This week you are will learn about the Capital One Breach in your case study you will be writing. In the Capital One breach specifically this there is some debate on the responsibility of the cloud provider, versus the cloud consumer. Go find a service level agreement for a cloud service or select one of the examples and then answer the following questions to help relate it back to the risk of the cloud business model outside of the typical thought of security risks.

1. What are the aggregate losses/payment the cloud provider will give to the customer in case of an issue?

2. How much notice does the provider have to give if they want to terminate the agreement, and what are the implications of that?

3. Any other interesting pieces that you see?

(Example Cloud Service Agreements)

1. Azure

2. AWS

3. Google GCP

4. Akamai