Security Governance as a Service on the Cloud

The increasing number of security attacks is placing organizations in difficulty, especially SMEs. Their workload is exacerbated by information handling obligations imposed by insurance companies as part of cyber-insurance contracts, and by regulations like the GDPR. An emerging possibility is for security and compliance to be provided as a cloud service that SMEs can connect their IT infrastructure to. The advantage of the cloud is that competence can be outsourced outside of the company, and that a cloud provider can act as a trusted third party when the company is audited for compliance or following a data breach.