Cloud Computing Demystified (Part 2): Control, Security, and Risk in the Cloud

Abstract

This paper looks at three of the key technical and commercial aspects of cloud computing: control, security, and risk. Our aim is to enable a non-expert reader to understand these concepts and how they impact the legal and regulatory analysis of cloud computing. We explain how different cloud service types entail different levels of customer control. Further, we describe how confidentiality, integrity, and availability (the so-called ‘CIA Triad’) work in cloud computing environments, and we cover specific technical aspects such as cryptography and trusted execution environments. Finally, we consider the risk of service disruptions and examine practical challenges for data and application portability.

Keywords: Cloud Computing, Cloud Services, Information Technology, Internet, Law, Regulation

JEL Classification: K1, K2, K12, L24, L81, L86, M15, O3, O33