A Systematic Review of Information Security Governance Frameworks in the Cloud Computing Environment

The senior management of any enterprise that plans to start using Cloud Computing services needs to define a clear governance strategy with regard to the security of its information assets. This paper presents a systematic literature review whose objective is to seek existing Information Security Governance frameworks that may assist companies with these functions. The analysis of the frameworks extracted is complemented with a set of comparative criteria that consider the particularities of Cloud Computing when dealing with security governance issues.