JUCS - Journal of Universal Computer Science 18(6): 798-815, doi: 10.3217/jucs-018-06-0798
A Systematic Review of Information Security Governance Frameworks in the Cloud Computing Environment
expand article infoOscar Rebollo, Daniel Mellado§, Eduardo Fernández-Medina
‡ Ministry of Labour and Immigration, Madrid, Spain§ University of Castilla-La Mancha, Ciudad Real, Spain
Open Access
Abstract
The senior management of any enterprise that plans to start using Cloud Computing services needs to define a clear governance strategy with regard to the security of its information assets. This paper presents a systematic literature review whose objective is to seek existing Information Security Governance frameworks that may assist companies with these functions. The analysis of the frameworks extracted is complemented with a set of comparative criteria that consider the particularities of Cloud Computing when dealing with security governance issues.
Keywords
information security governance, cloud computing, systematic literature review