Cse1Cfx | Cloud Foundations | Assessment Answers

Background:

Cloud services providers have historically sought to ensure that their cloud systems adhere to industry standards and are compliant with mainstream regulatory regimes.

Your task in detail:

Create an initial post in which you explain why and how commercial cloud services providers such as Amazon AWS and Microsoft Azure embed standards and regulatory compliance into their cloud operations. In your view, which compliance aspects have been the most problematic for cloud services providers to deal with? Match general standards and recommendations (Standards/Regulation), Industry and government related (Sectoral) with those of Amazon and Azure. Where are today compliance gaps in cloud computing?

Standard and regulatory compliance

Some of the aspects relating to the standard and regulatory compliance are stated below:

• The compliance relating to the regulatory policies on the data always remain a hurdle which is key in the concept of the clod computing. The AWS provides extensive security compliance to the data.
• Whenever there is a regulatory environment target, the cloud based compliance is nearly always a task which is not trivial. These concept compile with the predefined set of rules which govern the policies of the AWS.
• The concept of cloud computing can be considered can be considered as a sector which is rapidly growing in different areas. Relating to it, it can be stated that there is very little opportunity relating to the legislative and the judicial relief which would be in the near future.
• There are different types of unique attributes which are present within the concept of the cloud computing that directly require risk assessment in such areas such as recovery, data integrity and privacy. This concept also takes into consideration the aspect an evaluation of the legal issue in the area of concern such as regulatory compliance, e –discovery and auditing.
• The concept can be stated to be becoming a widely implemented technology for the individual and for the organization. The concept is considered to be very much cheap and convenient which directly involves viable alternatives to the traditional support to the different organization. the section of law which is related to the concept can be stated to be very much lagging behind.

Problematic Standard and regulatory compliance

There are different types of problem which is attached to the concept which mainly include that the overall compliance sector which is related to the aspect can be considered to be issue of hurdle which is related to the concept. In the working of the concept it can be stated that there are no particular of compliance which is related to the concept so it forms a basic barrier which is related to the concept. The standard should be matching the need of the organization so that there are no problem relating to the sector of the compliance of the data security so that the data which is stored within the concept of the cloud is secured. There are different parameters of standard like the resource availability and the usage charge which is related to the concept which can be stated to be one of the problem which lack the implementation sector which is related to the concept. There is different sector compliance sector which is taken into consideration which would be directly impacting the sector of the operation which is related to the concept.

Match general standards and recommendations

The basic recommendation which can be stated in the sector would be indulgence of a common rule of governance which would be followed in the sector of the implementation of the concept. In majority of the cases the security aspect which govern the sector are not included which should be a general standard of the working of the concept. On the other hand, it can be stated that the indulge of the standard should be linked with the requirement of the sector so that different issue which are majorly faced within the domain can be mitigated. The mitigation plan which can be stated here is the plan which is implemented from the AWS service providers who directly work in the sector of securing the data which is present in the system. There are functionality aspects which should be taken into consideration relating to the implementation and the working of the concept so that the problem which is related to the operation in the sector can be mitigated. There are different AWS schemes which can be implemented in the sector of working of thee sector.

Today compliance gaps in cloud

The main compliance gap which can be seen in recent times is directly related to the aspect of the control mechanism which is related to the concept. There are no predefined rules which directly govern the security mechanism which is involved into the working of the concept of the cloud. The prevailing of the rules can be mitigating the gap which is seen in the sector of the operation which is linked to the concept. The gap which is seen between the cloud service provider and the service gainer can be stated as one of the areas which directly impact the sector of the operation which is related to the concept. This gap if not resolved it can be playing a dominating role in the near future which would be impacting the overall operation which is related to the concept. The compliance gap which is seen in the concept of the cloud can be considered to be in the stage of research and it can be stated that it would be resolved in the near future. In the context of the Azure and AWS the main gap which can be seen is the implementation of a common standard which is related to the working.

References

Alexander, K., Lee, C. and Chai, S., 2017, February. Declarative policy support for cloud application orchestration. In Advanced Communication Technology (ICACT), 2017 19th International Conference on (pp. 102-104). IEEE.

Kalaiprasath, R., Elankavi, R. and Udayakumar, D.R., 2017. Cloud. Security and Compliance-A Semantic Approach in End to End Security. International Journal Of Mechanical Engineering And Technology (Ijmet), 8(5).

Liang, K., Au, M.H., Liu, J.K., Susilo, W., Wong, D.S., Yang, G., Yu, Y. and Yang, A., 2015. A secure and efficient ciphertext-policy attribute-based proxy re-encryption for cloud data sharing. Future Generation Computer Systems, 52, pp.95-108.

Wang, S., Urgaonkar, R., Zafer, M., He, T., Chan, K. and Leung, K.K., 2015, May. Dynamic service migration in mobile edge-clouds. In IFIP Networking Conference (IFIP Networking), 2015 (pp. 1-9). IEEE.