Project 2: Cloud Risk and Compliance Issues Analysis University of Maryland Global Campus CCA 610 9040 Cloud Services and Technologies (2208) Professor: Dr.Saafein

RISK AND COMPLIANCE REPORT Project 2: Cloud Risk and Compliance Issues Analysis University of Maryland Global Campus CCA 610 9040 Cloud Services and Technologies (2208) Professor: Dr.Saafein RISK AND COMPLIANCE REPORT Abstract Ballot Online has one of the most dynamic global cliental bases in the world, providing across different countries and numerous states with world-class voting solutions . Cloud services will give BallotOnline the unique opportunity to outsource storage and software that will dramatically cut the cost of outdated data centers. One of the advantages of the cloud services is the manageability; mainly because the vendor who provides those services are responsible for managing, maintaining, and updating BallotOnline data. Most companies enjoy the flexibility and cost-saving measure of cloud services; however, a major risk is the loss of consistent visibility and control. This could lead to the improper storage of sensitive data, unauthorized data access, exposure to data breaches, and compliance issues. This lack of visibility can lead to the compromise of data security and audits. Cloud computing risks: As the industry matures, there has been a rapid expansion in service offerings. The large cloud service providers (CSPs) that entered the market with SaaS offerings, e.g., S, are integrating backwards into PaaS, with S’s PaaS offering. Likewise, Amazon Web Services (AWS), which started off largely xas an IaaS provider, now offers not only PaaS but also SaaS solutions. From a risk perspective, there is some gradient across the different service models, but the deployment model is where the risks vary widely. However, while cloud computing provides many benefits, at the same time, it introduces major risks on several crucial fronts that need to be governed and managed by user organizations. Well-managed organizations must understand and mitigate these risks to better leverage their cloud computing initiatives. RISK AND COMPLIANCE REPORT Five major risks are: 1. Data security and regulatory 2. Technology 3. Operational 4. Vendor 5. Financial. Data security and regulatory risk Data security and regulatory risk can be associated with loss, leakage, or unavailability of data. This can cause business interruption, loss of revenue, loss of reputation, or regulatory incompliance.Regulato