Cloud Policy: Organizational Controls and Cyber Safety for Cloud Computing Service Usage
Overview
This document outlines an organizational cloud policy designed to establish cyber safety controls and protect organizational data. It addresses the advantages and risks of cloud computing adoption, defining scope, compliance requirements, and disciplinary measures for policy violations across all departments and external cloud services.
What this coursework covers
- Purpose and benefits of cloud policy implementation for organizational cyber safety
- Policy scope covering all departments and external cloud services including SaaS, IaaS, and PaaS
- Cloud service authorization requirements and IT manager responsibilities for security compliance
- Compliance measurement through audits, monitoring, and periodic assessments
- Non-compliance consequences and exceptions approval process
Preview
Cloud Policy
Overview
There are several advantages that result from the use of cloud within organizations. These benefits include low costs, enhanced performance, and rapid service delivery. In spite of the benefits, lack of proper controls exposes people and institutions to threats such as loss of data, unauthorized access, and other cybercrimes.
Purpose
The purpose of the cloud policy is to warrant cyber safety for the organization and employees. It is essential to create controls for workers while using cloud services within the organization. Notably, this is essential to protect the confidentiality of the organization’s information as well as the security of the corporate network.
Scope
The policy covers workers in all departments of the organization with no exceptions. Moreover, the policy also relates with all external cloud services such as document storage, cloud-based email, SaaS, IaaS, PaaS, and other cloud-based services used within the organization. It is important to contact the IT department to confirm whether the service you are using is cloud-based on not.
Policy
- Cloud computing services used to fulfil job responsibilities must be authorized by the IT manager. The manager is responsible for ensuring that the service is secure, private, and all the management factors involved will be adequately handled.
- Services that require users to accept certain terms and conditions of service must be reviewed by the IT manager and permitted.
- Any cloud service used must comply with the acceptable use policy of the organization, including the Computer Usage Policy, Internet Usage Policy, and other relevant organizational regulations.