Abstract
Cloud and IT service providers should act as responsible
stewards for the data of their customers and users.
However, the current absence of accountability frameworks for
distributed IT services makes it difficult for users to understand,
influence and determine how their service providers honour their
obligations. The A4Cloud project will create solutions to support
users in deciding and tracking how their data is used by cloud
service providers. By combining methods of risk analysis, policy
enforcement, monitoring and compliance auditing with tailored
IT mechanisms for security, assurance and redress, A4Cloud aims
to extend accountability across entire cloud service value chains,
covering personal and business sensitive information in the cloud.
stewards for the data of their customers and users.
However, the current absence of accountability frameworks for
distributed IT services makes it difficult for users to understand,
influence and determine how their service providers honour their
obligations. The A4Cloud project will create solutions to support
users in deciding and tracking how their data is used by cloud
service providers. By combining methods of risk analysis, policy
enforcement, monitoring and compliance auditing with tailored
IT mechanisms for security, assurance and redress, A4Cloud aims
to extend accountability across entire cloud service value chains,
covering personal and business sensitive information in the cloud.