Reflecting on Whether Checklists Can Tick the Box for Cloud Security

Robert Anderson Keith Duncan; Mark Whittington

doi:10.1109/CloudCom.2014.165

Reflecting on Whether Checklists Can Tick the Box for Cloud Security

Robert Anderson Keith Duncan, Mark Whittington

Research output: Chapter in Book/Report/Conference proceeding › Published conference contribution

11 Citations (Scopus)

77 Downloads (Pure)

Abstract

All Cloud computing standards are dependent upon checklist methodology to implement and then audit the alignment of a company or an operation with the standards that have been set. An investigation of the use of checklists in other academic areas has shown there to be significant weaknesses in the checklist solution to both implementation and audit; these weaknesses will only be exacerbated by the fast-changing and developing nature of clouds. We examine the problems that are inherent with using checklists and seek to identify some mitigating strategies that might be adopted to improve their efficacy.

Original language	English
Title of host publication	2014 IEEE 6th International Conference on Cloud Computing Technology and Science
Publisher	Institute of Electrical and Electronics Engineers (IEEE)
Pages	805-810
Number of pages	6
ISBN (Print)	9781479940929
DOIs	https://doi.org/10.1109/CloudCom.2014.165
Publication status	Published - 18 Dec 2014
Event	2014 IEEE 6th International Conference on Cloud Computing Technology and Science (CloudCom) - Nanyang Executive Centre, Nanyang Technological University, Singapore, Singapore Duration: 15 Aug 2016 → 18 Aug 2016 http://cipsijoomla.ux.uis.no/cloudcom2014/

Conference

Conference	2014 IEEE 6th International Conference on Cloud Computing Technology and Science (CloudCom)
Abbreviated title	CloudCom 2014
Country/Territory	Singapore
City	Singapore
Period	15/08/16 → 18/08/16
Internet address	http://cipsijoomla.ux.uis.no/cloudcom2014/

Keywords

security
standards
compliance
assurance
audit

Access to Document

10.1109/CloudCom.2014.165

PID3431537
© 2014 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.
Accepted author manuscript, 154 KB

Cite this

Reflecting on Whether Checklists Can Tick the Box for Cloud Security. / Duncan, Robert Anderson Keith; Whittington, Mark.
2014 IEEE 6th International Conference on Cloud Computing Technology and Science. Institute of Electrical and Electronics Engineers (IEEE), 2014. p. 805-810.

Research output: Chapter in Book/Report/Conference proceeding › Published conference contribution

Duncan, RAK & Whittington, M 2014, Reflecting on Whether Checklists Can Tick the Box for Cloud Security. in 2014 IEEE 6th International Conference on Cloud Computing Technology and Science. Institute of Electrical and Electronics Engineers (IEEE), pp. 805-810, 2014 IEEE 6th International Conference on Cloud Computing Technology and Science (CloudCom), Singapore, Singapore, 15/08/16. https://doi.org/10.1109/CloudCom.2014.165

@inproceedings{39099f06285d4393a9e1b64f04b3549f,

title = "Reflecting on Whether Checklists Can Tick the Box for Cloud Security",

abstract = "All Cloud computing standards are dependent upon checklist methodology to implement and then audit the alignment of a company or an operation with the standards that have been set. An investigation of the use of checklists in other academic areas has shown there to be significant weaknesses in the checklist solution to both implementation and audit; these weaknesses will only be exacerbated by the fast-changing and developing nature of clouds. We examine the problems that are inherent with using checklists and seek to identify some mitigating strategies that might be adopted to improve their efficacy.",

keywords = "security, standards, compliance, assurance, audit",

author = "Duncan, {Robert Anderson Keith} and Mark Whittington",

year = "2014",

month = dec,

day = "18",

doi = "10.1109/CloudCom.2014.165",

language = "English",

isbn = "9781479940929",

pages = "805--810",

booktitle = "2014 IEEE 6th International Conference on Cloud Computing Technology and Science",

publisher = "Institute of Electrical and Electronics Engineers (IEEE)",

note = "2014 IEEE 6th International Conference on Cloud Computing Technology and Science (CloudCom), CloudCom 2014 ; Conference date: 15-08-2016 Through 18-08-2016",

url = "http://cipsijoomla.ux.uis.no/cloudcom2014/",

}

TY - GEN

T1 - Reflecting on Whether Checklists Can Tick the Box for Cloud Security

AU - Duncan, Robert Anderson Keith

AU - Whittington, Mark

PY - 2014/12/18

Y1 - 2014/12/18

N2 - All Cloud computing standards are dependent upon checklist methodology to implement and then audit the alignment of a company or an operation with the standards that have been set. An investigation of the use of checklists in other academic areas has shown there to be significant weaknesses in the checklist solution to both implementation and audit; these weaknesses will only be exacerbated by the fast-changing and developing nature of clouds. We examine the problems that are inherent with using checklists and seek to identify some mitigating strategies that might be adopted to improve their efficacy.

AB - All Cloud computing standards are dependent upon checklist methodology to implement and then audit the alignment of a company or an operation with the standards that have been set. An investigation of the use of checklists in other academic areas has shown there to be significant weaknesses in the checklist solution to both implementation and audit; these weaknesses will only be exacerbated by the fast-changing and developing nature of clouds. We examine the problems that are inherent with using checklists and seek to identify some mitigating strategies that might be adopted to improve their efficacy.

KW - security

KW - standards

KW - compliance

KW - assurance

KW - audit

U2 - 10.1109/CloudCom.2014.165

DO - 10.1109/CloudCom.2014.165

M3 - Published conference contribution

SN - 9781479940929

SP - 805

EP - 810

BT - 2014 IEEE 6th International Conference on Cloud Computing Technology and Science

PB - Institute of Electrical and Electronics Engineers (IEEE)

T2 - 2014 IEEE 6th International Conference on Cloud Computing Technology and Science (CloudCom)

Y2 - 15 August 2016 through 18 August 2016

ER -

Reflecting on Whether Checklists Can Tick the Box for Cloud Security

Abstract

Conference

Keywords

Access to Document

Fingerprint

Cite this