A. Aligining NIST-FISMA standard with the cloud model
The Federal Information Security Management Act
(FISMA) standard [20] defines a framework for managing
the security of information and information systems that
support the operations of the agencies. The framework has
six main phases including: service security categorization,
security controls selection, security controls
implementation, security controls assessment, service
authorization, and security monitoring. Table 1 summarizes
how we aligned FISMA model to fit with the cloud model