Organizations use cloud computing to support applications, data analytics, collaboration, enterprise databases, artificial intelligence, business operations, and digital infrastructure.

Modern cloud environments can combine public cloud, private cloud, on-premises infrastructure, and edge computing.

Context

Cloud computing has developed from basic hosted applications into extensive technology environments capable of supporting enterprise workloads.

The main cloud computing models include:

• Infrastructure as a Service (IaaS)

• Platform as a Service (PaaS)

• Software as a Service (SaaS)

• Public cloud

• Private cloud

• Hybrid cloud

• Multi-cloud

Cloud Service Models

NIST identifies IaaS, PaaS, and SaaS as the three principal cloud service models and recognizes public, private, community, and hybrid deployment models.

Enterprise Cloud Infrastructure

Cloud infrastructure consists of physical and virtual resources that support cloud computing.

Common components include:

• Computing resources

• Storage

• Databases

• Virtual machines

• Containers

• Networks

• Load balancing

• Identity management

• Monitoring systems

• Backup infrastructure

NIST describes cloud infrastructure as including physical resources such as servers, storage, and networking together with an abstraction layer that enables cloud capabilities.

Business Applications

Cloud platforms can support business applications including:

• Enterprise resource planning

• Customer relationship management

• Financial applications

• Human resources

• Supply-chain management

• Business intelligence

• Document management

• Collaboration

• Analytics

These applications can connect departments and provide access to shared organizational information.

Importance

Cloud computing is important because organizations increasingly depend on digital applications, data platforms, remote collaboration, analytics, and connected business systems.

Cloud infrastructure can support:

• Scalable computing

• Centralized data management

• Application availability

• Remote access

• Business analytics

• Disaster recovery

• Application integration

• Automated infrastructure management

Cloud Data Infrastructure

Enterprise cloud environments may process information from:

• Business applications

• Customer systems

• Financial platforms

• Websites

• Connected devices

• Manufacturing equipment

• Databases

• Analytics systems

Cloud data infrastructure can include data warehouses, data lakes, cloud databases, data pipelines, backup systems, and analytics platforms.

Cloud Data Management

Organizations commonly manage cloud information through:

• Data classification

• Access controls

• Encryption

• Data-quality processes

• Backup procedures

• Data retention policies

• Database monitoring

• Governance controls

Effective management helps organizations understand where information is stored, who can access it, and how it is protected.

Cloud Security

Cloud security focuses on protecting infrastructure, applications, identities, networks, and information.

Common controls include:

• Multi-factor authentication

• Identity and access management

• Encryption

• Network segmentation

• Security monitoring

• Vulnerability management

• Backup systems

• Audit logging

The FTC emphasizes that organizations remain responsible for appropriately securing information placed in cloud environments and should carefully manage access, configurations, inventories, and security practices.

Cloud Computing Assessment

Recent Updates

During 2025 and 2026, cloud computing continued evolving through artificial intelligence infrastructure, hybrid cloud architectures, cloud-native applications, automation, cybersecurity, and edge computing.

AI and Cloud Infrastructure

The growth of artificial intelligence has increased demand for cloud infrastructure capable of supporting:

• Machine learning

• Generative AI

• AI inference

• Large-scale data processing

• Model development

• Analytics

• Automated decision-support systems

Cloud environments can provide computing and storage resources for AI workloads while allowing organizations to integrate AI with existing applications.

Hybrid and Multi-Cloud

Organizations increasingly operate workloads across multiple environments.

Hybrid and multi-cloud architectures can combine:

• Public cloud

• Private cloud

• On-premises systems

• Edge infrastructure

• Specialized computing environments

Important considerations include application compatibility, data location, security, integration, monitoring, and governance.

Cloud Automation

Automation can manage:

• Infrastructure deployment

• Application configuration

• Resource monitoring

• Backup processes

• Security controls

• Scaling

• Software updates

Infrastructure-as-code approaches can also help organizations define cloud environments through repeatable configurations.

Edge Computing

Edge computing places processing capabilities closer to devices, users, or industrial equipment.

It can support applications requiring:

• Low latency

• Local processing

• Connected-device management

• Industrial monitoring

• Real-time analytics

Cloud and edge computing can therefore operate together within distributed technology architectures.

Cloud-Native Development

Cloud-native applications increasingly use:

• Containers

• Microservices

• APIs

• Orchestration

• Automated deployment

• Distributed databases

These approaches can support scalable application architectures, although they also introduce additional management and security considerations.

Current NIST Developments

NIST's cloud-computing definition was updated on May 7, 2026, reflecting the continued maintenance of its foundational cloud-computing guidance.

NIST also released new Cybersecurity Framework 2.0 quick-start guidance on March 23, 2026, addressing enterprise risk management, cybersecurity risk, and workforce considerations.

Laws or Policies

Cloud computing in the United States can be affected by federal laws, state privacy requirements, industry regulations, cybersecurity frameworks, contractual requirements, and organizational policies.

The applicable rules depend on the organization, information involved, industry, and jurisdiction.

Data Privacy

Organizations processing personal information may need to consider requirements concerning:

• Data collection

• Consumer rights

• Data access

• Data sharing

• Data retention

• Security safeguards

State privacy requirements vary, so organizations should determine which rules apply to their particular activities.

Healthcare Information

Organizations handling protected health information may be subject to HIPAA requirements concerning privacy and security.

Cloud environments containing healthcare information should therefore incorporate appropriate:

• Access controls

• Authentication

• Audit logging

• Encryption

• Data-management procedures

Financial Information

Financial organizations may face additional requirements concerning information security, records, risk management, and protection of customer information.

The FTC's Safeguards Rule establishes information-security requirements for covered financial institutions, with breach-reporting provisions taking effect in May 2024.

Cybersecurity Frameworks

NIST's Cybersecurity Framework 2.0 provides organizations with a flexible approach for managing cybersecurity risk and can be applied across different sectors and technology environments.

Organizations can use relevant frameworks alongside their legal, regulatory, contractual, and internal requirements.

Tools and Resources

Cloud teams use a broad range of technologies to manage infrastructure, applications, data, and security.

Useful resources include:

• Cloud architecture documentation

• Cloud management platforms

• Infrastructure-as-code tools

• Cloud monitoring dashboards

• Data warehouses

• Data lakes

• Database management systems

• Identity-management platforms

• Security monitoring tools

• Backup and recovery systems

• Migration assessment tools

• API management platforms

• Data-governance frameworks

Cloud Planning Checklist

Organizations evaluating cloud infrastructure can review:

• Application dependencies

• Data requirements

• Security controls

• User permissions

• Network architecture

• Integration requirements

• Compliance obligations

• Backup procedures

• Disaster recovery

• Performance requirements

• Monitoring

• Migration sequencing

Enterprise Cloud Architecture

A layered architecture helps organizations understand how infrastructure, data, applications, security, and governance interact.

Frequently Asked Questions

What is cloud computing?

Cloud computing is a model that provides convenient network access to shared computing resources such as servers, storage, applications, and networks.

What is enterprise cloud computing?

Enterprise cloud computing refers to the use of cloud infrastructure, platforms, applications, and data technologies to support organizational operations and business workloads.

What is hybrid cloud?

Hybrid cloud combines private or on-premises infrastructure with public cloud environments, allowing workloads and information to operate across connected environments.

What is cloud data infrastructure?

Cloud data infrastructure consists of cloud-based technologies used to store, process, integrate, protect, and analyze organizational information.

Is cloud computing secure?

Cloud security depends on architecture, configuration, access controls, encryption, monitoring, software maintenance, and organizational practices. Moving information to the cloud does not eliminate the organization's responsibility for appropriate security controls.

Conclusion

Cloud computing provides a foundation for modern enterprise platforms, data infrastructure, business applications, analytics, automation, and digital operations.

During 2025 and 2026, cloud environments have continued developing through AI infrastructure, hybrid and multi-cloud architectures, cloud-native applications, automation, edge computing, and strengthened cybersecurity practices.

Understanding cloud computing, enterprise cloud platforms, cloud infrastructure, cloud data management, hybrid cloud, SaaS, PaaS, IaaS, cloud security, cloud migration, and business applications provides a useful foundation for organizations evaluating modern technology environments.

Because cloud requirements vary according to industry, application architecture, data sensitivity, and jurisdiction, organizations should evaluate security, privacy, governance, integration, resilience, and applicable regulatory requirements before implementing or modifying a cloud environment.