Cloud Governance

Steven Mezzio; Meredith Stein; Vince Campitelli

Published by De Gruyter 2023

Cloud Governance

Basics and Practice

Steven Mezzio

, Meredith Stein

and Vince Campitelli

In the series Professors of Practice Series

https://doi.org/10.1515/9783110755374

Overview
Contents

About this book

Cloud computing is at the vanguard of the Metaverse-driven digital transformation. As a result, the cloud is ubiquitous; emerging as a mandate for organizations spanning size, sectors, and geographies.

Cloud Governance: Basics and Practice brings to life the diverse range of opportunities and risks associated with governing the adoption and enterprise-wide use of the cloud.

Corporate governance is uniquely disrupted by the cloud; exacerbating existing risks, and creating new and unexpected operational, cybersecurity, and regulatory risks. The cloud further extends the enterprise’s reliance on cloud service providers (CSPs), fueling an urgent need for agile and resilient business and IT strategies, governance, enterprise risk management (ERM), and new skills. This book discusses how the cloud is uniquely stressing corporate governance.

Cloud Governance is a user-friendly practical reference guide with chapter-based self-assessment questions. The chapters in this book are interconnected and centered in a cloud governance ecosystem. This book will guide teachers, students and professionals as well as operational and risk managers, auditors, consultants and boards of directors.

Practical, user-friendly reference guide appealing to students, business managers, boards, advisors, regulators policy makers, educators, and influencers
Practitioner perspective, including real-world examples and self-assessment questions

Author information

Steven Mezzio, Ph.D. is a results-driven business executive with experience spanning governance, accounting, auditing, financial reporting, Sarbanes-Oxley, COSO / controls, enterprise risk management (ERM), technology, and ESG. Steven is an Associate Dean, Professor of Accountancy and ESG, and Executive Director of the Center for Sustainable Business for the Lubin School of Business at Pace University in NYC. He publishes practice-oriented articles and speaks on a range of topics, including executive education, the cloud, robotics, sustainability, governance, internal controls, auditing, Sarbanes-Oxley, the future of work, and the future of accounting education. Previously, Steven was a Partner with PwC, serving in the Audit Practice, the National Audit Quality Group, and the Governance Advisory Services Practice. He also served as the Global Leader of Governance, Risk, and Compliance Services and Co-Leader of the Key Client Management Group for Resources Global Professionals, a NASDAQ-listed $1 billion company.

Meredith Stein, CPA, has substantial and diverse experience in the domain of governance, including designing, operationalizing, and assessing governance structures, including ERM, COSO / internal controls, and external audits of financial statements. The design and deployment of governance-related executive education and training programs have been central to her various roles. Meredith works for the National Institutes of Health (NIH), a U.S. Federal Government agency. She improves program management and performance by organizing, aligning, assessing, remediating, monitoring corporate and program risk, and ensuring program integrity and compliance. Meredith is also actively involved in governance-related, learning and development initiatives. Previously, Meredith worked for the Pension Benefit Guaranty Corporation. Prior to that, she worked in KPMG’s audit and advisory practices as a manager where she conducted audits and led Sarbanes-Oxley and governance-related consulting projects.

Vincent Campitelli is a practitioner with a specific focus on technology, governance, and risk management. Over the last 10 years, Vincent has focused on developing guidance and best practices for the adoption and use of all models of cloud computing and related emerging technologies such as AI, Big Data, IoT, and Blockchain. Vincent is a consultant to the president of the Cloud Security Alliance (CSA). He serves as an enterprise-wide cloud security specialist internationally, providing support, and advice on all aspects of cloud security, research, education, and practice guidelines. Previously, Vincent was a VP with McKesson Corporation, responsible for the creation, implementation, and centralization of the IT risk management and security function, including the design, development, and delivery of training associated with cloud service providers.

Reviews

"Unlike any generation before in history, we have the know-how to design and build for the future and this book takes us on that journey of discovery and learning. . . . The authors have understood that our ability to question is perhaps the most powerful skill when working with the fast-paced world of tech." -- Jacqueline de Rojas, Non-Exec Director & Co-Chair, Institute of Coding, Merryck & Co. Limited

"Mezzio, Stein, and Campitelli have written a must-have, practical reference book describing industry, government, and academic cloud concepts, terminology, and real-world examples in plain, understandable language. They blend over 500 reference materials into well-organized, high-level discussions and expert advice related to governing enterprise-wide adoption, deployment and use of the cloud." -- Scott E. Donaldson, formerly at Johns Hopkins University and American University; previously industry CTO, CIO, and CSE; co-author, Building an Effective Security Program

Topics

Frontmatter Publicly Available Download PDF	I
Foreword Publicly Available Download PDF	V
Contents Publicly Available Download PDF	VII
Part I: Introduction: The Context of Cloud Computing
Chapter 1 Silver Linings: The Fourth Industrial Revolution and the Utopian Promises of Cloud Computing Requires Authentication Unlicensed Licensed Download PDF	1
Chapter 2 The Dark Side of the Cloud: High-Profile Cyber-Attacks Requires Authentication Unlicensed Licensed Download PDF	13
Chapter 3 Cloud 101: The Basics of Cloud Computing Requires Authentication Unlicensed Licensed Download PDF	19
Part II: The Basics of Cloud Governance
Chapter 4 Cloud Strategy Requires Authentication Unlicensed Licensed Download PDF	31
Chapter 5 Cloud Performance Management Requires Authentication Unlicensed Licensed Download PDF	47
Chapter 6 The Basics of Cloud Governance Requires Authentication Unlicensed Licensed Download PDF	59
Chapter 7 Cloud Computing and the Shared Responsibility Model Requires Authentication Unlicensed Licensed Download PDF	71
Part III: The Organizational and IT Context of Cloud Governance
Chapter 8 Cloud Vendors and the Organization’s In-House IT Function Requires Authentication Unlicensed Licensed Download PDF	81
Chapter 9 Cloud Sprawl, Cloud Inventory and Cloud Management Requires Authentication Unlicensed Licensed Download PDF	95
Chapter 10 Sustainable Cloud: The Relationship Between the Cloud and ESG Requires Authentication Unlicensed Licensed Download PDF	103
Chapter 11 Cloud-Driven Change Management and Learning Requires Authentication Unlicensed Licensed Download PDF	111
Part IV: Governance Functions Disrupted and Transformed by the Cloud
Chapter 12 Cloud Risk Management Requires Authentication Unlicensed Licensed Download PDF	131
Chapter 13 Enterprise Risk Management and the Cloud Requires Authentication Unlicensed Licensed Download PDF	145
Chapter 14 Security, Trust and the Cloud Requires Authentication Unlicensed Licensed Download PDF	163
Chapter 15 Incident Response and the Cloud Requires Authentication Unlicensed Licensed Download PDF	175
Chapter 16 Compliance and the Cloud Requires Authentication Unlicensed Licensed Download PDF	189
Chapter 17 Internal Auditing and Cloud Computing Requires Authentication Unlicensed Licensed Download PDF	201
Chapter 18 Third-Party Assurance and the Cloud Requires Authentication Unlicensed Licensed Download PDF	207
Chapter 19 The Board of Directors: Cloud Governance and Asking the Right Questions Requires Authentication Unlicensed Licensed Download PDF	219
Part V: Conclusion: Cloud Reflections
Chapter 20 Reflections on the Utopian Promises of the Cloud, Wicked Problems and the Metaverse- Driven Future Requires Authentication Unlicensed Licensed Download PDF	239
Endnotes Requires Authentication Unlicensed Licensed Download PDF	251
List of Figures Requires Authentication Unlicensed Licensed Download PDF	279
List of Tables Requires Authentication Unlicensed Licensed Download PDF	281
About the Authors Requires Authentication Unlicensed Licensed Download PDF	285
Index Requires Authentication Unlicensed Licensed Download PDF	287

(Deutsch)

Language: English
Publisher: De Gruyter
Audience: MBA, DBA students and other graduate degree level students, and educators interested in the domain of Corporate Governance
Pages
- Front matter: 13
- Main content: 288
Illustrations
- Illustrations: 0
- Coloured Illustrations: 7
- Tables: 115
Keywords: Cloud Governance; Cloud Risk Management; Cloud Strategy; Business Disruption; Business Transformation.

eBook

Published: December 5, 2022
ISBN: 9783110755374

Paperback

Published: December 5, 2022
ISBN: 9783110755268