Update Details: Two new files have been added to assist with the management of Cloud Computing.
Use of the cloud has become commonplace for many businesses and if you've ever lost internet connectivity the discovery of how reliant we are on the cloud and how critical it is for nearly all business tasks can be somewhat alarming!
To help companies review and also manage the use of cloud services we have prepared and added a couple of new files;
F-IMS39-Cloud-Computing-Register - this IMS register is intended to be a centrally held register (for an entire company, function or department) detailing all cloud computing platforms / providers that are currently being used. This register is useful for reviewing and having an overview / summary of all cloud systems as well as applying a rating of the importance and risk associated with each cloud system. Portability (the ability to move data from one cloud system to another) is a key consideration here.
F-Q108-Cloud-Emergency-Exit-Strategy - is a form which facilitates a much more detailed review of a particular cloud provider or system. This form is the cloud-based equivalent to an emergency action plan for a premises. If you are responsible for premises you will have likely prepared an emergency action plan (which is hopefully never needed) which will detail what to do if there is an emergency affecting the premises. If you're using the cloud then you might want to consider completing this form so you have a plan of what do do if the cloud fails / stops / topples over / is removed or anything else completely outwith your control happens which means the cloud is no longer functioning like it should.
These forms have been prepared to cover the significant risk that cloud computing, or reliance on the cloud, now poses to many organisations and also specifically to assist with companies who are ISO 27001 certified and will need to demonstrate that cloud services are effectively managed.
