Securing multi-cloud by auditing

Abstract

An increasing variety of organisations sources their knowledge, applications and business processes to the cloud, empowering them to realise money and technical advantages because of on-demand provisioning and pay-per-use valuation. However, organisations are still hesitant to adopt cloud services thanks to security, privacy, and dependability issues relating to provisioned cloud services likewise as doubts regarding the trustiness of their cloud service supplier. Cloud service certifications (CSC) are smart suggests that to deal with these issues by establishing trust, and increasing transparency of the cloud market. Cloud service certifications commit to assuring a high level of security and submission. However, considering that cloud services are a part of Associate in Nursing dynamic setting, multi-year validity periods might place ensure dependability of such certifications. Continuous auditing (CA) of chosen certification criteria is needed to assure ceaselessly reliable and secure cloud services, and thereby increase the trustiness of certifications. CA of cloud services remains in its infancy and reveal that almost all of the prevailing methodologies aren't applicable for third party auditing functions. The propose an abstract CA design and highlight vital elements and processes that got to be enforced.