Page 87 - Cyber Defense eMagazine Special RSA Conference Annual Edition for 2022

16 Does the reporting function available that the cloud Yes No 1,5
service use support the deceision making process? It
is important for the managers but not exactly relevant
for the operators. If the answer is no, you have to find
the work-around solution to handle the problem.

17 The cloud service provider that you want to deploy No Yes 1,6
recently published an incident? It is a good indicator, if
the cloud service provider publish incidents, but it
should be considered what was the incident and what
kind of failure could cause it.

18 Could the management of a cloud service take more No Yes 1,8
time than operating an on premise system? More
estimated time, more money.

19 Will the usage of the cloud service be based on a Yes No 1,6
contract or placed under general terms and
conditions? If it based on contract, than the answer is
yes. Therefore you have a possibility to include
individual needs in the contract.

Aggregated scores

The methodology represented above promulgates the pre-implementation assessment process by
providing a solution to analyze the advantages and disadvantages of cloud service implementation. In
practice, many organization-specific situations could occur, that cannot be divided along the lines of a
yes/no answer. If a situation like this arises, it is advisable to collect the arguments from both sides.

To utilize the methodology in the best way possible, determining the scores in advance of providing the
answers for the questionnaire is crucial. If the aggregated scores come up equally at the end of the
analysis, the decision makers could rely on the unique results and debates of each question above.

I hope this methodology can help to make the right decision!

87