Archie Reed’s Secure Observations Blog
A look at security - in the cloud, in the enterprise, in ... trouble?

Cloud Security Alliance Releases Guidance Version 3

As one of the 3 co-editors of the guidance I am pleased to have supported the effort to release the Cloud Security Alliance Guidance Version 3, as announced on Nov 16, 2011 at the CSA Congress held in Orlando, FL.

 

Chris Rezek of McKinsey, and Paul Simmonds, board member and founder of the Jericho Forum, were my co-editors, but the effort involved nearly 50 individuals  from across the globe, including of course Jim Reavis, the executive director of the CSA, the development team including Luciano Santos, Amy Van Antwerp, all the authors of the sections, and many, many more.

 

As noted in the press release, Version 3 of the CSA "Security Guidance for Critical Areas of Focus in Cloud Computing" seeks to establish a stable, secure baseline for cloud operations

 

The V3 effort provides a practical, actionable road map to managers wanting to adopt the cloud paradigm safely and securely. Key updates in Version 3 include...

More cloudy predictions for 2011…

 

As with many who have postulated, provoked, proselytized and/or put down cloud services, I offer a few thoughts on the evolution that will come through in 2011.

 

  • Security remains the top inhibitor – but increasingly...
  • Security risks become clearer while breaches escalate - This is the “shooting fish in a barrel” prediction. While a significant amount of security concerns around cloud computing are “gut reactions”...
  • Hybrid Clouds becomes the expected norm – but the reality is that...
  • Data privacy breaches and concerns increase worldwide driving legislative changes – The concern over privacy has been a more than a whisper for years, but...
  • Patently Obstructive Practices - More patent related suits will be filed impacting...
  • Community clouds multiply – Many early cloud service providers focus on generic compute and storage...

 

 

Read more....

Instant On: Security and Innovation Can Coexist

There is a new approach that HP is promoting to business services: The Instant-On Enterprise. The key pillars to this are:

Application Transformation

Converged Infrastructure

Enterprise Security

Information Optimization

and yes, even... Cloud

 

My focus is cloud security, and I wanted to touch on a common fear that providing adequate security means locking down and environment tightly, to the detriment of innovation.

 

Not so...

 

Search
Follow Us
HP Discover 2013

About the Author