Continuous Auditing and Continuous Certification of Cloud Services in MEDINA – Security Auditor’s View

This paper discusses views on continuous auditing and continuous certification of cloud services in the context of the MEDINA EU project and the security auditing industry. Based on an introduction of MEDINA, the notions of continuous auditing and continuous certification are introduced from a security auditor’s perspective to discuss the opportunities and challenges related to these topics. The paper also discusses further actions beyond this project in order to provide feedback on how continuous auditing and certification can be developed and introduced to the market.