1. About Sally Smoczynski Background in process improvement Consultant in Information Security, Service Management and Business Continuity Strong experience with implementing ISO standards in above domains (ISO 27001, ISO 20000, PS-Prep) Managing Partner @ Radian Compliance, LLC 1

2. Identifying a Risk Methodology to support controls in Cloud Computing

3. Presentation Overview  Define Risk management  Review Cloud computing Risks  Relate back to Risk management process  Closure 3

4. 4

5. Cloud Computing 5 SAAS PAAS IAAS TAAS Software as a Service Platform as a Service Infrastructure as a Service Transparency as a Service

6. Risks in the cloud Data integrity Recovery Privacy Legal issues in areas such as e-discovery, regulatory compliance, and auditing Secure data transfer Secure software interfaces Secure stored data User access control Data separation 6

7. 7

8. 8 Impact Vulnerability Probability

9. Questions 9

10. 10 Sally Smoczynski Managing Partner, Radian Compliance ssmoczynski@radiancompliance.com 630.728.7181