Security is still going to be in the hands of the software vendor of any cloud app. -- Sent from my Motorola Xoom with K-9 Mail.
"Ziots, Edward" <[email protected]> wrote: Security=Expense to most companies, Cloud vendors are not in the business of security per-se, they are in the availability and cost-savings space. Security is a bolt on at best, and most Cloud Providers contracts are one-sided and heavy handed giving the customer little room to negotiate. ( which is a bigger part of the problem, unacceptable risk transfer to the customer and giving up control on systems, just to save money? Humm sounds like a few companies that just got P0wned lately to the tune of 130M records lost, IP/Information Disclosure and what-not) Z Edward E. Ziots CISSP, Network +, Security + Security Engineer Lifespan Organization Email:[email protected] Cell:401-639-3505 From: Mathew Shember [mailto:[email protected]] Sent: Monday, June 27, 2011 4:19 PM To: NT System Admin Issues Subject: RE: Be Very Wary of "The Cloud"... How many companies view security as an expense rather than an asset? Are Cloud providers immune to that thinking? As to the source code comment; basic cost savings stuff. It costs too much to run a data center 24/7. An IT staff is costly. Disaster Recovery is costly. The Cloud can do all the for far less…… Thanks, Mathew From: Andrew S. Baker [mailto:[email protected]] Sent: Monday, June 27, 2011 12:48 PM To: NT System Admin Issues Subject: Re: Be Very Wary of "The Cloud"... And yet financial institutions are heavy users of both traditional outsourcing (both on- and off-shore) and of cloud computing. http://searchcloudcomputing.techtarget.com/news/1521554/Financial-institutions-test-cloud-computing-waters The cloud is not an all or nothing venture. There's plenty of computing that these types of organizations do that does not have PII associated with it. There are "cloud" options which also don't rely on public cloud, too. These risks inherent with all sorts of technologies. They merely have to be identified, assessed, and then mitigated or avoided as best fits the scenario at hand. As for any source-code-in-the-cloud statements, I cannot comment without having the context in which they were made... ASB (Professional Bio) Harnessing the Advantages of Technology for the SMB market... On Mon, Jun 27, 2011 at 3:08 PM, Mathew Shember <[email protected]> wrote: Financial institutions are heavily regulated and can’t treat security measures as an expense. I heard one Cloud person talking about who we don’t need data centers, you can put your source code on the cloud. Are people willing to trust the cloud with that? Thanks, Mathew From: Andrew S. Baker [mailto:[email protected]] Sent: Monday, June 27, 2011 11:57 AM To: NT System Admin Issues Subject: Re: Be Very Wary of "The Cloud"... >>I want to have total control over my programs and data and I won't in the >>Cloud! All my backups are done locally on hardware and by personnel located >>in MY location! In many cases, this is a good business decision. In some cases, however, doing so adds cost that is not commensurate with the value provided. Knowing when this is true, is smart business. This is why every organization does not process its own credit cards, or manage its own ecommerce, or attempt to staff its own local data centers 24x7... ASB (Professional Bio) Harnessing the Advantages of Technology for the SMB market... On Mon, Jun 27, 2011 at 1:42 PM, MMF <[email protected]> wrote: The Cloud will cause the loss of both onsite jobs and hardware. That's not what concerns me. It's the loss of control and security that concerns me. I want to have total control over my programs and data and I won't in the Cloud! All my backups are done locally on hardware and by personnel located in MY location! M. Free <The Cloud is just another name for outsoucing. <If the cloud takes hold, datacenters will quick enough move to China/India and the IT profession in the US will be dead. <A few cisco guys will be left over to keep the internet up, and that's about it. <Fight the cloud! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
