Security, Privacy, and Compliance in the Cloud White Paper

See also  CJIS Security Policy Working Group - Audit and Accountability