85
demonstrate a ‘culture of caring’ with regard to privacy (Accenture and
Ponemon 2015). These types of organizations have also been found to
experience less privacy incidents (Accenture and Ponemon 2015).
5.3 PrIvacy and cloud comPutIng
Although cloud computing enables reduced start-up costs, reduced operating costs and increased agility, its architectural features also raise various
privacy concerns which are shared across several key stakeholders (Takabi
et al. 2010) such as the CSP, the CSC, the consumer/data subject and
application developers. Organizations are increasingly concerned about
the risks of storing their data and applications on systems that reside outside of their on-premise data centres (Chen et al. 2010). ENISA (2009)
define these risks as:
• privacy risks for the CSC e.g. non-compliance to enterprise policies
and legislation, loss of reputation and credibility and being forced or
persuaded to be tracked, or give personal information against their
will (e.g. by governments)
• privacy risks for implementers of cloud platforms e.g. exposure of
sensitive information stored on the platforms (potentially for fraudulent purposes), legal liability, loss of reputation and credibility, lack of
user trust and take-up
• privacy risks for providers of applications on top of cloud platforms
e.g. legal noncompliance, loss of reputation, ‘function creep’ using
the personal information stored on the cloud, i.e. it might be used
for purposes other than the original cloud intention
• privacy risks for the data subject e.g. exposure of personal information
However, unlike the traditional on-premise model of computing,
responsibility for these privacy risks in the cloud computing model is
shared between the CSC and the CSP, and the balance between the two
responsibilities changes between cloud service models. This relationship is
known as the shared responsibility model, and it is the basis for how modern cloud security and privacy operates with each service model differing
in the amount of control offered to the CSC (Tripwire 2018). Haeberlen
(2010) describes how different cloud service models affect the ways that
privacy responsibilities are shared between CSPs and CSCs:
5 JUSTICE VS CONTROL IN CLOUD COMPUTING: A CONCEPTUAL…
demonstrate a ‘culture of caring’ with regard to privacy (Accenture and
Ponemon 2015). These types of organizations have also been found to
experience less privacy incidents (Accenture and Ponemon 2015).
5.3 PrIvacy and cloud comPutIng
Although cloud computing enables reduced start-up costs, reduced operating costs and increased agility, its architectural features also raise various
privacy concerns which are shared across several key stakeholders (Takabi
et al. 2010) such as the CSP, the CSC, the consumer/data subject and
application developers. Organizations are increasingly concerned about
the risks of storing their data and applications on systems that reside outside of their on-premise data centres (Chen et al. 2010). ENISA (2009)
define these risks as:
• privacy risks for the CSC e.g. non-compliance to enterprise policies
and legislation, loss of reputation and credibility and being forced or
persuaded to be tracked, or give personal information against their
will (e.g. by governments)
• privacy risks for implementers of cloud platforms e.g. exposure of
sensitive information stored on the platforms (potentially for fraudulent purposes), legal liability, loss of reputation and credibility, lack of
user trust and take-up
• privacy risks for providers of applications on top of cloud platforms
e.g. legal noncompliance, loss of reputation, ‘function creep’ using
the personal information stored on the cloud, i.e. it might be used
for purposes other than the original cloud intention
• privacy risks for the data subject e.g. exposure of personal information
However, unlike the traditional on-premise model of computing,
responsibility for these privacy risks in the cloud computing model is
shared between the CSC and the CSP, and the balance between the two
responsibilities changes between cloud service models. This relationship is
known as the shared responsibility model, and it is the basis for how modern cloud security and privacy operates with each service model differing
in the amount of control offered to the CSC (Tripwire 2018). Haeberlen
(2010) describes how different cloud service models affect the ways that
privacy responsibilities are shared between CSPs and CSCs:
5 JUSTICE VS CONTROL IN CLOUD COMPUTING: A CONCEPTUAL…