While the cloud topic has moved to the mainstream, there is still much variation with how vendors, analysts and other experts define various cloud offerings. This is particularly the case when it comes to PaaS (platform as a service).I like to refer to the U.S. National Institute of Standards and Technology’s (NIST) definition. In a paper published this past September, “The NIST Definition of Cloud Computing,” the authors cite this for PaaS: More...

Building security into the System Development Life Cycle (SDLC) is a basic security principle, but one not always well followed. When it is, the result speaks for itself: a more secure system. For CGI, following this “security first” principle enabled us to become the first certified Cloud Service Provider (CSP) to deliver secure cloud services under GSA’s Blanket Purchase Agreement (BPA) for Infrastructure as a Service (IaaS). Our approach also makes it easier to comply with new forthcoming FedRAMP requirements. More...

In early December, I was invited to speak at the second annual UP 2011 Cloud Computing Conference. As more organizations turn to cloud computing, one of the pressing needs that must be addressed is the development of identity access management standards. In my presentation, I discussed the work that’s underway to develop standards and some of the issues each standards organization must resolve. More...

Pages