2026-09-20T11:20:27Z https://www.ideals.illinois.edu/oai-pmh

oai:www.ideals.illinois.edu:2142/97572 2023-07-11 col_2142_5131 col_2142_31857 com_2142_5130 com_2142_109

Bashir, Masooda N. Larivé, Maxime H. A. Di-Giulio, Carlo 2017-08-10T19:51:56Z 2017-08-10T19:51:56Z 2019-08-11T09:15:28Z 2017-04-17 2017-05 Cloud computing represents a revolutionary service model for accessing information technology (IT) services, and an opportunity for governments to reduce maintainance costs of IT infrastructure. However, relying on commercial cloud services may prove challenging for privacy and security if cloud service providers cannot guarantee adequate standards for their services. In this thesis, I analyze four IT security standards comparing them alongside each other. ISO/IEC 27001 and SOC 2 are two international IT frameworks issued by non-government organizations and available since 2005. FedRAMP and C5 are two more recent cloud-specific standards, respectively issued by the US and German governments. Examining the four standards in comparison, and evaluating their completeness and adequacy in guaranteeing information assurance in cloud environments, I question whether they really represent an improvement in cloud security, what are their shortcomings, and ultimately the necessity of new cloud security standards in the already crowded IT security landscape. I combine a broad contextual analysis with empirical results to help understand the reasons for creating C5, and shed lights on its role in the EU political agenda. Submission published under a 24 month embargo labeled 'Closed Access', the embargo will last until 2019-05-01 The student, Carlo Di-Giulio, accepted the attached license on 2017-04-14 at 16:50. The student, Carlo Di-Giulio, submitted this Thesis for approval on 2017-04-14 at 16:58. This Thesis was approved for publication on 2017-04-17 at 14:49. DSpace SAF Submission Ingestion Package generated from Vireo submission #10770 on 2017-08-10 at 14:30:46 Made available in DSpace on 2017-08-10T19:51:56Z (GMT). No. of bitstreams: 2 DI-GIULIO-THESIS-2017.pdf: 1840762 bytes, checksum: 1152dedc8da3c3e5932b6d4e82f46737 (MD5) LICENSE.txt: 4212 bytes, checksum: c4eef3354c2b8181a2af0f287ecd2ca8 (MD5) Previous issue date: 2017-04-17 Embargo set by: Colleen Fallaw for item 102625 Lift date: 2019-08-10T21:25:30Z Reason: Author requested closed access (OA after 2yrs) in Vireo ETD system Limited Restriction Lifted for Item 102625 on 2019-08-11T09:15:28Z. application/pdf http://hdl.handle.net/2142/97572 en Copyright 2017 Carlo Di-Giulio Privacy Security European Union (EU) Cloud Cloud Computing Compliance Controls Catalogue (C5) Federal Risk Authorization Management Program (FedRAMP) International Organization for Standardization (ISO) System and Organization Controls (SOC) 2 Privacy and security in the clouds: IT security and privacy standards in the EU and US text text Liberal Arts & Sciences European Union Studies University of Illinois at Urbana-Champaign Thesis M.A.