Towards IT Audit Approach of Public Sector Cloud Services under Conditions of Martial Law in Ukraine

Abstract:

The article highlights the issue of the implementation of cloud computing by public users under the conditions of martial law in Ukraine, provides basic concepts in the field of cloud services, and describes the best practices for conducting an IT audit of Microsoft Azure cloud services, which allow: to assess whether Azure services safely support the operational goals of public users of cloud services, verify compliance with regulatory requirements in terms of response to cyber threats and document the effectiveness and adequacy of Azure services, identify "weak places" that require the formation of risks for response, strengthening/improvement of controls, development of appropriate further actions of officials of public users of cloud services, and recommend based on the results of the IT audit, ways to find the optimal workload architecture.