This ECAR research bulletin identifies some key principles on which to base decisions related to security assurance and compliance capabilities in cloud computing environments. It also illustrates potential strategies for applying these principles in higher education. It reflects a synthesis of findings from discussions with higher education institutions and from EDUCAUSE publications about cloud computing risks. It also reflects security assurance and compliance strategy work being done at the University of Wisconsin–Milwaukee and the University of Wisconsin System.
Citation for this Work: Brukbacher, Steve. “Practical Strategies for Managing Risk in Cloud Computing” (Research Bulletin 3, 2011). Boulder, CO: EDUCAUSE Center for Analysis and Research, 2011, available from http://www.educause.edu/ecar.