ENISA: A reason for risk concerns of a cloud provider being acquired is:
ENISA: A reason for risk concerns of a cloud provider being acquired is:
When a cloud provider is acquired, non-binding agreements such as terms of use (ToU) might be put at risk. These types of agreements, being non-binding, are more susceptible to change under new ownership. The acquiring company might choose to alter or disregard previously established non-binding agreements, which can affect the services and conditions initially agreed upon. This makes non-binding agreements particularly vulnerable during a transition of ownership.
> The acquisition of the cloud provider (R.6) can also have a similar effect, since it increases the likelihood of sudden changes in provider policy and non-binding agreements such as terms of use (ToU).
ENISA page 32: Acquisition of the cloud provider could increase the likelihood of a strategic shift and may put non-binding agreements at risk.
A. Arbitrary contract termination by acquiring company. When a cloud provider is acquired by another company, there is a risk that the acquiring company may arbitrarily terminate existing contracts with customers. This can lead to service disruptions, loss of data, and potential legal and financial implications for the affected customers. The acquiring company may have different priorities, business strategies, or may not want to continue providing the same level of service to existing customers, resulting in contract termination. While the other options listed can also be potential concerns during a cloud provider acquisition, ENISA specifically highlights the arbitrary contract termination by the acquiring company as a risk concern. It emphasizes the importance of contractual agreements and the potential impact on customers when there is a change in ownership or control of the cloud provider. Therefore, option A, arbitrary contract termination by the acquiring company, is the correct answer according to ENISA.
enisa page 26