| Mobile phone security dos and don'ts | Microsoft patches IE8's Pwn2Own bug in massive update | ||||||||||
| Network World Security: Identity Management | ||||||||||
 | Cloud computing is shifting the way we view IdM RESOURCE COMPLIMENTS OF: SailPoint Live Webinar featuring Burton Group: Rethinking Provisioning IS YOUR PROVISIONING SOLUTION STRETCHED TO THE LIMIT? Join SailPoint and Burton Group on June 10 to discuss the new compliance and business demands affecting the identity management landscape. You'll get a roadmap that leads to provisioning success. And, you'll learn about new technology that gets you from here to there quickly. REGISTER NOW! In this Issue
WHITE PAPER: IBM IBM Analytics Solutions Business leaders today are making decisions with major blind spots. But with advanced analytics, you can become a smarter, more fact-based enterprise. Read this white paper to see how IBM Analytics Solutions can help you gain a competitive advantage by enabling real-time or near-real-time decisions. Read More Mobile phone security dos and don'ts Microsoft patches IE8's Pwn2Own bug in massive update E-GUIDE: Compuware Perfecting Application Performance The enterprise application scene has become increasingly complicated over the years. Things have changed with the rise of Web services, SOA, Virtualization and cloud computing. In this Executive Guide explore how to get the best performance out of today's application environments. Read Now. What kind of software costs $920 million? Here's a better idea for securing the nation's electric grid WHITE PAPER: Riverbed Strategies for Unleashing Cloud Performance Whether a business builds out its own cloud or buys cloud services from someone else, they need to be sure the end results are optimized for the speed users require. This paper identifies where the limitations of cloud computing exist and provides actionable strategies to unleash cloud performance. Click here! New security/management software targets enterprise smartphones Hacker justifies turning in Wikileaks informer Group lists top five social media risks for businesses Zombie PCs to be quarantined under new ISP code | | ||||||||
| ||||||||||
Join us on LinkedIn Discuss the networking issues of the day with your colleagues, via Network World's LinkedIn group. Join today! Computerworld and Network World: Best of Green IT Computerworld and Network World: Best of Green IT Computerworld and Network World are teaming up to identify the top organizations leading the way with green-IT efforts and the coolest green-IT products. Computerworld will feature two ranked lists in its Oct. 25 issue: Top green-IT end-user organizations and a Top green-IT data center suppliers/vendors. Network World will feature the most effective green-IT products, as cited by survey respondents, in its Oct. 25 issue and online. Please fill out our short survey or forward this link to the person in your company best able to answer questions about IT energy issues. Surveys should be submitted by Thursday, July 1 at 12 noon EST. SLIDESHOWS 10 useful Firefox-based apps 5 things we love/hate about cloud automation tools MOST-READ STORIES
| ||||||||||
| Do You Tweet? You are currently subscribed to networkworld_security_identity_management_alert as security.world@gmail.com. Unsubscribe from this newsletter | Manage your subscriptions | Privacy Policy To contact Network World, please send an e-mail to customer_service@nww.com. Copyright (C) 2010 Network World, 492 Old Connecticut Path, Framingham MA 01701 ** Please do not reply to this message. If you want to contact someone directly, send an e-mail to customer_service@nww.com. ** | ||||||||||
As John Mullinax said:
ReplyDelete"Companies trust their data to external environments all the time. They generally do not trust ALL their data to these environments, for good reasons. But they generally do trust SOME of their data. It's a good dialogue to have - what data is ok in the cloud? -- but as cloud computing is maturing, we also need to have a more nuanced conversation about trust and the cloud. The question of when will everything move to the cloud has largely been answered... it's not likely going to happen.
The Cloud represents a new generation of computing paradigm, but like the platform paradigms that have come before (mainframe, mini computer, PC, client-server, web - all of which are still around) we should not expect the cloud to replace everything that came before it.
The question to ask is what data *would* make sense in the cloud? Or even better, what parts of my technology and data portfolio should live in the cloud?
It's a good discussion topic, and there's no one right answer for everyone. Since Windows Azure has been purposefully designed interoperate/span across on-premise boundaries, there are many options on the continuum between cloud and on-premise.
BTW, with highly automated service provisioning and data center operations, ISO 27001 certification, SAS70 certification, etc... the Microsoft data centers that run Windows Azure are probably "safer" and more reliable than many other environments. More than safety and reliability, what you give up to some degree is loss of direct control. "
IMHO, when considering security, 2 items need to be addressed:
1) Physical security of the hardware 2) Security of the Data - here are some resources I've found that discuss this and act as guidelines when considering security and the cloud:
Physical security:
http://www.globalfoundationservices.com/security/index.html
http://www.globalfoundationservices.com/security/documents/SecuringtheMSCloudMay09.pdf
Data Security:
http://www.research.microsoft.com/en-us/projects/cryptocloud/
http://www.research.microsoft.com/en-us/projects/secpal/
thoughts?
hope that helps
-cn