Study on Articles of Cloud Service Agreement from legal and risk viewpoints

• Main Authors: Shu-Tzi Peng, 彭淑姿
• Other Authors: none
• Format: Others
• Language: zh-TW
• Published: 2011
• Online Access: http://ndltd.ncl.edu.tw/handle/75e9g7

碩士 === 東吳大學 === 法律學系 === 100 === Cloud computing ranging from data storage and processing to software is a new way of delivering computing resources. Cloud computing services are now available instantly, commitment-free and on-demand, which attract all of the individuals, governments and enterprises. Though, given the reduced cost and flexibility it brings, a migration to cloud computing is compelling form many small and medium enterprises (SMEs), due to specific issues on the protection and security of information under cloud environment. A paper, titled in Cloud Computing-Benefits, risks and recommendations for information security and published by the European Network and Information Security Agency (ENISA), allows an informed assessment of the security risks and benefits of using cloud computing-providing security guidance for potential and existing users of cloud computing, and make concrete recommendations on how to address the risks and maximize the benefits. This paper is intended to introduce the risk assessment for SMEs with reference to Cloud Computing--Benefits, risks and recommendations for information security by ENISA, and make concentrated consideration on the service level agreements (SLAs) relevant to cloud service, base on the effect of the risk assessment. Service level agreements are contracts between customers and service providers, and have existed for many years within the IT world, which identifies the rights and obligations of the customers and service provides. Some examples of the service level agreements offered by present cloud service providers are also studied in company with the effect of the risk assessment herein to be compensated by some method proposed herein. Some notes are provided by this paper for SMEs to face the cloud environment.