Companies working to assess and mitigate the risks that result from cloud computing just got some much needed help.

The Committee of Sponsoring Organizations (COSO) published new guidance on the topic last month. The paper, “Enterprise Risk Management for Cloud Computing,” leverages the principles of COSO’s “Enterprise Risk Management—Integrated Framework” document to help management and boards better understand the risks and opportunities presented by cloud computing.

Jaclyn Jaeger is a freelance contributor to Compliance Week after working for the company for 15 years. She writes on a wide variety of topics, including ethics and compliance, risk management, legal,...