Isys 481: Virtualization & Cloud Security 2W 24/Fa1

Assignment Details ISYS 481: VIRTUALIZATION & CLOUD SECURITY 2W 24/FA1 Based on this week's reading on a specific subset of the Cloud Security Alliance, Critical Areas of Focus in Cloud Computing V4 (pages noted below) respond to the questions below in a 3-5 page Word document. APA format is required, to include 12 point font ONLY using Times New Roman, and please ensure you see your syllabus for any additional writing requirements from your instructor. Assignments are worth 20 points each and will be graded on content, spelling, and grammar. You must use at least (2) external references to support your original positions outside of the textbook. They are due Sunday by 11:59 pm. Answer the following questions in a substantive manner: 1. Why does cloud computing auditing have to be a continuous exercise, not point in time by nature based on the recommendations made on page (59) in your own words with an example or two? 2. On page (72-73) there are specific requirements around management plane security. How does this differ from on-premise systems and what do you think makes this riskier or less risk than a company's on-premise data center? 3. Page (108-110) talks through four different challenges. Walkthrough each of them with your own perspective, and examples, of these risks and how you could put controls in place to minimize Assignments are worth 20 points each and will be graded on content, spelling, and grammar. You must use at least (2) external references to support your original positions outside of the textbook. They are due Sunday by 11:59 pm. Answer the following questions in a substantive manner: 1. Why does cloud computing auditing have to be a continuous exercise, not point in time by nature based on the recommendations made on page (59) in your own words with an example or two? 2. On page (72-73) there are specific requirements around management plane security. How does this differ from on-premise systems and what do you think makes this riskier or less risk than a company's on-premise data center? 3. Page (108-110) talks through four different challenges. Walkthrough each of them with your own perspective, and examples, of these risks and how you could put controls in place to minimize their risks (people, process, or technology)? 4. In your own words with references to back up your original thoughts, what are the substantial risks that must be accounted for tied to people, process, and technology when moving into a cloud-based business model? Submit Assignment