Storing Information in the Cloud – A Research Project

Abstract

Cloud computing as a new delivery model is proving challenging for recordkeeping professionals. The ARA/Aberystwyth University research project, ‘Storing Information in the Cloud’ aimed to investigate the management, operational and technical issues surrounding the storage of information in the cloud. It also set out to develop a toolkit that could assist information professionals in assessing the risks and benefits of outsourcing information storage and processing. Based on the information gathered through a literature review, questionnaire, an unconference, as well as interviews with cloud providers and customers, the outcomes included the Cloud Computing Toolkit, a list of cloud computer resources relevant to the records and information community and specific recommendations. These include further research into the implications of cloud computing for record-keeping principles and practice and the development of cloud-specific guidance and policies and a pool of resources relating to cloud computing and information management. The extension of the research to consider its implication for the long-term preservation of digital material was also a recommendation and the development of a more active role for professional bodies in bringing together information professionals and in forming interest/working groups on specific related to cloud computing. New technologies or new models continue to challenge the profession's ability to maintain information governance and assurance and on-going research is required to ensure that we address the practical and strategic issues of the fluid information ecology.

Notes

See, for example, the case studies in Convery, Storing Information in the Cloud – Project Report.

Reese, Cloud Application Architectures.

Ibid.

ENISA, Cloud Computing: Benefits, Risks and Recommendations for Information Security.

NIST, Definition of Cloud Computing

Preez, Cloud Expo: Europe is 12 Months Behind the US in Cloud Uptake, ENISA, Cloud Computing: Benefits, Risks and Recommendations for Information Security.

See ENISA, Cloud Computing Information Assurance Framework and Cloud Computing: Benefits, Risks and Recommendations for Information Security Australasian Digital Recordkeeping Initiative, Advice on Managing the Record-keeping Risks Associated with Cloud Computing, and Hammond, Cloud Computing for Research: Final Report.

Results of the survey and information about sector and geographical spread are available from the project report (Convery, Storing Information in the Cloud – Project Report).

ENISA, An SME Perspective on Cloud Computing.

Convery, Storing Information in the Cloud – Project Report and Cloud Computing Toolkit: Guidance for Outsourcing Information Storage to the Cloud.

The list of cloud providers interviewed are listed in the Cloud Computing Report (Convery, Storing Information in the Cloud – Project Report).

For questionnaire results please refer to Convery, Storing Information in the Cloud – Project Report.

Cabinet Office, Government ICT Strategy: Smarter, Cheaper, Greener, Bellamy and Gallagher, Data Centre Strategy, G-Cloud & Government Applications Store Programme Phase 2 Scope Report.

BSI, Information Technology – Security Techniques – Information Security Management Systems – Requirements, United States Congress, Federal Information Security Management Act 2002.

IRM, A Risk Management Standard.

OGC, Managing Successful Projects with PRINCE 2 and JISC InfoNet, Risk Management Infokit.

TNA, Managing Information Risk: A Guide for Accounting Officers, Board members and Senior Information Risk Owners.

Pearce-Moses and Davies, ‘New Skills for a Digital Era’.

Davenport, Information Ecology: Mastering the Information and Knowledge Environment.