首页    期刊浏览 2024年11月28日 星期四
登录注册

文章基本信息

  • 标题:ERMOCTAVE: A Risk Management Framework for IT Systems Which Adopt Cloud Computing
  • 本地全文:下载
  • 作者:Masky Mackita ; Soo-Young Shin ; Tae-Young Choe
  • 期刊名称:Future Internet
  • 电子版ISSN:1999-5903
  • 出版年度:2019
  • 卷号:11
  • 期号:9
  • 页码:1-21
  • DOI:10.3390/fi11090195
  • 出版社:MDPI Publishing
  • 摘要:Many companies are adapting cloud computing technology because moving to the cloud has an array of benefits. During decision-making, having processed for adopting cloud computing, the importance of risk management is progressively recognized. However, traditional risk management methods cannot be applied directly to cloud computing when data are transmitted and processed by external providers. When they are directly applied, risk management processes can fail by ignoring the distributed nature of cloud computing and leaving numerous risks unidentified. In order to fix this backdrop, this paper introduces a new risk management method, Enterprise Risk Management for Operationally Critical Threat, Asset, and Vulnerability Evaluation (ERMOCTAVE), which combines Enterprise Risk Management and Operationally Critical Threat, Asset, and Vulnerability Evaluation for mitigating risks that can arise with cloud computing. ERMOCTAVE is composed of two risk management methods by combining each component with another processes for comprehensive perception of risks. In order to explain ERMOCTAVE in detail, a case study scenario is presented where an Internet seller migrates some modules to Microsoft Azure cloud. The functionality comparison with ENISA and Microsoft cloud risk assessment shows that ERMOCTAVE has additional features, such as key objectives and strategies, critical assets, and risk measurement criteria.
  • 关键词:risk management; ERM; OCTAVE; cloud computing; Microsoft Azure risk management ; ERM ; OCTAVE ; cloud computing ; Microsoft Azure
国家哲学社会科学文献中心版权所有