Legal issues in clouds: towards a risk inventory

Author(s)

Karim Djemame, Benno Barnitzke, Marcelo Corrales, Mariam Kiran, Ming-Jin Jiang, Django Armstrong, Nikolaus Forgó, Iheanyi Nwankwo

Abstract

Cloud computing technologies have reached a high level of development, yet a number of obstacles still exist that must be overcome before widespread commercial adoption can become a reality. In a cloud environment, end users requesting services and cloud providers negotiate service-level agreements (SLAs) that provide explicit statements of all expectations and obligations of the participants. If cloud computing is to experience widespread commercial adoption, then incorporating risk assessment techniques is essential during SLA negotiation and service operation. This article focuses on the legal issues surrounding risk assessment in cloud computing. Specifically, it analyses risk regarding data protection and security, and presents the requirements of an inherent risk inventory. The usefulness of such a risk inventory is described in the context of the OPTIMIS project.

Organisation(s)

External organisation(s)

Gottfried Wilhelm Leibniz Universität Hannover, University of Leeds

Journal

Philosophical Transactions of the Royal Society of London. Mathematical, Physical and Engineering Sciences

Volume

371

ISSN

1364-503X

DOI

https://doi.org/10.1098/rsta.2012.0075

Publication date

2013

Peer reviewed

Yes

Austrian Fields of Science 2012

505002 Data protection

Portal url

https://ucrisportal.univie.ac.at/en/publications/6f74c45d-6b7f-4d44-821b-8d98580f79cd