A Unified Approach Towards Security Audit and Compliance in Cloud Computing Environment

The biggest challenge in the audit and assurance of cloud computing is the lack of a de facto approach to meet an enterprise’s requirements. The primary focus is on the challenges and effectiveness of audit and assurance by conducting an exploratory study on industry best practices, auditing standards, required certifications, and regulatory compliance frameworks like GDPR, Sarbanes-Oxley, ENISA, ISO 27001, NIST, EU SEC, OWASP, BSI C5, CIS, ANSSI, HIPPA, CCM, CSA STAR, PCI DSS, COBIT and SOC in a cloud environment and classifying on basis of applicability. This research paper provides general guidelines on auditing standards by referring to threads and vulnerabilities analysed and suggesting a unified approach toward audit considerations in cloud computing environment.