Philippe Massonet, Scientific Coordinator, CETIC, Belgium

Cloud computing is rapidly becoming a popular model for delivering IT services on demand. However, cloud computing also introduces new challenges in terms of security. This talk will report on a Cloud Computing Security Risk Assessment study carried out by ENISA and a group of experts. The result of the study is an in-depth and independent analysis that outlines some of the information security benefits and key security risks of cloud computing. The report on "Cloud Computing Security Risk Assessment" also provides a set of practical recommendations. Two complementary reports are also available: a report on "Cloud Computing Information Assurance Framework", and "An SME perspective on Cloud Computing". The former describes a set of assurance criteria designed to assess the risk of adopting cloud services, compare different Cloud Provider offers, obtain assurance from the selected cloud providers, reduce the assurance burden on cloud providers. The SME survey describes the results of a survey of the actual needs, requirements and expectations of SMEs for cloud computing services.