Additional guidance – Your assignment should be written in a white paper or proposal format (not a slide presentation) suitable for review at your meeting with the CIO. The intent is to provide the CIO with some educational background on his options and your recommendations focused on BPI’s intent to leverage cloud providers in general. It should provide some clear recommendations and how and why you came to the conclusions you did. The CIO will likely use this whitepaper or proposal to create a slide presentation to the CEO or board of directors at a future date.

Specifications for the assignment 1. Length of the paper 1. Length = 2,500 words (not including references and appendices) 2. The general text of the paper, excluding headings and title, should be written with following format specifications a. Font: Times New Roman b. Font Size: 12, regular c. Line spacing: double spaced d. Alignment: left e. Margins (inches): Left: 1.25; Right: 1.25; Top: 1; Bottom: 1 3. Do not forget to write your name as a header on each page. a. Font: Times New Roman; b. Font size: 9 regular c. Right aligned 4. Please enter page number as footer for each page.

1. Kindly read the assigned case “Better Payments Incorporated Ventures into the Cloud” and answer the questions listed under ‘Assignment Questions’.

2. Your responses should take into consideration the requirements and needs of Better Payments Incorporated as provided in the case.

3. At the minimum, submissions should reflect your understanding of required study material entitled CSA Guidance and other material presented in class as part of the course material. You are free to use any other relevant references beyond the prescribed text.

4. Your responses to assignment questions should be as the CSO of Better Payments Incorporated. Your job is to provide guidance to the CIO regarding cloud services that directly address the assignment questions below.

Assignment Questions

Question 1. What is the most appropriate Cloud Deployment model (or combination) for BPI (Public, Private, Community, or Hybrid)? Explain how your recommendation UNIQUELY addresses each of the four business objectives. You will need to explain how each objective is being met in the specific Cloud deployment model(s) that you recommend and the associated risks. [15 points]

Question 2. What is the most appropriate Cloud service delivery model (or combination) for BPI (SAAS, IAAS, PAAS)? Explain why. Explain how your recommendation UNIQUELY addresses each of the four business objectives. You will need to explain how each objective is being met in the specific Cloud delivery model(s) that you recommend and the associated risks. [30 points]

Question 3. Which type of security activities can BPI reasonable expect to be responsible for conducting under your recommended cloud service offering you identified in question 2? Which security activities can BPI reasonable expect the cloud service provider to be responsible for conducting based on the CSA guide? [25 points]

Question 4. Summarize how BPI should approach of the each 13 domains (as identified within the CSA Guide) for cloud based services it decides to implement. [30 points]