Cloud Computing Security is getting hot this summer ! Without a doubt, the Cloud security issues has emerged as a top concern and gained got a lot of interests in the RSA conference ’09 (held last week). To the surprise, the newly formed “Cloud Computing Security Alliance” presented a report covering the critical areas of focus and provided a comprehensive set of security guidelines for cloud computing infrastructures (IaaS, PaaS and SaaS). I just glimpsed through the report, they highlighted the key security concerns identifying 15 critical domains of Cloud computing as follows:
- Cloud computing architectural framework
- Governance and Enterprise Risk Management
- Legal
- Electronic discovery
- Compliance and audit
- Information lifecycle management
- Portability and interoperability
- Traditional security, business continuity and disaster recovery
- Data center operations
- Incident response, notification and remediation
- Application security
- Encryption and key management
- Identity and Access Management
- Storage
- Virtualization
If you are curious to know more on the details, the complete report is available to public…right here. If you are interested in joining the Cloud Security Alliance group, you may initiate a LinkedIn request..right here.
I am very interested to learn more about this especially since it seems the occurences of cyber attacks on the U.S. are increasing and due to the government’s propensity to lower the “carbon footprint”. Please provide me with further information and requirements for membership. Thanks you for your cooperation.