return to research

Data Privacy in the Cloud: Enabling business agility by managing risk

Demystify cloud-based systems and their inherent risk
Download the executive summary

With cloud-based systems come inherent challenges. These are further complicated as data subject to privacy regulation inevitably moves into the cloud.

The ISF’s research into Data Privacy in the Cloud details how organisations can manage their privacy obligations when leveraging the benefits of the cloud.

It does the by:

  • showing why data privacy in the cloud is a business issue
  • explaining data privacy; providing an overview of privacy as a concept, including an explanation of personally identifiable information (PII) and the typical demands placed on organisations by privacy regulations
  • de-mystifying the complexity of cloud-based systems and their inherent risks, enabling privacy safeguards
  • enhancing the ISF Privacy Framework to address cloud-based privacy issues and determine the actions  required of an organisation
  • providing a structured process for procuring cloud services and managing the privacy risk throughout the term of a cloud contract aligned with the ISF Supply Chain Information Risk Assurance Process.