What is it about?
This work shows a proposal of the characteristics Cloud Risk Assessment Models should have and presents the review of the literature considering those characteristics in order to identify current gaps. It shows a ranking of Cloud Cyber Security Risk Assessment models and their degree of compliance with the defined theoretical reference Cloud Risk Assessment model. The review of literature shows that Cloud Cyber Security Risk Assessment approaches leveraging CSA (Cloud Security Alliance) STAR Registry that have into account organization’s security requirements present higher degree of compliance but they still lack risk economic quantification.
Featured Image
Photo by Adi Goldstein on Unsplash
Why is it important?
The myriad of conceptual models, methodologies and frameworks for Cyber Security Risk Assessment in Cloud based on current NIST SP 800:30, ISO 27001, ISO 27005, ISO 30001, ENISA standards could be enhanced by the use of techno-economic models like UTEM, created by the author, in order to conceive more simplified models for effective Risk Assessment and Mitigation closer to the theoretical reference model, available for all cloud models (IaaS, PaaS, SaaS) and easy to use for all stakeholders.
Perspectives
I hope this work will help to improve and simplify the design and application of future Cloud Cyber Security Risk Assessment Models using the Universal Techno-Economic Model (UTEM) created by the author as a building block.
Dr. Carlos Bendicho
Read the Original
This page is a summary of: Cyber Security in Cloud: Risk Assessment Models, July 2021, Springer Science + Business Media,
DOI: 10.1007/978-3-030-80119-9_28.
You can read the full text:
Resources
Contributors
The following have contributed to this page
