Cloud Security

Major Issues ●
●
Auditing
Data Integrity
with Cloud ● e-Discovery of legal compliance
Security(Major ● Privacy
● Recovery
work of ● Regulatory Compliance
consideration)
Moving to ● Determine which resource(data, service or
applications) you are planning to move to cloud
cloud: Evaluate ● Determine the sensitivity of the resource to risk, liek
Risk loss of privacy, unauthorized access etc.
● Determine the risk associated with the particular
cloud type for a resource.
● Take into account the particular cloud service model
that you will be using.
● On choosing a particular cloud provider, evaluate its
system to understand:
○ How data is transferred
○ Where data is stored
○ How to move data in and out of the cloud etc.
Service Security
Boundaries.
Security responsibilities by service/ models
CSA partition ●
●
Governance and enterprise risk management.
Legal and electronic discovery.
guidelines ● Compliance and audit
● Information lifecycle management.
● Portability and interoperability.
● Traditional security, business continuity and
disaster recovery.
● Datacenter Operations
● Incidence response, notification and remediation.
● Application security.
● Encryption and key management.
● Identity and access management
● Virtualization
Securing Data: ●
●
Access Control.
Auditing.
Key ● Authentication.
mechanisms for ● Authorization.

data protection
Securing Data:
Simple
Brokered cloud
storage access
Securing Data:
Encrypted
Brokered cloud
storage access