Understanding and Evaluating Cloud Use Enterprise-Wide

Building best practices to support critical enterprise activities

These resources have been developed to address the unique concerns and emerging best practice solutions for outsourcers around security and controls for cloud vendor use. Included are practical recommendations, questions to discuss with cloud providers, and lessons learned for control domains that are cloud-related to:

  • Improve ability to detect and respond to cyber-related events.
  • Improve accountability in down-chain providers.
  • Increase the probability that regulatory compliance will be better documented.
  • Improve event investigations outcomes for continuous improvement efforts.

These recommendations may be used in conjunction with Shared Assessments Program Tools and resources, or may be selected and incorporated into other types of audits or assessments of environments containing cloud elements.

To obtain a copy of these papers, please complete the form below. A download link will be sent upon receipt of submission to the email address provided.


  • This field is for validation purposes and should be left unchanged.

Shared Assessments Licensee Power Advocate
Shared Assessments Logo Deloitte
Shared Assessments Logo Bank Of New York Mellon
Shared Assessments Logo usbank
Shared Assessments Logo yodlee
Shared Assessments Logo Iron Mountain
Shared Assessments Logo sei
Shared Assessments Program licensee Churchill & Harriman logo
Shared Assessments Licensee ZS logo
Shared Assessments Licensee TD Ameritrade
Shared Assessments Licensee ControlCase
Shared Assessments Licensee Rsam
Shared Assessments Licensee Lockpath
Shared Assessments Licensee Bank of the West
Shared Assessments Logo pwc
Shared Assessments Logo radian
MetricStream logo
Shared Assessments Licensee Protiviti
Shared Assessments Logo Deluxe Corp
Viewpoint Logo
Shared Assessments Logo first data
intralinks-logo
Shared Assessments Licensee Pivot Point Security
Shared Assessments Logo Ernst & Young
Shared Assessments Logo dtcc