Discussion: Risk

· What types of risks apply to your organization, and by extension this project?

· Does your company have an obligation to protect personal information of customers or their customers?

· What are the risks associated with a contracted cloud provider suffering a security breach, which exposes customers’ personal information?

· What mitigation measures could you take to protect your organization from potential liability?

· Are there any other potential liability issues that apply to your organization?

Your goal should be to convey this critical information to your colleagues in a concise, yet thorough manner. You and your colleagues should then engage in dialogue to provide each other with feedback. This feedback may be used to improve your summary before adapting it for your final report in the last step of

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

Discussion: Security Issues

· What network security issues could you encounter?

· What (if any) data classification issues are there to consider?

· What identity management issues need to be considered?

· How would you share responsibilities for securing your project with the Service Provider?

· How does Cloud security compare to on-prem security?

· Are there any other potential cloud security issues that you should identify?

Your goal should be to convey this critical information to your colleagues in a concise, yet thorough manner. You and your colleagues should then engage in dialogue to provide each other with feedback. This feedback may be used to improve your summary before adapting it for your final report in the last step of

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

Discussion: Privacy Issues

· What are the European Union (EU) privacy requirements?

· Which privacy requirements will apply to your project and why?

· What are your recommendations for complying with these requirements?

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

Discussion: US Legal System and Cyberspace Law

· What is cyberspace law?

· How does cloud computing relate to cyberspace law?

· What types of legal regimes are available for resolving disputes in cyberspace?

· What types of substantive legal issues do you think could arise if your organization moves to the cloud?

· Identify the critical areas that your cloud hosting agreements should contain to avoid potential cyberspace law issues.

· Discuss the regulation of cyberspace and how this will affect your organization if you move to the cloud computing model.

· How do you recommend handling contracting mechanisms such as electronic agreements and digital signatures to avoid any potential issues?  For example, should you handle this with an organizational policy establishing approval authorities, and communicating that only approved personnel can click on these agreements or digitally sign contracts?