There’s a new COSO preacher in town. Is he or she a threat or an enabler of a peaceful and safe community?
Should we embrace him or her and listen to their advice?
Enterprise Risk Management for Cloud Computing is an interesting document.
I am not a fan of the document, but if you are in IT or responsible for addressing IT-related risk you might find it of some interest.
It starts reasonably well with:
Leveraging cloud computing in some industries may have been a strategic advantage at one point. What the pandemic brought to light was the need for more remote and flexible work environments and the IT infrastructure to support the organization in that effort. Utilizing cloud computing has become an essential element to compete in the marketplace.
The speed at which cloud computing can be procured and implemented is one of its many valuable traits. However, facing the inertia of accelerated access to cloud based capabilities, some organizations may not have had the capacity to implement appropriate controls designed to mitigate the risks in their cloud environments.
Let’s acknowledge, though, that cloud computing is not new. It has been with us for many years.
I am (just) old enough to remember some of the first database systems. I was a manager with a major public accounting firm, responsible for the…
