ABSTRACT
All these aspects are monitored by the cloud data center provider and conrmed or tested by independent auditors at regular intervals (e.g., yearly) based on the certication and attestation needs of the cloud provider. e cloud customer has in general no access to this monitoring data and can only read the reports provided by the independent thirdparty auditors. In some private cloud environments, a customer may be allowed to receive a regular report that includes some security access log information to his or her dedicated equipment or cloud system environments. However, in a true cloud-based setup, there is no identiable customer server anymore, and physical access and maintenance is handled the same across all customers. Also all other aspects of the facility operation and monitoring are solely controlled by the cloud provider. e purpose and scalability of cloud implies that the customer does not need to deal with physical hardware, sizing, energy consumption, or capacity management any more. erefore, the monitoring is also not of any concern by the customer as long as the cloud provider is able to deliver the agreed service levels and availabilities. In the end, the cloud customer focuses on the facility layer on the availability and regular conrmation of the applicable cloud data center certications and industry standards maybe combined with a yearly on-site audit and/or data center visit.
