There are difficulties that auditors have with cloud based applications. The fundamental assumption that the application is running locally, under control is violated. The primary issues being regulatory compliance and security. Measures are considered to get cloud governance in place. Then testing this for holes. Finishing up by considering how to finalize the governance strategy.
Read the full article here: