The adoption of public cloud computing carries many benefits and can be easy to procure and deploy. However, cloud computing can increase agency exposure and vulnerabilities, increasing the risk that the agency needs to either mitigate or accept.
Agencies must ensure that they:
- understand the risks associated with cloud services
- choose Cloud Service Providers (CSPs) that are capable of handling agency data securely
- understand the security obligations that they retain when systems are in the cloud.
