Our security labeling for cloud products can support
the standardization of cloud products and cloud markets,
which is necessary for the building of the secure cloud
ecosystem.
Our next challenge is the definition and technical
implementation of event-based patterns to establish an
optimal real-time monitoring of the IS governance processes
and detection of occurring security breaches and violations
during ad hoc collaborations within cloud markets.
ACKNOWLEDGMENT
This work is supported in part by E-Finance Lab e.
V., Frankfurt am Main, Germany
(http://www.efinancelab.com)