Survey About Cloud Computing Risk Assessments

How do small and medium enterprises (SMEs) accurately assess their risk when they adopt Cloud computing? What should they do? Is there a right way to do this? Is there a process you think works well? I do not know the answers, and I hope that the expertise of ISACA GWDC members can help me with the answers.

I would like to ask IT risk experts, like you, questions about Cloud risk and how you assess Cloud risk. I plan to do this with three short surveys using SurveyMonkey. The second survey is here. The third survey will build upon your expert answers in the second survey.

Aside from finishing my dissertation, I plan to use your answers to make a risk assessment guide which will be freely available to all. Your time and help with these surveys could help many SMEs as they try to secure their Cloud deployments.

I know that most of you have to keep specific information confidential. I will not ask your name or your employer’s name. I will not record the IP address you use to respond to my surveys. I will safeguard your answers, and no personally identifiable information will be collected or published. You are free to not answer any question that may divulge sensitive or confidential information. Each survey will start with an informed consent page that details your rights and how I will respect those rights.