NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.
Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.
An official website of the United States government
Here’s how you know
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Leveraging the Potential of Cloud Security Service-Level Agreements through Standards
Published
Author(s)
Jesus Luna, Neeraj Suri, Michaela Iorga, Anil Karmel
Abstract
This article takes a fresh view on cloud security by analyzing, from the risk management perspective, the specification of security in Cloud Service Level Agreements (secSLA), which forms a promising approach to empower customers in assessing and understanding Cloud security. Furthermore, we analyze the standardization landscape and present a real-world scenario to support our advocacy in the creation and adoption of secSLA's as enablers for negotiating, assessing and monitoring the achieved security levels in the Cloud supply chain.
Luna, J.
, Suri, N.
, Iorga, M.
and Karmel, A.
(2015),
Leveraging the Potential of Cloud Security Service-Level Agreements through Standards, IEEE Cloud Computing Magazine, [online], https://doi.org/10.1109/MCC.2015.52, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=917339
(Accessed October 10, 2025)