1. D e v e l o p i n g a G o v e r n a n c e a n d R i s k S t r a t e g y
f o r C l o u d C o m p u t i n g
P a g e 1 o f 2
3 6 2 0 5 F 8 4 - E 5 E 2 - 4 2 F 5 - 8 3 7 9 - 7 0 3 2 2 E B A 7 2 5 D - 1 6 0 8 1 5 1 5 5 1 4 7
© J o h n D S a n d e r s , B S , M B A , C G E I T ©
COURSE INFORMATION
TITLE: DEVELOPING A GOVERNANCE AND RISK STRATEGY FOR CLOUD COMPUTING
PROPOSED CLASS LENGTH: 4-5 HOURS
PROPOSED TALK LENGTH: 1½ HOURS
PREREQUISITES: FAMILIARITY WITH COBIT 5
AUDIENCE: SUITABLE FOR BOTH NON-TECHNICAL AND TECHNICAL PEOPLE
ABSTRACT
Business today is moreand moreembracing Cloud as a strategic computingplatform. The Cloud ComputingPlatform
comes in various flavors like Platform as a Service (PaaS), Infrastructure as a Services (IaaS), Software as a Service
(SaaS). Developing a clear picture of Cloud Computing Platformcapabilities,benefits and pitfalls provides a strong
basis for decision makingby non-technical executives.
Many times business executives decide to pursue CCP based on the hype cyclewhile not having developed a solid
strategy for the governance, risk and security domains and only after they are already ‘in too deep’ to they start to
realizethe potential pitfalls.
Understandingthe compliance,security and risk issuesaround a cloud computingplatformwill enablethe business
to effectively consider their options. Applyingthetechnique outlined in this coursewill enablethebusiness to follow
a systematic approach to the development of a strategy that fits its needs.
The language of the strategy should be business terminology based on business imperatives not technology
answeringthe 4 governance questions.
ACADEMIC OBJECTIVES
This coursewill providea foundation for the student to think through and develop a simplified Governanceand Risk
strategy for their adoption of a Cloud Computing environment usingCOBIT 5.
At the end of this coursethe student should be ableto:
 Understand what Cloud Computing is and what it is not
 Apply Cobit 5 Governance to their cloud initiatives
 Use the technique offered to develop their own simplified cloud governance/risk strategy
COURSE OUTLINE (PROPOSED)
1. Introduction
2. COBIT 5 Overview
3. Governance Overview
4. Risk Overview
5. Cloud Computing Overview

2. D e v e l o p i n g a G o v e r n a n c e a n d R i s k S t r a t e g y
f o r C l o u d C o m p u t i n g
P a g e 2 o f 2
3 6 2 0 5 F 8 4 - E 5 E 2 - 4 2 F 5 - 8 3 7 9 - 7 0 3 2 2 E B A 7 2 5 D - 1 6 0 8 1 5 1 5 5 1 4 7
© J o h n D S a n d e r s , B S , M B A , C G E I T ©
6. Developing the Risk Strategy for Cloud
7. Developing the Governance Strategy for Cloud
8. Documenting the Strategy
9. Next Steps
10. Q/A
HANDOUT MATERIALS
1. Presentation
2. Document Template
3. White Paper