The Institute of Internal Auditors Qatar held a knowledge sharing seminar titled “Cloud computing risk, control and audit” at Grand Heritage Doha Hotel recently. The trainer Prof Frank Yam is Director Global of Information Systems Audit & Control Association (ISACA). He has over 25 years of IT audit and control experience and is the CEO of Focus Strategic Group Inc Hong Kong.
“The cloud computing is still a dreaded area due to apprehensions related to security, controls and availability. Auditors should understand how cloud computing will affect an organization’s control environment. Prof Yam emphasized three key points 1) Organizations and individuals will rely more and more on cloud computing 2) Anticipate Cloud related risks including fraud 3) Understand risks and recommend appropriate controls,” said Sundaresan Rajeswar, the IIA board member who coordinated the event.
Prof Yam said: “Even if you may not recognize it, you are probably already using cloud computing and are pretty savvy in using it. Webmail, social networking, video streaming, productivity software sites and back up services are some of them. The cloud computing is being organized as a public utility just as telephone system”
Information Systems Audit & Control Association (ISACA) has laid out guiding principles for adopting the cloud. These are enablement, cost benefit, enterprise risk, capability, accountability and trust.
Christian Adonis opened the meeting. Board members Fahad Al Marri, Felix, Naveed, and Muralikrishna were present with over hundred in attendance.
The Peninsula
