Abstract

Cloud technology usage in nowadays companies constantly grows every year. Moreover, the COVID-19 situation caused even a higher acceleration of cloud adoption. A higher portion of deployed cloud services, however, means also a higher number of exploitable attack vectors. For that reason, risk assessment of the cloud environment plays a significant role for the companies. The target of this paper is to present a risk assessment method specialized in the cloud environment that supports companies with the identification and assessments of the cloud risks. The method itself is based on ISO/IEC 27005 standard and addresses a list of predefined cloud risks. Besides, the paper also presents the risk score calculation definition. The risk assessment method is then applied to an accounting company in a form of a case study. As a result, 24 risks are identified and assessed within the case study where each risk included also exemplary countermeasures. Further, this paper includes a description of the selected cloud risks.

Keywords

MSC

94A99

Cite this article

@article{cai-5715,
  author  = {Martin Zbořil},
  title   = {Risk Assessment Method of Cloud Environment},
  journal = {Computing and Informatics},
  volume  = {41},
  number  = {5},
  pages   = {1186--1206},
  year    = {2022},
  issn    = {1335-9150},
  doi     = {10.31577/cai_2022_5_1186}
}
Download .bib