03846ntm a22005657i 4500 000264209 CZ-PrVSE 20221108171029.0 m d cr n|||||||||| 221108s2022 xr fsbm 000 0 eng d NEZPRACOVANÝ IMPORT ABA006 cze ABA006 ABA006 rda Zbořil, Martin ISIS:136089 dis Secure Cloud Governance Framework eng Secure Cloud Governance Framework / Martin Zbořil 2022 ?? stran : digital, PDF soubor Vedoucí práce: Vlasta Svatá Disertační práce (Ph.D.)—Vysoká škola ekonomická v Praze. Fakulta informatiky a statistiky, 2022 Obsahuje bibliografii Textový (vysokoškolská kvalifikační práce) Rok obhajoby 2022 The main target of this thesis is to develop a framework that supports organizations in secure governance of their cloud environment. Besides, this framework might serve also for perform- ing an assessment of the cloud governance posture from the security perspective. The frame- work was developed as a GRC framework since it contains components of Governance, Risk, and Compliance. In the initial phase, a quantitative pre-research in a form of a question- naire was performed to identify the cloud security awareness of Czech organizations. Then, qualitative research in a form of in-depth interviews among cloud security specialists was taken to find specifics and priorities for the framework development. The next step involved a detailed analysis of 10 control catalogs (frameworks, standards, regulations) that contained 1341 controls in total. Based on the retrieved results and findings, the framework for the se- cure governance of the cloud environment was developed. The core of the framework is a list of 170 unique controls. As a secondary target and product, a list of cloud adoption controls that are divided into multiple phases was established. These controls might serve as a guide- line for the cloud adoption process or as a tool for a retrospective assessment of the process. The final output, Secure Cloud Governance Framework, presents a useful contribution to- wards the world of cloud security that distinguishes from an already developed set of controls with the main focus on a cloud service customer, not on a cloud service provider, and with the comprehensiveness of the relevant controls. Způsob přístupu: Internet aplikovaná informatika [obor disert. práce] disertace fd132024 czenas dissertations eczenas Cloud Computing Cloud security Governance Risks Compliance Svatá, Vlasta, 1952- mzk2004221726 ths Šimeček, Karel ISIS:154030 opn Vysoká škola ekonomická v Praze. Fakulta informatiky a statistiky kn20010709399 dgg https://insis.vse.cz/zp/67706/podrobnosti VŠKP v InSIS https://insis.vse.cz/zp/67706 Hlavní práce https://insis.vse.cz/zp/67706/posudek/vedouci Hodnocení vedoucího https://insis.vse.cz/zp/67706/posudek/oponent/76192 Oponentura https://insis.vse.cz/zp/67706/posudek/oponent/76193 Oponentura https://insis.vse.cz/zp/67706/posudek/oponent/76194 Oponentura https://insis.vse.cz/zp/67706/priloha/24614 Přiloha k práci https://insis.vse.cz/zp/67706/priloha/24615 Přiloha k práci https://insis.vse.cz/zp/67706/podrobnosti dc:identifier NEPOSILAT VSKP vse67706 221022 67706