Information Security

Cloud computing, an emerging form of computing where users have access to scalable, on-demand capabilities that are provided through Internet-based technologies, has the potential to provide info. technology (IT) services more quickly and at a lower cost, but also to introduce IT risks. This report: (1) identified the models of cloud computing; (2) identified the info. security implications of using cloud computing services in the fed. gov¿t.; and (3) assessed fed. guidance and efforts to address info. security when using cloud computing. The auditor reviewed relevant pub., white papers, and other documentation from fed. agencies and industry groups; conducted interviews with rep. from these org.; and surveyed 24 major fed. agencies. Illus.