Benefits, risks and recommendations for information security
This paper has been produced by ENISA and is targeted to SMEs that are planning to migrate their infrastructures and data in the cloud.
Given the reduced cost and flexibility it brings, a migration to cloud computing is compelling for many SMEs. However, the survey undertaken as part of this report confirms that major concerns for SMEs migrating to the cloud include the confidentiality of their information and liability for incidents involving the infrastructure.
This study allows an informed assessment of the security risks and benefits of using cloud computing, providing security guidance for both potential and existing users. It covers specifically the technical, policy and legal implications (in particular: data protection, availability and integrity, guarantee, confidentiality, intellectual property, professional negligence, outsourcing services and changes in control).
For the legal analysis and recommendations, see pp. 97-111
Download the report here.