Developing a Conceptual Framework for Cloud Security Assurance. - Bob Duncan; David J. Pym; Mark Whittington (CloudCom (2), 2013)

Reflecting on Whether Checklists Can Tick the Box for Cloud Security. - Bob Duncan; Mark Whittington (CloudCom, 2014)

Compliance with standards, assurance and audit: does this equal security? - Bob Duncan; Mark Whittington (SIN, 2014)

The Importance of Proper Measurement for a Cloud Security Assurance Model. - Bob Duncan; Mark Whittington (CloudCom, 2015)

Information Security in the Cloud: Should We be Using a Different Approach? - Bob Duncan; Mark Whittington (CloudCom, 2015)

Could the Outsourcing of Incident Response Management Provide a Blueprint for Managing Other Cloud Security Requirements? - Bob Duncan; Mark Whittington; Martin Gilje Jaatun; Alfredo Ramiro Reyes Zúñiga (ES, 2015)

Enhancing Cloud Security and Privacy: Broadening the Service Level Agreement. - Bob Duncan; Mark Whittington (TrustCom/BigDataSE/ISPA (1), 2015)