Security Think Tank: Before cloud, engage with asset owners
Grazed from ComputerWeekly. Author: Michael Gillespie.
Hybrid cloud or private cloud within a public cloud is an attractive proposition for any business looking to harness the benefits of cloud computing, while acknowledging the need for adequate security layering on differing types of information. Different information and sub-sets of information has differing security needs. This will vary by organisation and should be subject to a comprehensive information triage process.
The challenges arise when factoring in the security, for many reasons. As we know, there are some very cheap solutions on offer from brokers, so if the priority is cheap then we may as well stop talking about security and move on to the businesses that want to use cloud, have properly identified their organisational risk appetite and want to build a strategy to do it securely…

