IWCC 2015 - 1st International Workshop on Cloud Compliance

Cloud computing is emerging as an attractive platform for hosting enterprise workloads, even those that need to satisfy regulatory and other compliance requirements. Examples of such workloads include but are not limited to healthcare, finance, and government. Compliance assurance of such workloads is highly challenging. It not only involves security and privacy controls at infrastructure, platform, and application software layers, but it also involves prescribed administrative, monitoring and reporting requirements. Cloud computing platforms appeal to enterprises for hosting such workloads because: (1) they can facilitate outsourcing of relevant compliance controls and processes to the cloud provider in a legally-binding manner, (2) enterprises can focus on their core businesses instead of diverting resources towards compliance assurance and, (3) enterprises can expand their business onto domains that require compliance assurance in an easier and less expensive manner than before, thereby enhancing the competitive landscape. The focus on security and compliance is rising especially due to the numerous healthcare and financial data breaches we have witnessed recently.
We envision that the IWCC'15 workshop shall offer a first platform for academic, industrial, and government researchers and practitioners to engage in an exchange of ideas and experiences, helping advance the state of the art on workload compliance on cloud platforms. The workshop may combine academic papers, posters, technology demonstrations, keynotes, panel discussions and other activities as deemed appropriate. We believe this agenda will help strengthen the link between academic research on cloud computing and the practical concerns enterprises face with respect to workload compliance on the cloud. Topics of interest include, but are not limited to: current state and future of compliance, challenges and issues for clouds in assuring compliance, compliance in the ecosystem of emerging cloud platforms such as hybrid and private cloud, micro-cloud, mobile?cloud, and how advances in cloud security and privacy influence cloud compliance.
As part of the workshop program: we plan to host two keynotes, and one panel by academic and industry experts on cloud, compliance and security.
Scope and Interests
The scope of IWCC'15 include, but not restricted to:
? Assurance of compliance in cloud: XaaS - IaaS, PaaS, SaaS, DaaS
? Monitoring and Management of compliance in cloud
? Cloud security for compliance
? Data privacy
? Mobile and IoT compliance in the context of cloud
? Forensic analysis for compliance
? Compliant systems, networks, virtualization
? Compliant software engineering, testing
? Compliance automation
? State-of-the-art in IT regulatory Compliance: HIPAA, PCI/DSS, SOX, FEDRAMP, FERPA, and so on
? Future of Cloud and IT regulatory compliance