ERMOCTAVE: A Risk Management Framework for IT Systems Which Adopt Cloud Computing
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Mackita, Masky | - |
dc.contributor.author | Shin, Soo-Young | - |
dc.contributor.author | Choe, Tae-Young | - |
dc.date.available | 2020-04-24T10:25:07Z | - |
dc.date.created | 2020-03-31 | - |
dc.date.issued | 2019-09 | - |
dc.identifier.issn | 1999-5903 | - |
dc.identifier.uri | https://scholarworks.bwise.kr/kumoh/handle/2020.sw.kumoh/150 | - |
dc.description.abstract | Many companies are adapting cloud computing technology because moving to the cloud has an array of benefits. During decision-making, having processed for adopting cloud computing, the importance of risk management is progressively recognized. However, traditional risk management methods cannot be applied directly to cloud computing when data are transmitted and processed by external providers. When they are directly applied, risk management processes can fail by ignoring the distributed nature of cloud computing and leaving numerous risks unidentified. In order to fix this backdrop, this paper introduces a new risk management method, Enterprise Risk Management for Operationally Critical Threat, Asset, and Vulnerability Evaluation (ERMOCTAVE), which combines Enterprise Risk Management and Operationally Critical Threat, Asset, and Vulnerability Evaluation for mitigating risks that can arise with cloud computing. ERMOCTAVE is composed of two risk management methods by combining each component with another processes for comprehensive perception of risks. In order to explain ERMOCTAVE in detail, a case study scenario is presented where an Internet seller migrates some modules to Microsoft Azure cloud. The functionality comparison with ENISA and Microsoft cloud risk assessment shows that ERMOCTAVE has additional features, such as key objectives and strategies, critical assets, and risk measurement criteria. | - |
dc.language | 영어 | - |
dc.language.iso | en | - |
dc.publisher | MDPI | - |
dc.title | ERMOCTAVE: A Risk Management Framework for IT Systems Which Adopt Cloud Computing | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Shin, Soo-Young | - |
dc.contributor.affiliatedAuthor | Choe, Tae-Young | - |
dc.identifier.doi | 10.3390/fi11090195 | - |
dc.identifier.scopusid | 2-s2.0-85073805531 | - |
dc.identifier.wosid | 000487748900004 | - |
dc.identifier.bibliographicCitation | FUTURE INTERNET, v.11, no.9 | - |
dc.relation.isPartOf | FUTURE INTERNET | - |
dc.citation.title | FUTURE INTERNET | - |
dc.citation.volume | 11 | - |
dc.citation.number | 9 | - |
dc.type.rims | ART | - |
dc.type.docType | Article | - |
dc.description.journalClass | 1 | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Information Systems | - |
dc.subject.keywordAuthor | risk management | - |
dc.subject.keywordAuthor | ERM | - |
dc.subject.keywordAuthor | OCTAVE | - |
dc.subject.keywordAuthor | cloud computing | - |
dc.subject.keywordAuthor | Microsoft Azure | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
350-27, Gumi-daero, Gumi-si, Gyeongsangbuk-do, Republic of Korea (39253)054-478-7170
COPYRIGHT 2020 Kumoh University All Rights Reserved.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.