You are the technology auditor for a medium size online retailer. With the growth, it has been very difficult for the Information Technology (IT) group to keep up with the hardware requirements and new software for all the various smartphone applications. Although there would be reduction of most of the IT staff the CIO has done an analysis of moving to a Cloud Computing solution with Amazon Web Services. With this change, all IT functions for the primary application of customer order processing and fulfillmentwould be handled through Amazon. The retailer will continue to handle the warehousing and physical shipment of the merchandise. The reduction in ongoing costs would be almost fifty percent along with major capital expenditures for upgrades if they were to keep processing in-house. Much of the in-house technology is outdated from a web application and regulatory standpoint.

Amazon Web Services is the largest provider of integrated Cloud Computing Services and offers a complete set of infrastructure and application services. Many organizations have lowered costs, including your competitors allowing them to lower costs and gain market share. One of the key benefits of cloud computing is the opportunity to replace up-front capital infrastructure expenses with low variable costs that scale as the business grows.

You have been asked by senior management to assist with the Amazon project and the evaluation of the controls.

a. Describe the five most significant areas of controls concern that you would like to express to the senior management in the transition to Amazon?Make sure your control concerns are consistent with the facts of the case.

b. How would you propose the organization get comfortable with the controls at Amazon prior to signing the contract? Be specific.

c. What role can internal audit play after the processing is moved to Amazon?Assume that internal audit cannot perform an actual audit at Amazon.