These issues are discussed in service-level agreements (SLA). Public records Legal issues may also include records-keeping requirements in the public sector, where many agencies are required by law to retain and make available electronic records in a specific fashion. This may be determined by legislation, or law may require agencies to conform to the rules and practices set by a records-keeping agency. Public agencies using cloud computing and storage must take these concerns into account. See also Computer security Common Vulnerabilities and Exposures Cloud Security Framework References Incident Detection, Handling, and Response in the Cloud Further reading BS ISO/IEC 27017: "Information technology. Security techniques. Code of practice for information security controls based on ISO/IEC 27002 for cloud services." (2015) BS ISO/IEC 27018: "Information technology. Security techniques. Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors." (2014) BS ISO/IEC 27036-4: "Information technology. Security techniques. Information security for supplier relationships. Guidelines for security of cloud services" (2016) External links Cloud Security Alliance Check Point Cloud Security Cloud Security Solutions Why cloud security requires multiple layers The Beginner's Guide to Cloud Security DoD Cloud Computing Security Requirements Guide (CC SRG) Archive Cloud computing Computer security