Cloud computing is a much-discussed topic in the business environment, as it provides a modern approach to solving decades-old challenges. In order to take advantage of the benefits associated with cloud services, many companies and providers in the area of critical infrastructures and public institutions are also increasingly relying on these technologies. The use of cloud computing offers many opportunities, but these must be considered in light of the risks and aspects of information security. A significant difference to the operation of conventional on-premises solutions is that the characteristics of cloud computing lead to other risks and dangers when using this technology. Furthermore, technical complexity and certain areas of responsibility are outsourced.
In addition to the management and processes within a cloud governance & security program, companies need a different understanding of how to ensure adequate protective measures (especially in relation to on-premises infrastructures). Furthermore, technical skills and systems are needed to implement the security requirements for cloud systems efficiently and effectively.