This register lists the cloud services you rely on, what data each holds, how critical and portable it is, how reliable it is and your way out if it fails.

Effective IMS Registers

This register template is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:

• Register number and title
• Information-classification
• Version
• Page number / total pages

alphaZ documents - beautifully designed, tried and tested register templates. No junk, jargon or unnecessary content. Simple and usable register templates developed over 25 years through practical use in the real world.

Further Reading

Further guidance on cloud services:

• Cloud Computing Risks and Exit Strategies
• Supplier and Third-Party Information Security
• ISO 27001 Annex A Controls
• Information Security knowledge base

Logo Update Service

Download this register with your company name and logo already added!
Document Preparation is included with the alphaZ subscription.

How to Download

This file is included in the alphaZ subscription. This register is also included in the ISO 27001 toolkit and the integrated toolkits that include it, so the toolkit route gives you this file plus everything else you need in one download.

Need Help Implementing?

If you'd like hands-on help reviewing your cloud services and exit strategies, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.

Cloud Computing Register Template

The Cloud Computing Register is a Word template for a central register of the cloud platforms and providers in use across a company, function or department, with a basic assessment of the importance and reliability of each to support risk and continuity planning if a provider fails or withdraws its service.

What's Included in this Register

• Reviewed By and Date Reviewed - a header row to record who reviewed the register and when
• Cloud Solution / Provider - each cloud service in use
• Overview of Data and Processing Activity - the data held and the processing it supports
• Criticality / Portability - how important the service is and how easily you could move away from it
• Reliability / Exit Strategy - how reliable the provider is and what you would do if it failed
• Overall Risk Rating and Notes - the rating given and any other considerations

Built for Information Security in the Cloud

• Supports the ISO 27001:2022 control on information security for the use of cloud services
• Gives a record of where data is processed, useful for data protection as well
• Prompts for an exit strategy before one is needed

Who Needs a Cloud Computing Register?

Any organisation that depends on cloud software, storage or platforms, and particularly those working to ISO 27001 or handling personal data, that wants a short record of each service and its risk.

Included in the ISO 27001 Toolkit

This register is part of the ISO 27001 toolkit and the integrated toolkits that include it.

Using the Register

List every cloud service in use, including software, storage and platforms taken on by individual departments, with an overview of the data each holds and the processing it supports. Rate how critical each service is and how easily you could move away from it, note the provider's reliability and your exit strategy, then give an overall risk rating. Review the register when a new service is taken on and at planned intervals.

Planning an Exit Before You Need One

Cloud providers can change their terms, raise prices, suffer outages or withdraw a service. The criticality and exit strategy columns make you think about this for each service in advance. For critical services, the F-Q108 Cloud Emergency Exit Strategy Planning form takes the exit plan further, and the RA-BR7 Cloud Computing Risk Assessment assesses the wider business risks of relying on cloud services.

Document Control

The footer carries the register number and title, issue, information classification and page numbering. The register can be listed with your other controlled documents on the F-IMS20 Document Register.

Works with the Cloud Computing Policy

Other alphaZ documents for cloud services:

• F-Q108 Cloud Emergency Exit Strategy Planning - for more detail on each provider and its exit strategy
• PP-8-09 Cloud Computing Policy Procedure - sets out the cloud computing arrangements
• P-100 Cloud Computing Policy - the cloud computing policy statement
• RA-BR7 Cloud Computing Risk Assessment - assesses the business risks of relying on cloud services