• Information Security Risks Caused by Cloud Service Agreement and Suggestions for Library and Information Community

    Subjects: Library Science,Information Science >> Information Science submitted time 2023-04-01 Cooperative journals: 《图书情报工作》

    Abstract: [Purpose/significance] The application of cloud service in the library can effectively improve the data storage and computing capacity of the library, but it also brings a lot of information resource security problems, and the non-standard cloud computing service agreement aggravates the information security risks faced by the library.[Method/process] This paper focused on the information security clauses in the cloud service agreement, selected 8 cloud services on behalf of the operator's service agreement as a sample, and analyzed the information security risks that exist in the current cloud service agreement terms in depth from data collection, data storage, data transmission, data access and service security.[Result/conclusion] The information security risks that library application cloud services may face include:the lack of cloud service agreement content, the difficulty of obtaining accurate protection of user information security; the vague description of cloud service agreement, the establishment of a sound security guarantee mechanism; the formulation of cloud service agreement are more conducive to cloud providers, so user rights are vulnerable. In this environment, the library should further clarify the ownership of library user data and emphasize the security of library information resources.