Business Requirements for Cloud Vendors
- Cloud services should be established via written contracts that define the parameters of the relationship
- decision to use cloud services should be based on long-term business goals
- scope decision-making to departments impacted by cloud engagement
- evaluate regulator’s expectations with regard to cloud computing solutions
- consider the changing/new risks introduced
- determine the coasts associated with disaster recovery and outages situations
- recovery time objective (RTO)
- recovery point objective (RPO)
- maximum allowable downtime (MAD)