Cloud Computing Audit Form

ISACA®
With 95,000 constituents in 160 countries, ISACA (www.isaca.org) is a leading global provider of knowledge, certifications, community, advocacy and education on information systems (IS) assurance and security, enterprise governance and management of IT, and IT-related risk and compliance. Founded in 1969, the nonprofit, independent ISACA hosts international conferences, publishes theISACA® Journal, and develops international IS auditing and control standards, which help its constituents ensure trust in, and value from, information systems. It also advances and attests IT skills and knowledge through the globally respected Certified Information Systems Auditor™ (CISA®), Certified Information Security Manager® (CISM®), Certified in the Governance of Enterprise IT® (CGEIT®) andCertified in Risk and Information Systems Control™ (CRISC™) designations. ISACA continually updates COBIT®, which helps IT professionals and enterprise leaders fulfill their IT governance and management responsibilities, particularly in the areas of assurance, security, risk and control, and deliver value to the business.

Disclaimer
ISACA has designed and created Cloud Computing ManagementAudit/Assurance Program (the “Work”) primarily as an educational resource for audit and assurance professionals. ISACA makes no claim that use of any of the Work will assure a successful outcome. The Work should not be considered inclusive of all proper information, procedures and tests or exclusive of other information, procedures and tests that are reasonably directed to obtaining the same results. Indetermining the propriety of any specific information, procedure or test, audit and assurance professionals should apply their own professional judgment to the specific circumstances presented by the particular systems or information technology environment.

Reservation of Rights
© 2010 ISACA. All rights reserved. No part of this publication may be used, copied, reproduced, modified,distributed, displayed, stored in a retrieval system or transmitted in any form by any means (electronic, mechanical, photocopying, recording or otherwise) without the prior written authorization of ISACA. Reproduction and use of all or portions of this publication are permitted solely for academic, internal and noncommercial use and for consulting/advisory engagements, and must include full attribution ofthe material’s source. No other right or permission is granted with respect to this work.

ISACA
3701 Algonquin Road, Suite 1010
Rolling Meadows, IL 60008 USA
Phone: +1.847.253.1545
Fax: +1.847.253.1443
E-mail: info@isaca.org
Web site: www.isaca.org

ISBN 978-1-60420-162-8
Cloud Computing Management Audit/Assurance Program

CRISC is a trademark/service mark of ISACA. The mark hasbeen applied for or registered in countries throughout the world.
ISACA wishes to recognize:

Author
Norm Kelson, CISA, CGEIT, CPA, CPE Interactive Inc., USA

Expert Reviewers
Josep Bardallo, CISA, CISM, CGEIT, CISSP, ISO 27000 LA, PasswordBank, Spain
Chris Boswell, CISA, CISM, CGEIT, CISSP, CA Technologies, USA
Madhav Chablani, CISA, CISM, TippingPoint Consulting, India
Milthon J.Chavez, Ph.D., CISA, CISM, CGEIT, Resilience Organizational Center, Venezuela
Yves Dorleans, CISA, Charles River Laboratories, USA
Gbadamosi Folakemi Toyin, CGEIT, APDM, CGRC-IT, CICA, CIPM, Flooky-Tee Computers, Nigeria
Abdus Sami Khan, Sami Associates, Pakistan
Prashant A. Khopkar, CISA, CA, CPA, Grant Thornton LLP, USA
William C. Lisse Jr., CISA, CGEIT, CISSP, G7799, PMP, OCLC, Inc., USA
LucioAugusto Molina Focazzio, CISA, CISM, ITIL V3, Colombia
K. K. Mookhey, CISA, CISM, CISSP, Network Intelligence India Pvt. Ltd., India
Megah Santio, Australian Taxation Office, Australia

ISACA Board of Directors
Emil D’Angelo, CISA, CISM, Bank of Tokyo-Mitsubishi UFJ Ltd., USA, International President
Christos K. Dimitriadis, Ph.D., CISA, CISM, INTRALOT S.A., Greece, Vice President
Ria...