II.C.20(a)     Outsourced Cloud Computing

As with other forms of outsourcing, information security implications are key in the cloud computing model. Management may need to revise information security policies, standards, and procedures to incorporate the activities related to a cloud computing service provider. Refer to the FFIEC's "Outsourced Cloud Computing" statement for more information.See FFIEC, " Outsourced Cloud Computing," July 10, 2012.


Previous Section
II.C.20 Oversight of Third-Party Service Providers
Next Section
II.C.20(b) Managed Security Service Providers