45% IT Pros say cloud computing risk is higher than return

CNET Technology Information Network April 8 International Report Although cloud computing is often touted as being able to save costs for businesses, IT Pros are still concerned about the security of the cloud computing environment.　　According to a recent survey by the International Information Systems Audit and Control Association (ISACA), about 45% of IT professionals surveyed said the risks involved in cloud computing were higher than any interest.　　Of the more than 1800 IT professionals surveyed, only 10% per cent of respondents planned to use cloud computing in key IT services, while 15% per cent planned to use cloud computing in Low-risk services, and 26% per cent did not intend to test water cloud computing at all. "Cloud computing represents a significant shift in the way computing resources are being used, and IT pros are not surprised to be concerned about the risks," said Robert Stroud, vice president of ISACA. If there are many stakeholders who view cloud computing as a major innovation, cloud computing will have the advantage of being equal or above risk. "In addition to cloud computing, the survey also measures common risk management policies for IT professionals." Only 22% per cent of respondents said their companies were incorporating it risk management into a comprehensive risk management strategy.　　Most of the organizations that focus on it risk management are under regulatory pressure to focus on it risk management, rather than for business improvement or self-interest. "Despite the severity of the regulation, it is unfortunate that more companies do not see improved performance as the main reason for performing risk management," said Brian Barnier, ISACA member and Valuebridge Advisors. In addition, employee behavior often places itself and the company at risk. 50% per cent said their employees did not protect classified documents, while 33% per cent said employees did not understand it policies and 32% per cent said employees used unapproved software and network services.