Moving to the cloud raises unique contingency planning challenges. Cloud providers typically have multiple partners and/or customers with competing demands. In the event of a business interruption or disaster, where do you rank among your cloud provider’s priorities and what can you expect from it? Do your internal resources understand the cloud environment and their tenant obligations, particularly in the event of a contingency?If you’ve already written or are about to write a cloud contingency plan, here are a few “lessons learned” to keep in mind. More...

Identity access management (IAM) is a critical requirement for effective cloud computing, regardless of the type of cloud model involved (e.g., SaaS, IaaS or PaaS). As more and more IT services are moved to the cloud, determining who has access to which cloud service is vital to ensuring privacy and security, as well as the overall performance of the cloud model. It also can be complex, especially when multiple cloud models delivering multiple cloud services are involved. More...

In its Guidelines on Security and Privacy in Public Cloud Computing, Special Publication 800-144, the National Institute of Standards and Technology (NIST) notes that organizations have a responsibility to “operate in agreement with established laws, regulations, standards, and specifications.” More...

Pages