Cloud computing introduces new, potential risks that must be addressed by the information security manager because:

Cloud computing is a technology that is not yet fully understood

Third party cloud providers cannot be trusted to secure data

Cloud computing creates a layer of abstraction between the physical infrastructure and the system owner

Cloud computing is accessible to anyone over the internet

Explanation

Cloud computing introduces new, potential risks that must be addressed by the information security manager because cloud computing creates a layer of abstraction between the physical infrastructure and the system owner. ??? but so does virtualization... which has been in play for decades now.

bad question, please consider removing or please share source.

Added by another member: I would use the approach of eliminating wrong answers: 1) Cloud computing creates a layer of abstraction between the physical infrastructure and the system owner - COULD BE, AND SO DOES VIRTUALIZATION;

2) Third party cloud providers cannot be trusted to secure data - NOT NECESSARY, SOME CLOUD PROVIDERS HAVE VERY STRONG IMAGE AND LEVEL OF COMPLIANCE TO SECURITY BEST PRACTICES AND WITH SUPPORT OF CONTRACT YOU CAN TRUST THEM;

3) Cloud computing is accessible to anyone over the internet - NOT NECESSARILY, THERE ARE 3 CLOUD DEPLOYMENT MODES: PRIVATE, HYBRID AND PUBLIC;

4) Cloud computing is a technology that is not yet fully understood - NO, THE FACT THAT WE CAN'T EVALUATE THE RISK OR DON'T UNDERSTAND THE TECHNOLOGY DOESN'T NOT MAKE IT MORE RISKY THAN IT IS.

So option 1 is correct choice