Cloud computing offers many benefits to companies as well as risks. The European Network and Information Security Agency (ENISA) has recently released a report regarding cloud computing and the inherent risks, benefits, and recommendations for a company to consider about security and management of their information. This is the first report to take a thorough and autonomous view of technical and legal issues, as well as the risks and benefits for users.

The benefits of cloud computing are clear. Providers have an edge with instant defensive resources such as filtering and re-routing. Security patches can be quickly and efficiently dispersed, and providers can utilize complete diagnostic evidence to help pinpoint the problem. However, there are security risks to cloud computing, and ENISA recommends a security checklist to assist customers in asking the right questions.

Included on the check list are questions regarding who has access to what information; where the data is stored; what happens to deleted information. These are issues that need to be addressed before the best option for security and management of data and information is chosen. Other questions that need to be answered are:

•    Who sees the information?
•    What happens when there is a loss of information?
•    How secure is your information? Will your competitor have access to shared cloud information?
•    How easy is it to change services providers if necessary?

Reviewing your service agreement is imperative to understanding the options offered by your provider and knowing exactly what you can expect should something go wrong. Although you cannot prevent every disaster, being educated and aware of the risks and benefits of cloud computing can help your company optimize security and management of your information.

The ENISA report covers all the technical and legal implications of cloud computing, and offers detailed recommendations regarding security and management of the heart and soul of a company. Says Giles Hogben, an ENISA expert and editor of the report, "The business case for cloud computing is obvious - it's computing on tap, available instantly, commitment-free and on-demand. But the number one issue holding many people back is security - how can I know if it's safe to trust the cloud provider with my data and in some cases my entire business infrastructure?"

It can be a frightening prospect, to put the security and management of information in the hands of another entity, but the benefits seem to outweigh the risks with a reputable company. The key is the same as for any other big business decision – do your homework, ask questions, and investigate different options until you find the perfect fit for your particular needs.