Assignment Cloud Privacy and Security

Running Head: CLOUD PRIVACY 1
Cloud Privacy
<Student Id>
<Student Name>
<University Name>

CLOUD PRIVACY
2
Introduction:
The scenario considered for this report involves the Department of Administrative
Services (DAS) and its cloud first approach alongside prominent references to its data
migration policy. The other elements observed in the scenario include references to the
process of implementing the shared services such as SaaS HR and Personnel management
suite, PaaS SharePoint platform which can be accounted as the basis for the proposed WofG
Intranet platform and the SaaS performance management suite. The following report presents
a comprehensive analysis of the threats and risks associated with this project since it involves
the physical location of data centres at different geographical locations (Abbas & Khan,
2015).
The necessity of privacy and personal information management is perceived explicitly
in the case of Department of Administrative Services (DAS) decision to centralize its
functions and services for different government based entities through a US based cloud
service provider. The particular references to the recent emergence of profound threats due to
expansion of the internet and cloud based practices in the professional domain have to be
considered as significant determinants for introduction of policy guidelines. As per Gholami
& Laurem, the policy guidelines are indicated towards addressing the data breaches that have
been reported in context of sensitive areas such as governmental and financial domains
(Gholami & Laure, 2016). The objective of the cloud security framework should be aligned
with the personal information management of associated with particular references to security
and privacy of employee data that would be recorded in the HR and performance
management framework and the payroll information. These aspects would be provided
through the single link sign in portals available for employees on the intranet.
Security of Employee data:
Threats in the cloud migration infrastructure could be identified in the form of
Malware and Hacking, unintended disclosure, phishing emails, insider threat and employees
bringing their own devices to the workplace. As per Henze, et al, the threats from the
implications of employees bringing their own devices to the workplace could lead to
profound security threats. The threats arise from storage of sensitive company information in
the personal devices of employees could lead to data leakage since the devices could not have
appropriate security software (Henze, et al., 2016). The protection of personal information