Prioritizing Cloud Security Controls

Abstract

As more and more organization move to the cloud, security remains a major concern. Given the unique nature of a cloud computing system, security threats take a different form in the cloud. These unique threats require unique security measures and security management. This paper introduces a simplified method to calculate the effect of adding different security controls to the cloud system and prioritize security management in limited budget situations. These calculations help in prioritizing security controls and security spending to get an optimal security for a given limited budget. To clarify the proposed method, a case study is considered for a University that have shifted its systems to the cloud and needs to prioritize its security spending.