Security Think Tank: Before cloud, engage with asset owners

Grazed from ComputerWeekly. Author: Michael Gillespie.

Hybrid cloud or private cloud within a public cloud is an attractive proposition for any business looking to harness the benefits of cloud computing, while acknowledging the need for adequate security layering on differing types of information. Different information and sub-sets of information has differing security needs. This will vary by organisation and should be subject to a comprehensive information triage process.

The challenges arise when factoring in the security, for many reasons. As we know, there are some very cheap solutions on offer from brokers, so if the priority is cheap then we may as well stop talking about security and move on to the businesses that want to use cloud, have properly identified their organisational risk appetite and want to build a strategy to do it securely…

Coming back to that triage for information, when it comes to information management, confidentiality, integrity and availability all need to be factored in when going through this process…

Read more from the source @ http://www.computerweekly.com/opinion/Security-Think-Tank-Before-cloud-engage-with-asset-owners

Subscribe to the CloudCow bi-monthly newsletter @ http://eepurl.com/smZeb