Cloud computing will result in an improvement in security defences
Richard Hall, CEO of CloudOrigin, claims that the current trend of businesses migrating their IT systems into the cloud does not mean a reduction in security defences.
Far from it, says Hall, who, after more than 20 years in the IT business, has concluded that cloud technology actually raises the industry's game on the security front. "After decades performing forensic and preventative IT security reviews within banking and government, it was already clear to me that the bulk of security breaches and data losses occur because of a weakness of internal controls," he said in his 360°IT blog post.
According to Hall, the complete automation by public cloud providers means the dynamic provision, use and re-purposing of a virtual server occurs continuously within encrypted sub-nets. The process, he says, occurs out of sight of operations staff and without any of the manual interventions that might introduce unintended weaknesses.
"That's why solutions built on commodity infrastructure provided by the likes of Amazon Web Services have already achieved the highest standards of operational compliance and audit possible - for example in healthcare (HIPAA), credit cards (PCI DSS) and audit (Sarbanes Oxley, SAS70)," he explained.
Citing the example of Easyjet and how the successful airline has harnessed the application integration security benefits of Windows Azure at the platform as a service (PaaS) level, allowing the company to move its airline management systems into the cloud, the CloudOrigin CEO said the airline has effectively reduced its security exposure and increased its resilience as a result.
Other organisations that are drawing on the security benefits of the cloud include the RNLI, whilst the Cloud Security Alliance is bringing together users, vendors and consultants to formulate and share best practice.
Hall says that, as the CSA's executive director Jim Reavis announced to a packed room of IT security experts in London, work is now under way on cloud security controls, governance issues and many other issues. Also in the pipeline, he added, are a series of interoperability standards and audit guidance, as well as individual accreditation for practitioners. You can therefore, he says, expect to see more high-profile cloud solutions as a result.
Print version | 
Email to a friend | 
View other articles
Latest IT, computer and network security articles
Cloud-based Infrastructure as a Service save up to 55 percent of IT operations spend
IronKey helps Orbotech ensure all high value company and customer data is secure
Passwords are past their sell-by-date
RandomStorm appointment signals European and worldwide expansion
India and Russia are the biggest producers of viruses
Misconfigured networks are the easiest IT resource hackers exploit
The Return of Ransomware and Do-it-Yourself Botnets
Atos Origin secures and manages the IT systems for Singapore 2010 Youth Olympic Games
Djigzo partners with Comodo to provide email encryption and authentication solution
...[view more IT, computer and network security articles]...
Other IT, computer and network security Resources
Security websites for specific products:
Access control and RFID systems - Burglar alarm, intruder alarm and fire alarm systems - Biometric recognition and identification systems - CCTV cameras and systems - IT, computer and network security systems - Health and safety - Security guard services - Surveillance and remote monitoring systems
Security websites for specific markets:
Bank and financial security - Corporate security - School and education security - Sport event and live venue security - Healthcare and hospital security - Hotel restaurant and casino security - Industrial and manufacturing security - Infrastructure and Utilities security - Home and personal security - Public sector security - Retail security - Small Business security - Transport security
