Page 84 - Cyber Defense eMagazine Special RSA Conference Annual Edition for 2022

Advantage- Disadvantage Analysis for Implementing

Cloud Services
Which Methodology Do You Use to Make the Right Decision?

By Zsolt Baranya, Information Security Auditor, Black Cell Ltd.

Numerous organizations are thinking about introducing cloud-based systems or cloud services. The
decision is rather difficult and complex because of the advantages and disadvantages. Usually, the
decision makers' main arguments are the higher availability and the reduced IT operations cost compared
to an on-premises architecture.

There are legal requirements and recommendations describing the importance of advantage-
disadvantage analysis. There is no uniform / formalized methodology to conduct the analysis, which offer
a criteria system or decision process.

First, the organization must identify all the legal rules in the cloud service introduction to know the exact
requirements. These obligations can vary greatly from country to country. There are mandatory and
discretionary requirements, that the organization shall consider. The decision on the cloud
implementation shall primarily depend on the mandatory requirements.

There are many organizations - subsidiary/affiliate - which depend on the parent company in the usage
of cloud-based services. In this situation the possibilities for implementing a cloud usage depends on the
parent organization.

84