Video | Agriculture | Confidence | Economy | Energy | Employment | Finance | Media | Property | RBNZ | Science | SOEs | Tax | Technology | Telecoms | Tourism | Transport | Search


New ISACA Guide Facilitates Secure Migration to the Cloud

New ISACA Guide Facilitates Secure Migration to the Cloud

Transborder legal requirements and disaster recovery plans among key considerations

Wellington, New Zealand (21 September 2012) – Cloud computing continues to have a significant impact on the way enterprises operate, and companies are increasingly migrating to the cloud as a result of its value. But security and data privacy concerns are critical issues to consider before adopting cloud-computing services. Security Considerations for Cloud Computing, a new book from global nonprofit IT association ISACA, presents practical guidance for IT and business professionals to help them securely move to the cloud.

The book, available as a complimentary download for ISACA members and at $75 for nonmembers, details how cloud computing will gain importance as both the cloud and cloud-service-provider markets mature. Particularly in times of cost optimisation and economic downturn, the cloud can be perceived as a more cost-effective approach to technological support of the enterprise.

Before migrating to the cloud however, ISACA recommends considering the following factors, which can increase risk:
Legal transborder requirements—Cloud-service providers are often transborder, and different countries have different legal requirements, especially concerning personal or private information.
Absence of disaster-recovery plans—The absence of proper backup procedures implies a high risk for any enterprise.
Physical security of computer resources—Physical computer resources can be shared with other entities in the cloud. If physical access to the cloud-service provider’s infrastructure is granted to one entity, that entity could potentially access information assets of other entities.
Data disposal—Proper disposal of data is imperative to prevent unauthorized disclosure.
Cloud provider authenticity—Although communications between the enterprise and the cloud provider can be secured with technical means, it is important to verify the identity of the cloud provider to ensure that it is not an imposter.

Just as cloud computing is about more than just IT infrastructures, platforms and applications, the developers of Security Considerations for Cloud Computing stress that the decision to operate in the cloud should not be made solely by IT organisations. The use of cloud services might entail high risk for the business and should be evaluated by responsible parties from the different control functions within an enterprise.

“Cloud computing can present a number of challenges and risks with respect to security, privacy and trust,” said Yves Le Roux, CISM, principal consultant with CA Technologies and a member of the publication’s development team. “This book gives practical guidance to prospective cloud users on issues that must be addressed by business management and those responsible for ensuring the protection of information and business processes when selecting or implementing a cloud solution.”
Security Considerations for Cloud Computing is designed to enable effective analysis and measurement of risk through a tool kit that contains items such as decision trees and checklists outlining the security factors to be considered when evaluating the cloud as a potential solution.

Additional information is available at

About ISACA’s Cloud Computing Initiative
ISACA has been a pioneer in cloud governance, risk and compliance (GRC). A member of the Cloud Security Alliance, ISACA has published IT Control Objectives for Cloud Computing, a cloud computing audit program and cloud-related white papers; and holds cloud-related education sessions worldwide. Its flagship COBIT 5 framework for the governance and management of IT helps enterprises worldwide with effective governance of cloud initiatives. ISACA members can take advantage of this extensive body of cloud knowledge through the ISACA Knowledge Center Cloud Computing group, which offers expert-led discussions, peer networking, publications, survey data, wikis and online learning.

With more than 100,000 constituents in 180 countries, ISACA® ( is a leading global provider of knowledge, certifications, community, advocacy and education on information systems (IS) assurance and security, enterprise governance and management of IT, and IT-related risk and compliance. Founded in 1969, the nonprofit, independent ISACA hosts international conferences, publishes the ISACA® Journal, and develops international IS auditing and control standards, which help its constituents ensure trust in, and value from, information systems. It also advances and attests IT skills and knowledge through the globally respected Certified Information Systems Auditor® (CISA®), Certified Information Security Manager® (CISM®), Certified in the Governance of Enterprise IT® (CGEIT®) and Certified in Risk and Information Systems Control™ (CRISC™) designations.

ISACA continually updates and expands the practical guidance and product family based on the COBIT® framework. COBIT helps IT professionals and enterprise leaders fulfill their IT governance and management responsibilities, particularly in the areas of assurance, security, risk and control, and deliver value to the business.

ISACA Knowledge Center:–center
Franziska Kaestner


© Scoop Media

Business Headlines | Sci-Tech Headlines


Auckland Transport: Successful Bridge Repair Opens Two Additional Lanes To Traffic

The opening of two additional lanes on the Auckland Harbour Bridge this morning will help relieve some motorway congestion for motorists heading home to the North Shore tonight. More>>


Statistics New Zealand: COVID-19 Sees Record 12.2 Percent Fall In New Zealand’s Economy

Gross domestic product (GDP) fell by 12.2 percent in the June 2020 quarter, the largest quarterly fall recorded since the current series began in 1987, as the COVID-19 restrictions in place through the quarter impacted economic activity, Stats NZ said ... More>>


Climate: Scientists Release ‘Blueprint’ To Save Critical Ecosystems And Stabilize The Earth’s Climate

A group of scientists and experts produced the first comprehensive global-scale analysis of terrestrial areas essential for biodiversity and climate resilience, totaling 50.4% of the Earth's land. The report was published in Science Advances ... More>>


MPI: Independent Review Launched Into Assurances For Safe Transport Of Livestock By Sea

The Ministry for Primary Industries (MPI) has launched an independent review of the assurances it receives for the safe transport of livestock by sea. MPI Director-General Ray Smith says Mike Heron QC has been appointed to lead the review, which is expected ... More>>


Computers: New Zealand PC Market Grows Nearly 40% Due To Work From Home Demand

COVID-19 had large impacts on demand for PCs as businesses prepared for lockdowns by purchasing notebooks to mobilise their workforce. In the second quarter of 2020, New Zealand's Traditional PC market experienced a 39.7% year-on-year (YoY) growth ... More>>


University Of Auckland: Whale-Watching By Satellite – Follow Their Travels Online

Scientists have successfully attached satellite tracking tags to six New Zealand southern right whales, or tohorā, and are inviting the public to follow the whales’ travels online. Part of a major research project involving the University of Auckland ... More>>

Commerce Commission: Kiwibank Admits System Failures And Agrees To Pay Customers $5.2 Million

Kiwibank has entered into a settlement agreement with the Commerce Commission after reporting that it failed to have in place robust home loan variation disclosure policies, procedures and systems. In a settlement dated 27 August 2020, Kiwibank admitted that ... More>>

Ministry of Health: Public Transport Distancing Requirements Relaxed

Physical distancing requirements on public transport have been reviewed by the Ministry of Health to determine whether they are still required at Alert Level 2 (or below). The Ministry’s assessment is that mandatory face covering and individuals tracking ... More>>


NZHIA: New Zealand Hemp Industry Set To Generate $2 Billion Per Annum And Create 20,000 Jobs

A new report says a fully enabled hemp industry could generate $2 billion in income for New Zealand by 2030, while also creating thousands of new jobs. Written by industry strategist Dr Nick Marsh, the report has prompted calls from the New Zealand Hemp ... More>>


Stats NZ: One In 14 Employed People Report High Risk Of Losing Jobs

About one in 14 workers say they expect to lose their job or business by mid-2021, Stats NZ said today. A survey of employed people in the June 2020 quarter showed 7 percent felt there was a high or almost certain chance of losing their job or business ... More>>

ASB Quarterly Economic Forecast: NZ Economy Doing Better Than Expected, But Challenges Remain

August lockdown estimated to have shaved 8% off NZ’s weekly GDP, and 0.5% off annual GDP Economy now expected to shrink 5% (year-on-year) by end of 2020 Unemployment rate now expected to peak at 7.2% The latest ASB Quarterly Economic Forecast is less ... More>>