Cloud Computing Challenges in Financial Sector

August 15, 2013 Gurdeep Kaur

Director, Information Security, AIG Global Finance President, (ISC)2 NJ Chapter

Introduction NIST Cloud Computing Definition

Introduction NIST Cloud Computing Reference Architecture

Introduction Security Challenges with Cloud:

Perceptions /Reality / Disconnect Data Security Contractual Obligations Switching Provider Right to Audit

Introduction

CLOUD

SMOG

Summed up very nicely by one of my co workers !

Introduction Story Time

Theme: A Large scale Financial Firm plans to utilize a SaaS provider for an Accounting Solution Hero: CXO Supporting Cast: Service Provider, Solutions Architect, Legal.. Villain (not really..): Security Background: Business sees an opportunity for money raining down.. Anti-Climax: Security walks in..

Introduction Story Time (contd)

After endless meetings, conference calls, word edits, escalations.. Business understands the risk, CXO accepts the risk, and contract is signed.

Happy Ending?!?! Lets continue with the sequel..

Introduction References
Documents: NIST Reference Architecture Guides: http://www.nist.gov CSAs CCSK Preparation Guide: https://cloudsecurityalliance.org/education/ccsk/

Images:
Cloud Computing Reference architecture - http://www.nist.gov/customcf/get_pdf.cfm?pub_id=913661 Cloud Computing Definition - http://www.coalfire.com/Resources/Spotlight-Compliance Cloud - http://www.businessweek.com/articles/2012-08-07/cloud-computing-gains-wary-converts Smog - http://www.straitstimes.com/breaking-news/asia/story/chinas-thick-smog-arrives-japan-20130204 The End - http://www.adwomen.org/2011/10/yamaha-marine-creativity-made-by-stefania-siani-and-valentina-amenta/

Questions/Feedback