Database Reference
In-Depth Information
Organizations should endeavor to understand not only what functionality
they will receive when using a cloud service, but also how the deployment
model a cloud service utilizes will affect the environment in which data
is placed.
CSP and End-User Agreements
CSPs enforce common acceptable-use standards across all users to
effectively maintain how a consumer uses a CSP environment. Thus,
use of a CSP environment usually requires end users to sign terms-of-
service (TOS) agreements. Additionally, organizations can also require
CSPs to sign nondisclosure agreements (NDAs) to enforce acceptable
CSP personnel behavior when dealing with data. TOS and NDAs need
to be fully contemplated and agreed upon by both CSPs and organiza-
tions to ensure that all parties fully understand the breadth and scope
of their duties when using cloud services. These agreements are new to
many IT contracts because of the nature of the interaction of end users
with CSP environments.
Terms of Service Agreements
Organizations need to know if a CSP requires an end user to agree to TOS
in order to use the CSP's services prior to signing a contract. TOS restrict
the ways consumers can use CSP environments. They include provisions
that detail how end users may use the services, the responsibilities of the
CSP, and how the CSP will deal with customer data. Provisions within
a TOS may contradict organizational policies. Given that, organizations
are advised to work with CSPs to understand what they require in order
for end users to access a CSP environment and at the same time ensure
that any TOS document incorporated into the contract is acceptable to
the organization. If the TOS are not directly within the contract but only
referenced within the contract, the TOS should be negotiated and agreed
upon prior to contract award.
Additionally, TOS sometimes include provisions relating to CSP
responsibilities, controlling law, indemnification, and other issues that are
more appropriate for the terms and conditions of the contract. If these
provisions are included within service agreements, they should be clearly
defined. Furthermore, any agreements must address time requirements
that a CSP will need to follow to comply with rules and regulations.
Search WWH ::




Custom Search