Developing Audit Strategy for PaaS Applications

Abstract

The adoption of cloud computing has become a mainstream strategy in IT today. Both product-based and service-based industries benefit greatly from the cloud model because of its ability to reduce an enterprise's Capex and allow focus on the growth of core business lines. However, before jumping onto the cloud bandwagon, evaluating the advantage and suitability of cloud technology for an enterprise is important. This chapter focuses on platform-as-a-service (PaaS) cloud computing offerings. The objective with this chapter is to understand the utility of PaaS and analyze and evaluate its risks, vulnerabilities, and impacts. The authors have carried out our investigation from an auditor's lens by studying the risks associated with the PaaS cloud service offering, understanding the methods to thoroughly assess these risks, and identifying controls that must be used to effectively mitigate them. They have aligned this research with the COBIT control framework as we recommend the formulation of cloud governance and business strategies in alignment with enterprise objectives and goals.