Making Your Move to the Cloud a Success | AccountingWEB

Making Your Move to the Cloud a Success

Our sister site,, recently posted this report from global nonprofit IT association ISACA.  The association has prepared a useful guide, Guiding Principles for Cloud Computing Adoption and Use, which features six key Cloud Computing principles to ensure - or at least improve the chances of - successful adoption.
The Enablement Principle
Plan for Cloud Computing as a strategic enabler, rather than as an outsourcing arrangement or technical platform. To plan strategically for Cloud adoption and use, enterprises need to:
  • Treat Cloud Computing adoption and use as a strategic business decision.
  • Make informed decisions, considering both business and operational needs and the benefits that can be provided by Cloud Computing.
  • Communicate Cloud Computing arrangements and agreements to internal parties to ensure proper alignment and consistent oversight.
  • Periodically review organizational strategies and the contribution of IT to ensure that Cloud initiatives maximize value  delivery, risk management and resource utilization.

The Cost/Benefit Principle

Evaluate the benefits of Cloud acquisition based on a full understanding of the costs of Cloud compared with the costs of other technology platform business solutions. To properly evaluate the costs and benefits of Cloud Computing, enterprises need to:
  • Clearly document expected benefits in terms of rapid resource provisioning, scalability, capacity, continuity and the  cost reductions that the Cloud services offer.
  • Define the true life-cycle cost of IT services provided internally or through a provider to have a basis for comparing  expected and received value.
  • Balance cost with functionality, resilience, resource utilization and business value.
  • Look beyond cost savings by considering the full benefits of what Cloud services and support can provide.
  • Periodically evaluate performance against expectations.

The Enterprise Risk Principle

Take an enterprise risk management (ERM) perspective to manage the adoption and use of cloud.  To understand the risk implications of Cloud Computing, enterprises need to:
  • Consider the privacy implications of co-mingling data within the virtualized computing environment.
  • Evaluate privacy requirements and legal restrictions, considering client needs as well as provider restrictions and capabilities.
  • Determine the accountability addressed in SLAs, the ability to monitor performance and available remedies.

The Capability Principle

Integrate the full extent of capabilities that Cloud providers offer with internal resources to provide a comprehensive technical support and delivery solution. To leverage both internal and Cloud provider resources effectively, enterprises need to:
  • Understand the human and technical resource capabilities that exist in the current infrastructure and how a Cloud strategy will impact the need for these or other resources. 
  • Define the capabilities that a Cloud provider will make available as well as constraints on these resources, including  periods of unavailability or priority of use.
  • Consider emergency situations and resource requirements necessary to determine causes, stabilize the environment,  protect sensitive and private information, and restore service levels.
  • Determine how policies, practices and processes currently support the use of technology; how transitioning to a Cloud  solution will require policy, practice and process changes; and the impact these changes will have on capabilities.
  • Ensure that service providers can demonstrate that personnel understand information security requirements and are  capable of discharging their protection responsibilities.
  • Ensure that internal staff have the skill and expertise to coordinate activities with Cloud providers and that they are  engaged in Cloud service acquisition and ongoing management.
  • Ensure that effective channels of communication are provided with provider management and key specialists, particularly for problem identification and resolution.

The Accountability Principle

Manage accountabilities by clearly defining internal and provider responsibilities. To ensure that responsibilities are clearly understood and individuals and groups can be held accountable, enterprises need to:
  • Understand how traditional responsibilities are assigned and implemented within the existing organizational structure  and as a part of policies and practices to determine how these are addressed within Cloud solutions.
  • Determine how responsibilities between tenant and provider organizations for Cloud solutions are assigned and how  communications between accountable individuals and groups will be facilitated.
  • Ensure that processes and procedures provide a mechanism to ensure that responsibilities are accepted and accountabilities are clearly assigned.
  • Maintain within the governance structure a means of reviewing performance and enforcing accountabilities.
  • Consider the risk to the enterprise as part of the enterprise risk management program, the impact of potential lapses in  assigned responsibilities, or the impact of not being able to assign accountabilities.

The Trust Principle

Make trust an essential part of Cloud solutions, building trust into all business processes that depend on Cloud Computing. To ensure that business processes that depend on Cloud Computing can be trusted, enterprises need to:
  • Clearly define confidentiality, integrity and availability requirements for information and business processes.
  • Understand how reliance on Cloud Computing solutions may impact trust requirements.
  • Structure the efforts of security, risk management and assurance professionals within both tenant and provider  organizations to ensure that trust requirements are known and satisfied.
  • Monitor changes in business use of Cloud Computing, vulnerabilities associated with Cloud solutions, and implementations across tenant and supplier environments to ensure that threats to trust can be identified and resolved.
  • Ensure that Cloud infrastructure, platform and software service providers understand the importance of trust and  create solutions that can be trusted.
  • Provide ongoing assurance that information and information systems can be trusted.

ISACA's Guiding Principles for Cloud Computing Adoption and Use is available as a free download .


This blog

AccountingWEB is more than just a U.S. team of journalists and financial and technology experts - we have an international side, too. Members of our British team who publish share their ideas, insights, and perspectives from across the pond.

More from this blog

Bloggers crew

Steve Knowles has spent 25 years in business and practice in the UK, but he also worked in the states and the years haven't dulled his way of seeing an alternative view to everyone else, and every day is a new adventure.


Joel M. Ungar, CPA is a lifelong resident of the Detroit area and a graduate of The University of Michigan. He is a principal with Silberstein Ungar, PLLC, a Top 15 auditor of SEC public reporting companies.


Allan Boress, CPA, with over 25 years as a practitioner and consultant to the accounting profession. Mr. Boress is the author of 12 published books in 6 different languages, including a best-seller, The "I-Hate-Selling" Book.


Larry Perry, CPA, CPA Firm Support Services, LLC, is the author of accounting and auditing manuals, author and presenter of live staff training seminars, and author of webcast and self-study CPE programs. He blogs about small audits, reviews, and compilations.

Sandra Wiley, COO and Shareholder, is ranked by Accounting Today as one of the 100 Most Influential People in Accounting as a result of her prominent role as an industry expert on HR and training as well as influence as a management and planning consultant. She is also a founding member of The CPA Consultant's Alliance. Sandra is a certified Kolbe™ trainer who advises firms on building balanced teams, managing employee conflict and hiring staff.

Maria Calabrese, CIR, Human Resources manager for Fazio, Mannuzza, Roche, Tankel, LaPilusa, LLC in Cranford, New Jersey, Maria's topics revolve around the world of: Mentoring, Performance management, and The "Y Generation," a.k.a. "The whY generation".


William Brighenti is a CPA, Certified QuickBooks ProAdvisor, and Certified [Business] Valuation Analyst, operating an accounting, tax, and QuickBooks consulting firm in Hartford, Connecticut, Accountants CPA Hartford.


Ken Garen, CPA, is the co-founder and President of Universal Business Computing Company (, a software development firm of high-volume, high-productivity accounting and payroll technology.


Eva Rosenberg, MBA, EA, is the publisher of, and author of the weekly syndicated Ask TaxMama column. She provides answers to tax questions from taxpayers and tax professionals worldwide.


Amy Vetter, CPA, CITP is the CPA Programs Leader for Intacct Corporation responsible for leading the CPA/BPO Partners nationally.

Brian Strahle is the owner of LEVERAGE SALT, LLC where he provides state and local tax technical services to accounting firms, law firms and tax research organizations across the United States. He also writes a weekly column in Tax Analysts State tax Notes entitled, "The SALT Effect." For more info, visit his website:
Scott H. Cytron, ABC, is president of Cytron and Company, known for helping companies and organizations improve their bottom line through a hybrid of strategic public relations, communications, marketing programs and top-notch client service. An accredited consultant, Scott works with companies, organizations and individuals in professional services (accounting, finance, medical, legal, engineering), high-tech and B2B/B2C product/service sales.

Rita Keller is a nationally known CPA firm management consultant, speaker, author, mentor and blogger. She has over 30 years hands-on experience in CPA firm management, marketing, technology and administrative operations.

Stacy Kildal is the mom of two fantastic kids, an Advanced Certified QuickBooks ProAdvisor, Certified Enterprise Solutions ProAdvisor, Sleeter Group Certified Consultant, a nationally recognized member of the Intuit Trainer and Writer Network, and co-host of RadioFree QuickBooks.
Michael Alter's blog specializes in providing practical advice to those who seek greater profitability and practice management tactics that enhance deeper client relationships.

Sally Glick, CMO, Principal, Marketer of the Year in 2003 and AAM Hall of Famer in 2007, leads a lively discussion of the constantly expanding roles of marketing and the professional marketers that drive this initiative in accounting firms of all sizes.


The IMA Young Professionals Blog features the insights of IMA’s Young Professionals Committee. Committee members share advice and experiences on careers, continuing education, work/life balance, and other issues affecting young accounting and finance professionals.


FEI Financial Reporting Blog provides highlights from SEC, PCAOB, FASB, IASB, and other regulatory news, including reporting under Sarbanes-Oxley Sect 404. It is written by Edith Orenstein, Director of Technical Policy Analysis at FEI.


Sue Anderson has 30 years of experience in continuing education for accountants. Currently she is the program director for online CPE provider CPE Link.


Jim Fahey is COO of Apple Growth Partners, a regional CPA firm in Ohio. His focus is on the effective and efficient use of technology within the firm by all team members.

Caleb Newquist is the Editor-in-Chief of Sift Media US, overseeing content for both AccountingWEB and Going Concern.

Leita Hart-Fanta, CPA, CGFM, and CGAP is the author of "The Yellow Book Interpreted" and owner of a website devoted to training for governmental auditors.


AccountingWEB is more than just a U.S. team of journalists and financial and technology experts - we have an international side, too! Members of our British team who publish share their ideas, insights, and perspectives from across the pond.