Publication Peer Review

This chapter is dedicated to the core aspects of cloud security, with a particular emphasis on the implications surrounding risk, audit, and compliance matters. However, it should be noted that this chapter does not replace the need for thorough training and experience in comprehensive risk, audit, and compliance. For those seeking to delve deeper into these subjects, the Certificate of Cloud Computing Audit Knowledge (CCAK) offered by the CSA is recommended.

When it comes to Cloud Risks, the chapter explores the various categories and evaluates cloud service providers. It touches upon the establishment of cloud risk registries and the implementation of approval processes. Additionally, it references the CSA's Top Threats to provide context on prevalent risks.