Enterprise Acquisition of Cloud Computing Services
The security team should lead the way to the cloud, never be dragged there. A process for acquiring cloud systems securely is described. A black box SaaS cloud service that provides an energy theft analytics solution is discussed. The security and business aspects of compliance with cross border privacy regulations is described along with some suggested solutions. Security assessment and testing using CSA and NIST frameworks is discussed.