Information security : federal guidance needed to address control issues with implementing cloud computing : report to congressional requesters.

Format:

Book

Government document

Author/Creator:

United States. Government Accountability Office

Contributor:

Wilshusen, Gregory C.

Language:

English

Subjects (All):

Cloud computing--Government policy--United States.

Cloud computing.

Administrative agencies--Information technology--Security measures--United States.

Administrative agencies.

Data protection--Government policy--United States.

Data protection.

Computer security--Government policy--United States.

Computer security.

Computer security--Government policy.

Data protection--Government policy.

United States.

Physical Description:

1 online resource (ii, 48 pages) : illustrations

Other Title:

Federal guidance needed to address control issues with implementing cloud computing

Cloud computing

Place of Publication:

[Washington, D.C.] : U.S. Govt. Accountability Office, [2010]

Summary:

Cloud computing, an emerging form of computing where users have access to scalable, on-demand capabilities that are provided through Internet-based technologies, has the potential to provide information technology services more quickly and at a lower cost, but also to introduce information security risks. Accordingly, GAO was asked to (1) identify the models of cloud computing, (2) identify the information security implications of using cloud computing services in the federal government, and (3) assess federal guidance and efforts to address information security when using cloud computing. To do so, GAO reviewed relevant publications, white papers, and other documentation from federal agencies and industry groups; conducted interviews with representatives from these organizations; and surveyed 24 major federal agencies. GAO is recommending that the Office of Management and Budget, General Services Administration, and the Department of Commerce take several steps to address cloud computing security, including completion of a strategy, consideration of security in a planned procurement of cloud computing services, and issuance of guidance related to cloud computing security.

Notes:

Title from cover screen (GAO, viewed July 2, 2010).

"May 2010."

Includes bibliographical references.

"GAO-10-513."

OCLC:

645687281