University of St. Gallen
Evidence that allows assurance of accountability services, verification of compliance with the principles of accountability by service providers and attribution of responsibility for breaches within the chain of accountability is essential. This paper defines how evidence may be required and proposes suitable ways of treating key accountability concepts. It shows the importance of verification and assurance, monitoring and auditing, and challenges of evidence in cloud computing. A discussion of logging and evidence gathering points complete the paper.