Towards Novel Certification Models in Cloud Infrastructures (the CUMULUS approach)

Size: px
Start display at page:

Download "Towards Novel Certification Models in Cloud Infrastructures (the CUMULUS approach)"

Transcription

1 Twards Nvel Certificatin Mdels in Clud Infrastructures (the CUMULUS apprach) Prfessr G. Spanudakis Schl f Infrmatics CSP Frum, April 2013, Brussels

2 Outline Clud Security Still a prblem? Prvider perspective & cunter arguments Evidence: incidents and perceptins Security audit & risk assessment CUMULUS Overall visin Hybrid, multi-layer and incremental certificatin New certificatin mdels Infrastructure Interperability and standards Cnclusins G. Spanudakis

3 Clud security Still a prblem? G. Spanudakis

4 Clud security the arguments Still a prblem? The prvider s argument: Increased security due t Cncentratin and availability f expertise Use f cutting edge security slutins Increased cntrls Regular audits G. Spanudakis

5 Clud security the arguments Still a prblem? The prvider s argument: Increased security due t Cncentratin and availability f expertise Use f cutting edge security slutins Increased cntrls Regular audits Cunter arguments: Breach f data integrity, cnfidentiality [1,2,3] and privacy [4] Spamming, crss-site scripting attacks [5] Denial-r-service (DS) attacks [6,7] Reduced applicatin and data availability [2] Authenticatin, authrizatin and accunting (AAA) vulnerabilities [2,1] VM vulnerabilities (e.g., heap verflw, abnrmal terminatin f VM prcesses) fllwing stress testing and inspectin [27] G. Spanudakis

6 Clud security the evidence Sme incidents Amazn 24/12/2012: utage f Elastic Lad Balancing Service (lad balancing f virtual servers) fr 10Hrs (affected Netflix) 04/2011: EC2 clud suffered multiday utages causing lss f availability and data (affected Reddit/36Hrs, Fursquares, Htsuite and Qura/48Hrs) Micrsft Azure 28/2/2012: unavailability (24Hrs) due t leap year affecting, plus up t 24 mre Hrs t restre (affected UK G-Clud CludStre) Megauplad 01/2012: clud strage service suspensin due t cpyright infringement (effect: 180m users / 25 petabyte); c-tenants permanent data lss & reputatin damage Other 06/2009: 0-day vulnerability in HyperVM (LxLabs) server virtualisatin; explited t delete100,000 websites using it fr hsting purpses G. Spanudakis

7 Clud security the evidence (cnt d) Industry Perceptins: security and privacy cncerns: blck uptake f clud cmputing cmpletely fr 10% f Eurpean enterprises, and limit it fr anther 30% f enterprises [25] G. Spanudakis

8 Security Audits & Risk Assessment Framewrks fr auditing cmpany IT cntrls: SSAE 16 [31] ISAE 3402 [32] COBIT [34] Framewrks fr assurance f security management practices: NIST Rev 4 [36] ISO 2700x : assessing the infrmatin security risk f IT systems (n-ging) extensin t t prvide clud specific cntrls Sme with an explicit fcus n clud, e.g.: ENISA s Clud Cmputing Infrmatin Assurance Framewrk [35] Security recmmendatins fr clud prviders by German Federal Office fr Infrmatin Security (BSI) COSO [33] G. Spanudakis

9 Security Audits & Risk Assessment Framewrks fr auditing cmpany IT cntrls: SSAE 16 [31] ISAE 3402 [32] COBIT [34] Framewrks fr assurance f security management practices: NIST Rev 4 [36] ISO 2700x : assessing the infrmatin security risk f IT systems (n-ging) extensin t t prvide clud specific cntrls Sme with an explicit fcus n clud, e.g.: ENISA s Clud Cmputing Infrmatin Assurance Framewrk [35] Security recmmendatins fr clud prviders by German Federal Office fr Infrmatin Security (BSI) COSO [33] BUT Lw degree f autmatin Mnitring is nt cntinuus G. Spanudakis

10 Clud Certificatin An answer t the prblem? Sftware certificatin is nt new (e.g., Cmmn Criteria mdel) BUT i. Cvers mnlithic systems ii. Targets humans à certificates iii. a. nt amenable t autmated prcessing b. cannt be used fr autmated (and pssibly n-fly) system cmpnent selectin/replacement, verificatin etc.) Cannt cpe with changes t system structures and the peratinal envirnment Recent wrk n SOA certificatin (Assert4SOA prject [22] ) cvers (i)-(iii) in sme circumstances but nt in all and nt fr clud services, e.g.: Schema fr specifying machine prcessable service certificates Ontlgies fr anntating certificates Certificates aware sftware service discvery and SaaS level cmpsitin [23] G. Spanudakis

11 The CUMULUS apprach G. Spanudakis

12 CUMULUS - verview EU funded STREP (medium size targeted) research prject (Prj. n ) Ttal budget: 4.3m EU cntributin: ~ 3m funding CONSORTIUM Clud Security Alliance (UK) Infinen Technlgies AG (D) City University Lndn (UK) ATOS SPAIN SA (S) Wellness Telecm SL (S) University f Malaga (S) University f Milan (I) Fdazine Ug Brdni (I) G. Spanudakis

13 CUMULUS Overall visin Develpment f an integrated framewrk f mdels, prcesses, and tls supprting the certificatin f security prperties f infrastructure (IaaS), platfrm (PaaS) and sftware applicatin layer services (SaaS) in cluds. Use f multiple types f evidence fr security assessment including testing data mnitring data trusted cmputing prfs Use f different mdels fr security assessment: hybrid, Incremental, and multi-layer security certificatin. G. Spanudakis

14 Hybrid certificatin What? Certificatin based n cmbinatin f different types f evidence: testing data mnitring data trusted cmputing prfs fr the hardware elements f clud infrastructures Why? Sme prperties might be certifiable using a cmbinatin f evidence types G. Spanudakis

15 Hybrid certificatin examples The availability f a SaaS layer service S may be certified by a certificate based n: test data fr the service and a TC prf fr the cnfiguratin f the hsting clud infrastructure (t ensure that the infrastructure where the service is deplyed is the same as that fr which test data were btained) Cert Test Data TC Prf Hybrid certificate fr a SaaS service integrity based n test data and cntinuus mnitring in real perating cnditins Cert Test Data Mnitr Data G. Spanudakis

16 Multi-layer certificatin What? Certificatin based n a cmbinatin f certificates f interdependent services (as ppsed t simply evidence ) at different layers f the clud stack Nte: dependencies can be bttm-up, tp-dwn r side-level Why? Security prperties are affected by such dependencies Liability r reasning restrictins (e.g., inability t btain the direct evidence required fr prperty assessment) require making assessments based n certificates rather than direct evidence G. Spanudakis

17 Multi-layer certificatin examples The integrity f data-at-rest f a sftware service S 1 using a clud strage service S 2 culd be certified n the basis f a certificate regarding the crrect implementatin f a prff-strage prtcl by S 2 SaaS PaaS The availability f a messaging service in a clud federatin may be certified n the basis f certificates regarding DSresilience f the hsting nde(s) in the federatin PaaS IaaS A data-in-prcess integrity certificate f a SaaS layer service requires TCP based certificate fr hypervisr t ensure crrect mnitring f security cnditins f infrastructure services that are necessary fr data-inprcess integrity, and avidance f data leaks f relevant mnitring data SaaS IaaS G. Spanudakis

18 Incremental certificatin What? It is based n evidence acquired thrugh accumulatin f evidence regarding the satisfactin f security prperties based n cntinuus mnitring Shuld cver changes that may affect certified prperties f clud services withut having t re-certify prperties frm scratch Why? Operatinal cnditins within a clud infrastructure may change Clud services and data may migrate t different clud infrastructures within a clud federatin Cnstituent services f cmpsite services may be substituted (whether c-tenant r nt) G. Spanudakis

19 Incremental certificatin examples Re-validatin f certificate due t changing peratinal cnditins, e.g.: the certificate C fr data integrity f a sftware service requires a certificate C fr the data islatin scheme perated by the clud strage service; the sftware service migrates t a different nde in a clud federatin à C needs t be revalidated by cnsidering whether the new hsting clud has a certificate equivalent t (r apprpriate substitute fr) C Use cntinuus mnitring t create new certificates r strengthen existing certificates with increased peratinal evidence, e.g., The certificate f data-islatin fr sftware service in a given infrastructure requires islatin f c-tenant services in the infrastructure; the certificate is cntinually validated thrugh cntinuus mnitring f the infrastructure G. Spanudakis

20 New Certificatin mdels Need fr New certificatin mdels t determine the evidence (type and extent) that needs t be cnsidered t be able t certify a security prperty and hw it will be used t assess the prperty Cnsequences Certificatin authrities sign parametric certificates, which are based n apprved (signed) certificatin mdels, and may need t be validated (cnfirmed) dynamically à Changes in existing life cycle mdel f Issuing/Revcatin G. Spanudakis

21 New Certificatin mdels (cnt d) Certificatin mdels shuld address questins like: When tw distinct pieces f evidence can be cnsidered equivalent fr a given security prperty? If cnflicting evidence arises what happens t the certificate? Shuld a certificate be revalidated/revked when: The cmpsitin f a service changes The deplyment cnfiguratin f a service changes (e.g., cde r data migratin t anther nde in a federatin) The cnfiguratin f an infrastructure changes Hw certificate re-validatin shuld be carried ut? fr example: Culd equivalent security prperties be cnsidered sufficient? Culd alternative equivalent pieces f evidence be used? G. Spanudakis

22 CUMULUS Infrastructure CUMULUS Aware Service Engineering Tls Clud Service Prvider CUMULUS Certificatin Infrastructure Certificatin Mdels Multi-layer, hybrid & incremental Certificatin Security Mdels Test Based Certificatin Mnitring Based Certificatin Trusted Cmputing Based Certificatin Clud Service Custmer Certificatin Authrity Clud Trust Prtcl Clud 1 TestService TCP Clud 2 Clud Mnitr Clud Mnitr Mnitring Service Clud N TCP Mnitring Service Clud Mnitr Clud Mnitr External Certificate Registries (e.g., STAR) G. Spanudakis

23 Interperability & standards Interperability with emerging standards (e.g., GRC stack, STAR Registry) fr clud audit reference clud architectures (e.g., Nebula, CSA s reference architecture) Cntributin t standards, e.g.: OCF (CSA; nging) ISO (Clud cntrls; nging) ISO (Privacy in public cluds; nging) cntributes underpin underpin Key challenge/pprtunity Mst f these standards are under develpment (e.g., OCF, ISO27017) G. Spanudakis

24 Where are we? G. Spanudakis

25 Cnclusins Clud security still nt perfect Security assessment: frm audit t certificatin Fcus n new certificatin mdels Expliting multiple types f evidence Supprting increased autmatin, cntinuity and transparency Clse alignment with nging standardisatin effrts G. Spanudakis

Certification infrastructure for MUlti-Layer cloud Services

Certification infrastructure for MUlti-Layer cloud Services Certificatin infrastructure fr MUlti-Layer clud Services Bartlme Sapi CUMULUS Prject Crdinatr Fndazine Ug Brdni Rma (Italy) Trust and Security Clustering Open Cmmunicatins event Brussels, 7 February 2013

More information

Session 9 : Information Security and Risk

Session 9 : Information Security and Risk INFORMATION STRATEGY Sessin 9 : Infrmatin Security and Risk Tharaka Tennekn B.Sc (Hns) Cmputing, MBA (PIM - USJ) POST GRADUATE DIPLOMA IN BUSINESS AND FINANCE 2014 Infrmatin Management Framewrk 2 Infrmatin

More information

Service Management - Framework 2013

Service Management - Framework 2013 Service - Framewrk 2013 Getting Started Right with Service System Netwrk Firewall Sftware Service App With the right framewrk, enterprises f almst any size small t large can implement effective functinal

More information

Build the cloud OpenStack Installation & Configuration Integration with existing tools and processes Cloud Migration

Build the cloud OpenStack Installation & Configuration Integration with existing tools and processes Cloud Migration Slutin Brief OpenStack Services OVERVIEW OnX understands clud adptin challenges f glbal enterprise cmpanies and helps Enterprises adpt OpenStack slutins thrugh targeted services. We ffer vertical industry

More information

Support Services. v1.19 / 2015-07-02

Support Services. v1.19 / 2015-07-02 Supprt Services v1.19 / 2015-07-02 Intrductin - Table f Cntents 1 Intrductin... 3 2 Definitins... 4 3 Supprt Prgram Feature Overview... 5 4 SLA fr the Supprt Services... 6 4.1 Standard Supprt... 6 4.2

More information

Agenda. o Purpose of IT Assessment o Scope of IT Assessment o Deloitte Recommendations o IBM Discussions o Research Data Center o Open Season

Agenda. o Purpose of IT Assessment o Scope of IT Assessment o Deloitte Recommendations o IBM Discussions o Research Data Center o Open Season Agenda Purpse f IT Assessment Scpe f IT Assessment Delitte Recmmendatins IBM Discussins Research Data Center Open Seasn Purpse f IT Assessment Determine if IT resurces are being utilized efficiently and

More information

Licensing the Core Client Access License (CAL) Suite and Enterprise CAL Suite

Licensing the Core Client Access License (CAL) Suite and Enterprise CAL Suite Vlume Licensing brief Licensing the Cre Client Access License (CAL) Suite and Enterprise CAL Suite Table f Cntents This brief applies t all Micrsft Vlume Licensing prgrams. Summary... 1 What s New in This

More information

Cloud Services Frequently Asked Questions FAQ

Cloud Services Frequently Asked Questions FAQ Clud Services Frequently Asked Questins FAQ Revisin 1.0 6/05/2015 List f Questins Intrductin What is the Caradigm Intelligence Platfrm (CIP) clud? What experience des Caradigm have hsting prducts like

More information

SaaS Listing CA Cloud Service Management

SaaS Listing CA Cloud Service Management SaaS Listing CA Clud Service Management 1. Intrductin This dcument prvides standards and features that apply t the CA Clud Service Management (CSM) SaaS ffering prvided t the Custmer and defines the parameters

More information

Securely Managing Cryptographic Keys used within a Cloud Environment

Securely Managing Cryptographic Keys used within a Cloud Environment Securely Managing Cryptgraphic Keys used within a Clud Envirnment Dr. Sarbari Gupta sarbari@electrsft-inc.cm 703-437-9451 ext 12 2012 NIST Cryptgraphic Key Management Wrkshp September 10-11, 2012 Intrductin

More information

Copernicus & Big Data: A Perspective from the European EO Services Industry. Geoff Sawyer: EARSC Secretary General

Copernicus & Big Data: A Perspective from the European EO Services Industry. Geoff Sawyer: EARSC Secretary General Cpernicus & Big Data: A Perspective frm the Eurpean EO Services Industry. Geff Sawyer: EARSC Secretary General What is EARSC? EARSC is a trade assciatin (NPO), funded in 1989, which represents cmpanies:

More information

NC3A SOA Techwatch Day Call for Presentations

NC3A SOA Techwatch Day Call for Presentations NC3A SOA Techwatch Day Call fr Presentatins 1 February 2012 Hsted at NATO C3 Agency, The Hague, The Netherlands By NC3A Chief Technlgy Office (CTO) David Burtn Chief Technlgy fficer Versin 1, 1 December

More information

State of Wisconsin DET Dedicated Virtual Host Services Offering Definition

State of Wisconsin DET Dedicated Virtual Host Services Offering Definition State f Wiscnsin DET Dedicated Virtual Hst Services Offering Definitin Dcument Revisin Histry Date Versin Creatr Ntes 10/29/2010 1.0 Phil Staley Initial draft 11/3/2010 1.1 Phil Staley Ryan McKee Secnd

More information

Configuring, Monitoring and Deploying a Private Cloud with System Center 2012 Boot Camp

Configuring, Monitoring and Deploying a Private Cloud with System Center 2012 Boot Camp Cnfiguring, Mnitring and Deplying a Private Clud with System Center 2012 Bt Camp Length: 5 Days Technlgy: Micrsft System Center 2012 Delivery Methd: Instructr-led Hands-n Audience Prfile This curse is

More information

THOMSON REUTERS C-TRACK CASE MANAGEMENT SYSTEM SOFTWARE AS A SERVICE SERVICE DEFINITION FOR G-CLOUD 6

THOMSON REUTERS C-TRACK CASE MANAGEMENT SYSTEM SOFTWARE AS A SERVICE SERVICE DEFINITION FOR G-CLOUD 6 THOMSON REUTERS C-TRACK CASE MANAGEMENT SYSTEM SOFTWARE AS A SERVICE SERVICE DEFINITION FOR G-CLOUD 6 C-Track Case Management System (CMS) is a cnfigurable, brwser based case management system fr all levels

More information

CLOUD COMPUTING: SECURITY THREATS AND MECHANISM

CLOUD COMPUTING: SECURITY THREATS AND MECHANISM CLOUD COMPUTING: SECURITY THREATS AND MECHANISM Vaishali Jshi 1, Lakshmi 2, Vivek Gupta 3 1,2,3 Department f Cmputer Science Engineering, Acrplis Technical Campus, Indre ABSTRACT Clud cmputing is a mdel

More information

G-CLOUD FRAMEWORK SERVICE DEFINITION. Solution Architecture for Cloud Service. Copyright: 2014 6point6 Ltd

G-CLOUD FRAMEWORK SERVICE DEFINITION. Solution Architecture for Cloud Service. Copyright: 2014 6point6 Ltd G-CLOUD FRAMEWORK SERVICE DEFINITION Slutin Architecture fr Clud Service Cpyright: 2014 6pint6 Ltd G-Clud Service Definitin Slutin Architecture fr Clud Service 1. SERVICE OVERVIEW 6pint6 is an innvative

More information

Version: Modified By: Date: Approved By: Date: 1.0 Michael Hawkins October 29, 2013 Dan Bowden November 2013

Version: Modified By: Date: Approved By: Date: 1.0 Michael Hawkins October 29, 2013 Dan Bowden November 2013 Versin: Mdified By: Date: Apprved By: Date: 1.0 Michael Hawkins Octber 29, 2013 Dan Bwden Nvember 2013 Rule 4-004J Payment Card Industry (PCI) Patch Management (prpsed) 01.1 Purpse The purpse f the Patch

More information

UC4 AUTOMATED VIRTUALIZATION Intelligent Service Automation for Physical and Virtual Environments

UC4 AUTOMATED VIRTUALIZATION Intelligent Service Automation for Physical and Virtual Environments Fr mre infrmatin abut UC4 prducts please visit www.uc4.cm. UC4 AUTOMATED VIRTUALIZATION Intelligent Service Autmatin fr Physical and Virtual Envirnments Intrductin This whitepaper describes hw the UC4

More information

Course Outline (70-413)

Course Outline (70-413) Curse Outline (70-413) Mdule 1: Planning Server Upgrade and Migratin This mdule explains hw t plan a server upgrade and migratin strategy. Upgrade and Migratin Cnsideratins Creating a Server Upgrade and

More information

Information Services Hosting Arrangements

Information Services Hosting Arrangements Infrmatin Services Hsting Arrangements Purpse The purpse f this service is t prvide secure, supprted, and reasnably accessible cmputing envirnments fr departments at DePaul that are in need f server-based

More information

Systems Support - Extended

Systems Support - Extended 1 General Overview This is a Service Level Agreement ( SLA ) between and the Enterprise Windws Services t dcument: The technlgy services the Enterprise Windws Services prvides t the custmer. The targets

More information

Managing Access and Help Protect Corporate Email Data on Mobile Devices with Enterprise Mobile Suite

Managing Access and Help Protect Corporate Email Data on Mobile Devices with Enterprise Mobile Suite Managing Access and Help Prtect Crprate Email Data n Mbile Devices with Enterprise Mbile Suite Last updated: 7/15/15 Balancing prductivity and security Emplyees want t be able t use their wn devices t

More information

A96 CALA Policy on the use of Computers in Accredited Laboratories Revision 1.5 August 4, 2015

A96 CALA Policy on the use of Computers in Accredited Laboratories Revision 1.5 August 4, 2015 A96 CALA Plicy n the use f Cmputers in Accredited Labratries Revisin 1.5 August 4, 2015 A96 CALA Plicy n the use f Cmputers in Accredited Labratries TABLE OF CONTENTS TABLE OF CONTENTS... 1 CALA POLICY

More information

ITIL Release Control & Validation (RCV) Certification Program - 5 Days

ITIL Release Control & Validation (RCV) Certification Program - 5 Days ITIL Release Cntrl & Validatin (RCV) Certificatin Prgram - 5 Days Prgram Overview ITIL is a set f best practices guidance that has becme a wrldwide-adpted framewrk fr Infrmatin Technlgy Services Management

More information

Better Practice Guide Financial Considerations for Government use of Cloud Computing

Better Practice Guide Financial Considerations for Government use of Cloud Computing Better Practice Guide Financial Cnsideratins fr Gvernment use f Clud Cmputing Nvember 2011 Intrductin Many Australian Gvernment agencies are in the prcess f cnsidering the adptin f clud-based slutins.

More information

This report provides Members with an update on of the financial performance of the Corporation s managed IS service contract with Agilisys Ltd.

This report provides Members with an update on of the financial performance of the Corporation s managed IS service contract with Agilisys Ltd. Cmmittee: Date(s): Infrmatin Systems Sub Cmmittee 11 th March 2015 Subject: Agilisys Managed Service Financial Reprt Reprt f: Chamberlain Summary Public Fr Infrmatin This reprt prvides Members with an

More information

Request for Resume (RFR) CATS II Master Contract. All Master Contract Provisions Apply

Request for Resume (RFR) CATS II Master Contract. All Master Contract Provisions Apply Sectin 1 General Infrmatin RFR Number: (Reference BPO Number) Functinal Area (Enter One Only) F50B3400026 7 Infrmatin System Security Labr Categry A single supprt resurce may be engaged fr a perid nt t

More information

In-House Counsel Day Priorities for 2012. Cloud Computing the benefits, potential risks and security for the future

In-House Counsel Day Priorities for 2012. Cloud Computing the benefits, potential risks and security for the future In-Huse Cunsel Day Pririties fr 2012 Clud Cmputing the benefits, ptential risks and security fr the future Presented by David Richardsn Thursday 1 March 2012 WIN: What in-huse lawyers need Knwledge, supprt

More information

POLISH STANDARDS ON HEALTH AND SAFETY AS A TOOL FOR IMPLEMENTING REQUIREMENTS OF THE EUROPEAN DIRECTIVES INTO THE PRACTICE OF ENTERPRISES

POLISH STANDARDS ON HEALTH AND SAFETY AS A TOOL FOR IMPLEMENTING REQUIREMENTS OF THE EUROPEAN DIRECTIVES INTO THE PRACTICE OF ENTERPRISES POLISH STANDARDS ON HEALTH AND SAFETY AS A TOOL FOR IMPLEMENTING REQUIREMENTS OF THE EUROPEAN DIRECTIVES INTO THE PRACTICE OF ENTERPRISES M. PĘCIŁŁO Central Institute fr Labur Prtectin ul. Czerniakwska

More information

Research Report. Abstract: Security Management and Operations: Changes on the Horizon. July 2012

Research Report. Abstract: Security Management and Operations: Changes on the Horizon. July 2012 Research Reprt Abstract: Security Management and Operatins: Changes n the Hrizn By Jn Oltsik, Senir Principal Analyst With Kristine Ka and Jennifer Gahm July 2012 2012, The Enterprise Strategy Grup, Inc.

More information

ALM in the Cloud an Overview of Oracle Developer Cloud Service. Introduction. By Dana Singleterry

ALM in the Cloud an Overview of Oracle Developer Cloud Service. Introduction. By Dana Singleterry ALM in the Clud an Overview f Oracle Develper Clud Service Intrductin By Dana Singleterry In recent years the wrld f applicatin develpment has adpted new methdlgies that aim t imprve the quality and speed

More information

System Business Continuity Classification

System Business Continuity Classification Business Cntinuity Prcedures Business Impact Analysis (BIA) System Recvery Prcedures (SRP) System Business Cntinuity Classificatin Cre Infrastructure Criticality Levels Critical High Medium Lw Required

More information

CLOUD ENABLED CLOUD ENABLED

CLOUD ENABLED CLOUD ENABLED Asia s st 1 and Only Cmpany t Offer Bradest Prtfli f Clud trainings. Clud Architect: Duratin 5 Days Abut Us: Clud Enabled is Asia's First and nly Cmpany t ffer the Bradest prtfli f clud trainings. Clud

More information

Growing Your Cloud Infrastructure: Planning, Design and Operation

Growing Your Cloud Infrastructure: Planning, Design and Operation w h i t e p a p e r p a g e 1 f 12 Grwing Yur Clud Infrastructure: Planning, Design and Operatin Abstract Clud cmputing services are expanding and evlving rapidly. But with this fast, largescale grwth

More information

The Importance Advanced Data Collection System Maintenance. Berry Drijsen Global Service Business Manager. knowledge to shape your future

The Importance Advanced Data Collection System Maintenance. Berry Drijsen Global Service Business Manager. knowledge to shape your future The Imprtance Advanced Data Cllectin System Maintenance Berry Drijsen Glbal Service Business Manager WHITE PAPER knwledge t shape yur future The Imprtance Advanced Data Cllectin System Maintenance Cntents

More information

HP ExpertOne. HP2-T21: Administering HP Server Solutions. Table of Contents

HP ExpertOne. HP2-T21: Administering HP Server Solutions. Table of Contents HP ExpertOne HP2-T21: Administering HP Server Slutins Industry Standard Servers Exam preparatin guide Table f Cntents Overview 2 Why take the exam? 2 HP ATP Server Administratr V8 certificatin 2 Wh shuld

More information

Internal Audit Charter and operating standards

Internal Audit Charter and operating standards Internal Audit Charter and perating standards 2 1 verview This dcument sets ut the basis fr internal audit: (i) the Internal Audit charter, which establishes the framewrk fr Internal Audit; and (ii) hw

More information

Professional Leaders/Specialists

Professional Leaders/Specialists Psitin Prfile Psitin Lcatin Reprting t Jb family Band BI/Infrmatin Manager Wellingtn Prfessinal Leaders/Specialists Band I Date February 2013 1. POSITION PURPOSE The purpse f this psitin is t: Lead and

More information

Gateway Agent - First Amendment to the High Level Design Document

Gateway Agent - First Amendment to the High Level Design Document Gateway Agent - First Amendment t the High Level Design Dcument Scpe The Gateway Agent HLD thrugh update 1 assumes that nly the Cntrl App, while cnnected t the prximal netwrk, can initiate new clud services.

More information

Step Ahead CAPS Support Model

Step Ahead CAPS Support Model Step Ahead CAPS Supprt Mdel Step Ahead Slutins, Inc. 19925 Stevens Creek Blvd. Suite 100 Cupertin, CA 95014 T 408.725.7560 F 408.973.7259 sales@stepaheadslutin.cm www.stepaheadslutin.cm 1 TABLE OF CONTENTS

More information

Licensing Windows Server 2012 R2 for use with virtualization technologies

Licensing Windows Server 2012 R2 for use with virtualization technologies Vlume Licensing brief Licensing Windws Server 2012 R2 fr use with virtualizatin technlgies (VMware ESX/ESXi, Micrsft System Center 2012 R2 Virtual Machine Manager, and Parallels Virtuzz) Table f Cntents

More information

Interworks Cloud Platform Citrix CPSM Integration Specification

Interworks Cloud Platform Citrix CPSM Integration Specification Citrix CPSM Integratin Specificatin Cntents 1. Intrductin... 2 2. Activatin f the Integratin Layer... 3 3. Getting the Services Definitin... 4 3.1 Creating a Prduct Type per Lcatin... 5 3.2 Create Instance

More information

International Services Catalog Navigating the Security Landscape from Takeoff to Landing

International Services Catalog Navigating the Security Landscape from Takeoff to Landing Internatinal Services Catalg Navigating the Security Landscape frm Takeff t Landing Cpyright 2013 infrmatin security cnsulting All rights reserved Intrductin Infrmatin security cnsulting (i.s.c.) funded

More information

Licensing Windows Server 2012 for use with virtualization technologies

Licensing Windows Server 2012 for use with virtualization technologies Vlume Licensing brief Licensing Windws Server 2012 fr use with virtualizatin technlgies (VMware ESX/ESXi, Micrsft System Center 2012 Virtual Machine Manager, and Parallels Virtuzz) Table f Cntents This

More information

WHITEPAPER Reference Architectures for Portal-based Rich Internet Applications

WHITEPAPER Reference Architectures for Portal-based Rich Internet Applications Authr: Sven Rieger Created n: 2015-04-10 Versin: 1.0 Rich Internet (RIAs) are HTML5-based applicatins with a desktp-like lk&feel which run inside a web brwser. The Micrsft Office applicatins Wrd, Excel,

More information

Have some knowledge of how queries execute. Must be able to read a query execution plan and understand what is happening.

Have some knowledge of how queries execute. Must be able to read a query execution plan and understand what is happening. Curse 2786B: Designing a Micrsft SQL Server 2005 Infrastructure Abut this Curse This tw-day instructr-led curse prvides database administratrs wrking in enterprise envirnments with the knwledge and skills

More information

Data Protection Policy & Procedure

Data Protection Policy & Procedure Data Prtectin Plicy & Prcedure Page 1 Prcnnect Marketing Data Prtectin Plicy V1.2 Data prtectin plicy Cntext and verview Key details Plicy prepared by: Adam Haycck Apprved by bard / management n: 01/01/2015

More information

PCI DSS Cloud Computing Guidelines

PCI DSS Cloud Computing Guidelines Standard: PCI Data Security Standard (PCI DSS) Versin: 2.0 Date: February 2013 Authr: Clud Special Interest Grup PCI Security Standards Cuncil Infrmatin Supplement: PCI DSS Clud Cmputing Guidelines Table

More information

The ADVANTAGE of Cloud Based Computing:

The ADVANTAGE of Cloud Based Computing: The ADVANTAGE f Clud Based Cmputing: A Web Based Slutin fr: Business wners and managers that perate equipment rental, sales and/r service based rganizatins. R M I Crpratin Business Reprt RMI Crpratin has

More information

Wholesale IaaS. How to beat AWS and make money while doing it. WHD.Australia 2013

Wholesale IaaS. How to beat AWS and make money while doing it. WHD.Australia 2013 Whlesale IaaS Hw t beat AWS and make mney while ding it WHD.Australia 203 AUGUST 203 Overview Fcus n AWS / AWS EC2 & EBS Gartner Magic Quadrant Clud August 203 What is the frmula that AWS EC2 gt right?

More information

Professional Training Courses

Professional Training Courses Perfrmance Testing HP LadRunner v9.5 & v11 22 Apr 2011 Prfessinal Training Curses Lad & Perfrmance Testing using HP LadRunner v9.5 & v11 QAAgility Technlgies QA Agility thrugh Innvatin and Autmatin QAAgility

More information

Table of Contents. This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.

Table of Contents. This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY. Table f Cntents Tp Pricing and Licensing Questins... 2 Why shuld custmers be excited abut Micrsft SQL Server 2012?... 2 What are the mst significant changes t the pricing and licensing fr SQL Server?...

More information

Vendor Management. Federal Deposit Insurance Corporation Division of Risk Management Supervision Atlanta Regional Office.

Vendor Management. Federal Deposit Insurance Corporation Division of Risk Management Supervision Atlanta Regional Office. Vendr Management Federal Depsit Insurance Crpratin Divisin f Risk Management Supervisin Atlanta Reginal Office June 18, 2014 1 Agenda Intrductin Vendr Management Overview Regulatry Expectatins Bard and

More information

Process Improvement Center of Excellence Service Proposal Recommendation. Operational Oversight Committee Report Submission

Process Improvement Center of Excellence Service Proposal Recommendation. Operational Oversight Committee Report Submission Prcess Imprvement Center f Excellence Service Prpsal Recmmendatin Operatinal Oversight Cmmittee Reprt Submissin INTRODUCTION This Prpsal prvides initial infrmatin regarding a pssible additin t a service.

More information

Project Startup Report Presented to the IT Committee June 26, 2012

Project Startup Report Presented to the IT Committee June 26, 2012 Prject Name: SOS File 2.0 Agency: Secretary f State Business Unit/Prgram Area: Secretary f State Prject Spnsr: Al Jaeger Prject Manager: Beverly Maitland Prject Startup Reprt Presented t the IT Cmmittee

More information

This documentation, which includes embedded help systems and electronically distributed materials, (hereinafter referred to as

This documentation, which includes embedded help systems and electronically distributed materials, (hereinafter referred to as This dcumentatin, which includes embedded help systems and electrnically distributed materials, (hereinafter referred t as the Dcumentatin ) is fr yur infrmatinal purpses nly and is subject t change r

More information

Capabilities Statement CONNECT WITH US:

Capabilities Statement CONNECT WITH US: Capabilities Statement CONNECT WITH US: Hitek Cnsulting, LLC Since 2005, we have becme the mst affrdable cmmercial service prvider f custm website, mbile app and sftware develpment. We als prvide website

More information

System Business Continuity Classification

System Business Continuity Classification System Business Cntinuity Classificatin Business Cntinuity Prcedures Infrmatin System Cntingency Plan (ISCP) Business Impact Analysis (BIA) System Recvery Prcedures (SRP) Cre Infrastructure Criticality

More information

Innovate faster with a cloud-enabled enterprise. Dirk Basenach, SAP SE, HANA Cloud Platform November 2 nd, 2015

Innovate faster with a cloud-enabled enterprise. Dirk Basenach, SAP SE, HANA Cloud Platform November 2 nd, 2015 Innvate faster with a clud-enabled enterprise Dirk Basenach, SAP SE, HANA Clud Platfrm Nvember 2 nd, 2015 Innvate r die Mre than 60% f CEOs expect 15-50% f their earnings grwth in the next 5 years t cme

More information

COPIES-F.Y.I., INC. Policies and Procedures Data Security Policy

COPIES-F.Y.I., INC. Policies and Procedures Data Security Policy COPIES-F.Y.I., INC. Plicies and Prcedures Data Security Plicy Page 2 f 7 Preamble Mst f Cpies FYI, Incrprated financial, administrative, research, and clinical systems are accessible thrugh the campus

More information

Network Security Trends in the Era of Cloud and Mobile Computing

Network Security Trends in the Era of Cloud and Mobile Computing Research Reprt Abstract: Netwrk Security Trends in the Era f Clud and Mbile Cmputing By Jn Oltsik, Senir Principal Analyst and Bill Lundell, Senir Research Analyst With Jennifer Gahm, Senir Prject Manager

More information

ISO Management Systems. Guidance on understanding the benefits of an ISO Management System

ISO Management Systems. Guidance on understanding the benefits of an ISO Management System ISO Management Systems Guidance n understanding the benefits f an ISO Management System Welcme & Intrductins 4031 University Drive, 206, Fairfax, VA 22030 3 Grant Square, 243, Hinsdale, IL 60521 www.radiancmpliance.cm

More information

Service Request Form

Service Request Form New Prfessinal Services Order Frm Editable PDF Service Request Frm If yu have any questins while filling ut this frm, please cntact yur CDM, email Prfessinal Services at PS@swipeclck.cm, r call 888-223-3250

More information

MANITOBA SECURITIES COMMISSION STRATEGIC PLAN 2013-2016

MANITOBA SECURITIES COMMISSION STRATEGIC PLAN 2013-2016 MANITOBA SECURITIES COMMISSION STRATEGIC PLAN 2013-2016 The Manitba Securities Cmmissin (the Cmmissin) is a divisin f the Manitba Financial Services Agency (MFSA). The ther divisin is the Financial Institutins

More information

Restricted Document. Pulsant Technical Specification

Restricted Document. Pulsant Technical Specification Pulsant Technical Specificatin Title Pulsant Dedicated Server Department Prduct Develpment Cntributrs RR Classificatin Restricted Versin 1.0 Overview Pulsant ffer a Dedicated Server service t underpin

More information

Chapter 7 Business Continuity and Risk Management

Chapter 7 Business Continuity and Risk Management Chapter 7 Business Cntinuity and Risk Management Sectin 01 Business Cntinuity Management 070101 Initiating the Business Cntinuity Plan (BCP) Purpse: T establish the apprpriate level f business cntinuity

More information

State of Wisconsin. File Server Service Service Offering Definition

State of Wisconsin. File Server Service Service Offering Definition State f Wiscnsin File Server Service Service Offering Definitin Dcument Revisin Histry Date Versin Creatr Ntes 2/16/2008 1.0 JD Urfer First pass 2/16/2008 2.0 Tm Runge Editing changes 2/19/2009 2.1 Tm

More information

FINANCE SCRUTINY SUB-COMMITTEE

FINANCE SCRUTINY SUB-COMMITTEE REPORT FOR: PERFORMANCE AND FINANCE SCRUTINY SUB-COMMITTEE Date f Meeting: 6 January 2015 Subject: Staff Survey and Sickness Absence Mnitring Results and Actin plans Respnsible Officer: Scrutiny Lead Member

More information

Critical Success Factors for FedRAMP Assessments A 3PAO Perspective

Critical Success Factors for FedRAMP Assessments A 3PAO Perspective Creating Mre Effective and Strategic Slutins Critical Success Factrs fr FedRAMP Assessments A 3PAO Perspective David Svec Veris Grup, LLC Summary Clud Security Prviders (CSPs) fr the gvernment have a strategic

More information

AHLA. C. Big Data, Cloud Computing and the New World Order for Health Care Privacy

AHLA. C. Big Data, Cloud Computing and the New World Order for Health Care Privacy AHLA C. Big Data, Clud Cmputing and the New Wrld Order fr Health Care Privacy Marti Arvin Chief Cmpliance Officer UCLA David Geffen Schl f Medicine Ls Angeles, CA Kirk J. Nahra Wiley Rein LLP Washingtn,

More information

G-CLOUD FRAMEWORK SERVICE DEFINITION. Oracle Technology Service for Agile Cloud Projects. Copyright: 2014 6point6 Ltd

G-CLOUD FRAMEWORK SERVICE DEFINITION. Oracle Technology Service for Agile Cloud Projects. Copyright: 2014 6point6 Ltd G-CLOUD FRAMEWORK SERVICE DEFINITION Oracle Technlgy Service fr Agile Clud Prjects Cpyright: 2014 6pint6 Ltd G-Clud Service Definitin Oracle Technlgy 1. SERVICE OVERVIEW The 6pint6 Oracle Technlgy Service

More information

Security Assurance IN Service OuTSourcing (SAINTS)

Security Assurance IN Service OuTSourcing (SAINTS) Security Assurance IN Service OuTSurcing (SAINTS) Mussa OUEDRAOGO, PhD Service Science and Innvatin, CRP Henri Tudr Cnférence EurClud Luxemburg du 26 Fevrier 2013- Migrer vers le Clud Cmputing: pprtunités

More information

JOINT BOARD OF MODERATORS GUIDELINES FOR CHECKING OUTPUT STANDARDS OF DEGREE PROGRAMMES

JOINT BOARD OF MODERATORS GUIDELINES FOR CHECKING OUTPUT STANDARDS OF DEGREE PROGRAMMES JOINT BOARD OF MODERATORS GUIDELINES FOR CHECKING OUTPUT STANDARDS OF DEGREE PROGRAMMES 1. Intrductin 1.1 These Guidelines are fr higher educatin institutins (r ther educatinal establishments) prviding

More information

How Does Cloud Computing Work?

How Does Cloud Computing Work? Hw Des Clud Cmputing Wrk? Carl Mazzanti, CEO, emazzanti Technlgies IT Supprt and Clud Cmputing Services fr Small Business Hbken, NJ and NYC, 201-360- 4400 Owner [Pick the date] Hw des Clud Cmputing Wrk?

More information

AML Internet Manor Court, Manor Farm House, London Road, Derby, Derbyshire, DE72 2GR. Tel: 01332 650 009 Fax: 01332 650 850 Email:

AML Internet Manor Court, Manor Farm House, London Road, Derby, Derbyshire, DE72 2GR. Tel: 01332 650 009 Fax: 01332 650 850 Email: AML Internet Manr Curt, Manr Farm Huse, Lndn Rad, Derby, Derbyshire, DE72 2GR. Tel: 01332 650 009 Fax: 01332 650 850 Email: Backup@AmlInternet.c.uk Cntents Page Situatin Analysis 3 AML Internet - The Slutin

More information

Corporate Profile, 2014

Corporate Profile, 2014 Cpyright 2014 IT-Serve.cm All rights reserved. IT-Serve.cm Crprate Prfile, 2014 Internatinal experience, Reginal reach, Lcal understanding Dubai Abu Dhabi Sharjah Oman Qatar Saudi Arabia IT-Serve.cm PO

More information

ITIL Service Offerings & Agreement (SOA) Certification Program - 5 Days

ITIL Service Offerings & Agreement (SOA) Certification Program - 5 Days ITIL Service Offerings & Agreement (SOA) Certificatin Prgram - 5 Days Prgram Overview ITIL is a set f best practices guidance that has becme a wrldwide-adpted framewrk fr Infrmatin Technlgy Services Management

More information

Process Automation With VMware

Process Automation With VMware Prcess Autmatin With VMware Intelligent Service Autmatin fr Real and Virtual Envirnments Intrductin This Whitepaper describes hw the UC4 platfrm integrates with the VMware vsphere Server and the VMware

More information

Oracle Cloud Enterprise Hosting and Delivery Policies

Oracle Cloud Enterprise Hosting and Delivery Policies Oracle Clud Enterprise Hsting and Delivery Plicies Statement f Changes Versin 1.5, 6/01/2015 This dcument utlines changes made t the Oracle Clud Enterprise Hsting and Delivery Plicies dated December 1,

More information

Standardization or Harmonization? You need Both

Standardization or Harmonization? You need Both Standardizatin r? Yu need Bth Albrecht Richen and Ansgar Steinhrst Recently the CFO f a majr cnsumer electrnics cmpany stated, We dn t need standardizatin f ur wrldwide prcesses, we need harmnizatin. Is

More information

Microsoft Exchange 2010 on VMware Design and Sizing Examples

Microsoft Exchange 2010 on VMware Design and Sizing Examples Micrsft Exchange 2010 n VMware Micrsft Exchange 2010 n VMware This prduct is prtected by U.S. and internatinal cpyright and intellectual prperty laws. This prduct is cvered by ne r mre patents listed at

More information

The AppSec How-To: Choosing a SAST Tool

The AppSec How-To: Choosing a SAST Tool The AppSec Hw-T: Chsing a SAST Tl Surce Cde Analysis Made Easy GIVEN THE WIDE RANGE OF SOURCE CODE ANALYSIS TOOLS, SECURITY PROFESSIONALS, AUDITORS AND DEVELOPERS ALIKE ARE FACED WITH THE QUESTION: Hw

More information

Implementing an electronic document and records management system using SharePoint 7

Implementing an electronic document and records management system using SharePoint 7 Reprt title Agenda item Implementing an electrnic dcument and recrds management system using SharePint 7 Meeting Finance, Prcurement & Prperty Cmmittee 16 June 2008 Date Reprt by Dcument Number Head f

More information

Diagnostic Manager Change Log

Diagnostic Manager Change Log Diagnstic Manager Change Lg Updated: September 8, 2015 4.4.4090 Features and Issues Supprt fr Office 365 Tenants Yu can nw: Mnitr the status f Office 365 Services (including SharePint Online, Exchange

More information

Implementing SQL Manage Quick Guide

Implementing SQL Manage Quick Guide Implementing SQL Manage Quick Guide The purpse f this dcument is t guide yu thrugh the quick prcess f implementing SQL Manage n SQL Server databases. SQL Manage is a ttal management slutin fr Micrsft SQL

More information

Request for Proposal Technology Services

Request for Proposal Technology Services Avca Schl District 37 Wilmette, IL Request fr Prpsal Technlgy Services Netwrk and Systems Infrastructure Management Services December 5, 2013 Avca Schl District 37 is seeking an IT cnsulting firm t manage

More information

ITU-T Network Security Initiatives

ITU-T Network Security Initiatives ITU-T Netwrk Security Initiatives Michael Harrp The Cttingham Grup Internatinal Telecmmunicatin Unin Overview f Presentatin ITU-T Shw the cntext f ITU-T security standards activities Highlight sme f key

More information

Data Abstraction Best Practices with Cisco Data Virtualization

Data Abstraction Best Practices with Cisco Data Virtualization White Paper Data Abstractin Best Practices with Cisc Data Virtualizatin Executive Summary Enterprises are seeking ways t imprve their verall prfitability, cut csts, and reduce risk by prviding better access

More information

Installation Guide Marshal Reporting Console

Installation Guide Marshal Reporting Console Installatin Guide Installatin Guide Marshal Reprting Cnsle Cntents Intrductin 2 Supprted Installatin Types 2 Hardware Prerequisites 2 Sftware Prerequisites 3 Installatin Prcedures 3 Appendix: Enabling

More information

JADU UNIVERSE SPECIALIST CLOUD SERVICES: DEVELOPMENT

JADU UNIVERSE SPECIALIST CLOUD SERVICES: DEVELOPMENT JADU UNIVERSE SPECIALIST CLOUD SERVICES: DEVELOPMENT Sftware develpment fr gvernment digital services, web applicatins and payment transactins, by Jadu Jadu Limited Universe Huse 1 Merus Curt Leicester

More information

Research Report. Abstract: Advanced Malware Detection and Protection Trends. September 2013

Research Report. Abstract: Advanced Malware Detection and Protection Trends. September 2013 Research Reprt Abstract: Advanced Malware Detectin and Prtectin Trends By Jn Oltsik, Senir Principal Analyst With Jennifer Gahm, Senir Prject Manager September 2013 2013 by The Enterprise Strategy Grup,

More information

Worldwide Cloud Market Analysis & Vendor Tracking Report Q4 2015

Worldwide Cloud Market Analysis & Vendor Tracking Report Q4 2015 Market Research fr the IT & Netwrking Industry Wrldwide Clud Market Analysis & Vendr Tracking Reprt fr HPE Q4 2015 Synergy Research Grup 31, Market Research fr the Netwrking & Telecm Industry Cntents Clud

More information

Research Report. Abstract: Data Center Networking Trends. January 2012. By Jon Oltsik With Bob Laliberte and Bill Lundell

Research Report. Abstract: Data Center Networking Trends. January 2012. By Jon Oltsik With Bob Laliberte and Bill Lundell Research Reprt Abstract: Data Center Netwrking Trends By Jn Oltsik With Bb Laliberte and Bill Lundell January 2012 2012 Enterprise Strategy Grup, Inc. All Rights Reserved. Intrductin Research Objective

More information

This documentation, which includes embedded help systems and electronically distributed materials, (hereinafter referred to as

This documentation, which includes embedded help systems and electronically distributed materials, (hereinafter referred to as This dcumentatin, which includes embedded help systems and electrnically distributed materials, (hereinafter referred t as the Dcumentatin ) is fr yur infrmatinal purpses nly and is subject t change r

More information

Gothaer Versicherungen bases its insurance quotation software on the b+m Generative Development Process and the b+m ArchitectureWare product line

Gothaer Versicherungen bases its insurance quotation software on the b+m Generative Development Process and the b+m ArchitectureWare product line Gthaer Versicherungen bases its insurance qutatin sftware n the b+m Generative Develpment Prcess and the b+m ArchitectureWare prduct line Field f Business Insurance slutins fr the banking sectr. Applicatin

More information

POSITION DESCRIPTION. Classification Higher Education Worker, Level 7. Responsible to. I.T Manager. The Position

POSITION DESCRIPTION. Classification Higher Education Worker, Level 7. Responsible to. I.T Manager. The Position Psitin Title I.T Prject Officer Classificatin Higher Educatin Wrker, Level 7 Respnsible t The Psitin I.T Manager The psitin assists with the cmpletin f varius IT prjects intended t enable the nging administratin

More information

Appendix H. Annual Risk Assessment and Audit Plan 2013/14

Appendix H. Annual Risk Assessment and Audit Plan 2013/14 Annual Risk Assessment and Audit Plan 2013/14 Internal Audit Department September 25, 2013 Table f Cntents Intrductin.. 3 Risk Assessment Prcess... 4 Page 2 Intrductin Each year, the Internal Audit Department

More information