
courtesy:FreeClipartNow.com
Today the IT risk management professional is faced with the challenge of keeping up to date with the risks and related treatments posed to the business through diverse and fast changing supporting IT systems. IT Audit Resources helps address this challenge by bringing together scattered information resources that these professionals need to continue being relevant and effective at their work.
IT Audit Resources is the one-stop reference for information on IT risks and treatments including controls; industry best practices, standards, and guidelines; audit process; audit programs and checklists; professional development including certification; platform hardening and review guidelines.
On this site you’ll also find the most current news and book references by IT subject area.
Cloud Computing
Security Considerations

The Cloud
The web is often referred to as a giant cloud where information goes in on one end and comes out another, with the inner workings remaining a mysterious blackbox. Cloud services are Internet-based services. Cloud computing lets users get access to a shared pool of computing resources such as servers, storage and software applications via the Internet, as needed or on demand. Clients get computing services over the Web from hosted data centers on a subscription basis, paying only for what they use.
The cloud resources reside in computer data centers that organizations access via high-speed communication lines. In effect organizations rent servers in order to gain access to business applications meaning the organizations no longer need to buy as many, if any, servers. Prior to the availability of cloud computing services, organizations needed to buy a new server every time that they deployed a new application, say an e-mail system or an accounts-payable system. Clouds offer flexible resources that clients can scale up or down as needed.
Virtualization
Virtualization is a key technology in cloud computing. Virtualization allows users to run multiple operating systems and software packages on a single machine which makes data centers more efficient because …continue to page2.