Abstract
Nowadays, cloud computing is an emerging concept in the Information Technology (IT) industry. Cloud computing is not a new technology, but is a new way of using or delivering resources. It also enhances the efficiency of computation by providing centralized databases, memory processing and on demand network access. Consequently, cloud computing has become an important platform for companies to build their infrastructures upon. It allows organizations to use Internet-based services so that they can reduce start-up costs, lower capital expenditures, use services on a pay-as-you-use basis, access applications only as needed, and quickly reduce or increase capacities. If companies are thinking of taking advantage of cloud-based systems, they will have to seriously re-assess their information security risk management strategies. In recent years, numerous risk management frameworks based on information security have been proposed to manage the risk of cloud computing. This paper discusses how information security risk management is related to the cloud computing environment. It also presents seven different information security risk management frameworks that cover all of cloud service models and deployment models. These frameworks are classified according to coverage area of the framework. Moreover, the paper sheds light on some suggestions that may help cloud users. These suggestions are related to information security risk management in cloud computing and were obtained through a comparison made in this paper between the presented frameworks.