Author Description

"Cloud computing is the present and future of IT, a utility service that promises unlimited, cheap, and reliable IT services for all - but carries significant legal and business risks for organizations. Executives, and the lawyers and risk professionals who advise them, must understand how to identify, assess, and respond to these risks in their own organizations and in cloud service providers and do so in a globally-aware manner. This important resource introduces cloud computing, not only what it is but when to use (or not use) it and the financial implications to consider. It covers the applicable statutes and regulations that affect organizations using the cloud, including privacy, information security, breach notification, cross-border data transfers, blocking statutes, and cloud-specific laws, cases, and activities. Information risk and response in the cloud, including privacy and information security risk assessment, controls, and standards, are discussed and analyzed through specific cloud frameworks and a suggested approach to manage cloud information risk. Data preservation and disclosure requirements through e-discovery and record requests and data breach response in the cloud are discussed along with cyber insurance, forensics, and business continuity. The updated and revised second edition of this popular book now covers: big data, personal clouds, bring your own device (BYOD), critical infrastructure, cyber insurance, health IT, cloud taxation, and much more. Detailed contract provisions for each cloud service model from leading providers and negotiated cloud agreements are presented and analyzed. Real-life scenarios for a large multinational organization and a small and medium-size enterprise, from cloud-specific requirements to cloud contract, are presented in detail. The book closes by discussing lawyers' use of the cloud, including legal ethics, individual consumer cloud usage, and how to get started with the cloud"--Unedited summary from book.