ca IT Leaders Forum Working in the Cloud using the new ISO/IEC/ITU-T Cloud Computing Standards Dr David Ross, Chief Information Security Officer,
|
|
|
- Jade McCoy
- 10 years ago
- Views:
Transcription
1 ca IT Leaders Forum Working in the Cloud using the new ISO/IEC/ITU-T Cloud Computing Standards Dr David Ross, Chief Information Security Officer, Bridge Point Communications 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 1
2 David Ross Chartered Professional Engineer (Electrical), NPER, RPEQ Certified Information Systems Security Professional Payment Card Industry Qualified Security Assessor Standards Australia IT-038 DAPS Committee Member CISO, Bridge Point Communications Adjunct Associate Professor, ITEE, University of Queensland Founding Director, Cloud Security Alliance, Australia 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 2
3 What are we talking about: ISO/IEC Information technology Cloud Computing Overview and Vocabulary ISO/IEC Information Technology Cloud Computing Reference Architecture ISO/IEC Information Technology Cloud Computing Service Level Agreement (SLA) Framework and Terminology (with project split approved pending JTC1 endorsement) ISO/IEC IT CC SLA Metrics ISO/IEC IT CC SLA Core Requirements 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 3
4 Why do you care? 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 4
5 Common issues encountered with cloud services e.g. The Cloud Consumer assumes the Cloud Service is secure without understanding the contract. Actual: Cloud Service includes automatic backup service that copies customer data to an external backup service, providing a further level of security to customer data stored for 3 months after being made can be extended to up to 7 years if required Perfectly legitimate, but there are 2 meanings for secure here By default, the backup is overwritten after 3 months no restores over 3 months old! The backups go to a third party with whom you have no contract for handling your data! The backups are NOT encrypted! 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 5
6 ISO/IEC Overview & Vocabulary Lots of Definitions 6 Key Characteristics 4 Deployment Models 3 Cloud Capabilities Types 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 6
7 cloud computing 1 : paradigm for enabling network access to a scalable and elastic pool of shareable physical or virtual resources with on-demand self-service provisioning and administration [1] ISO/IEC 17788:2014 Information technology Cloud computing Overview and vocabulary 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 7
![administration [1] ISO/IEC 17788:2014 Information technology Cloud computing Overview and](/docs-images/42/12412449/images/page_7.jpg "vocabulary 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd")
8 What is Cloud? 6 Key Characteristics: Broad network access On-demand self-service Multi-tenancy Resource pooling Rapid elasticity and scalability Measured service 2014 Copyright Standards 2014 Australia Copyright and Bridge Point Communications Pty Ltd slide 8
9 cloud service 1 : one or more capabilities offered via cloud computing (3.2.5) invoked using a declared interface [1] ISO/IEC 17788:2014 Information technology Cloud computing Overview and vocabulary 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 9
10 Managed Services NOT cloud 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 10
11 On-Demand Self-Service CLOUD 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 11
12 On-Demand Self-Service CLOUD 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 12
13 On-Demand Self-Service CLOUD 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 13
14 On-Demand Self-Service CLOUD 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 14
15 Cloud computing roles and activities cloud service provider: party (3.1.6) which makes cloud services (3.2.8) available cloud service customer: party (3.1.6) which is in a business relationship for the purpose of using cloud services (3.2.8) cloud service user: natural person, or entity acting on their behalf, associated with a cloud service customer (3.2.11) that uses cloud services (3.2.8) NOTE Examples of such entities include devices and applications. [1] ISO/IEC 17788:2014 Information technology Cloud computing Overview and vocabulary 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 15
![[1] ISO/IEC 17788:2014 Information technology Cloud computing Overview and vocabulary 2014 Copyright Standards Australia and Bridge Point Communications Pty](/docs-images/42/12412449/images/page_15.jpg "Ltd slide 15")
16 cloud service partner: party (3.1.6) which is engaged in support of, or auxiliary to, activities of either the cloud service provider (3.2.15) or the cloud service customer (3.2.11), or both [1] ISO/IEC 17788:2014 Information technology Cloud computing Overview and vocabulary 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 16
17 cloud auditor: cloud service partner (3.2.14) with the responsibility to conduct an audit of the provision and use of cloud services (3.2.8) [1] ISO/IEC 17788:2014 Information technology Cloud computing Overview and vocabulary 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 17
18 cloud broker: cloud service partner (3.2.14) that negotiates relationships between cloud service customers (3.2.11) and other cloud service providers (3.2.15) [1] ISO/IEC 17788:2014 Information technology Cloud computing Overview and vocabulary 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 18
19 4 Deployment Models Public Cloud Private Cloud Community Cloud Hybrid Cloud 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 19
20 But Forget Cloud Types The original NIST Cloud Types: IaaS PaaS SaaS Have been superseded by an infinite number of: Guff-as-a-Service The original NIST Cloud Types have been renamed 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 20
21 3 NIST Types now Capabilities Types De-facto NIST Types now abstracted to 2 levels: Cloud Service Categories Cloud Capabilities Types Now 3 Capabilities Types (ISO 17788): Infrastructure Capabilities Type, Platform Capabilities Type, and Application Capabilities Type. And many Cloud Service Categories, including: Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), and Software-as-a-Service (SaaS) Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 21
22 Cloud Service Categories & Cloud Capabilities Cloud Service Categories Software as a Service Platform as a Service Infrastructure as a Service Cloud Capabilities Types Infrastructure Platform Application X X X Network as a Service X X X Data Storage as a Service Compute as a Service Communication as a Service X X X X 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 22 X X
23 ISO/IEC Reference Architecture More definitions Plenty of descriptive text Lots of graphics 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 23
24 ISO/IEC 17789:2014 Information technology Cloud computing Reference architecture 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 24
25 ISO/IEC 17789:2014 Information technology Cloud computing Reference architecture 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 25
26 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 26 ISO/IEC 17789:2014 Information technology Cloud computing Reference architecture
27 Cloud Service Level Agreements We are at the crux of a new standard And you can shape its development Australia is a very active P-member in the development of the Cloud Computing standards Australia is directly affecting the final output of these processes We want you to have your say contact us! 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 27
28 ISO/IEC Joint Technical Committee 1 (JTC 1) To develop, maintain, promote, and facilitate standards in the fields of information technology (IT) and Information and Communications Technology (ICT). 29 sub-groups: Sub-Committees (SC) Working Groups (WG) Special Working Groups (SWG) Sub-Committees Working Groups (SC x/wg y) 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 28
29 ISO/IEC JTC 1/SC 38 Distributed application platforms and services (DAPS) WG 1: Web Services, WG 2: Service Oriented Architecture (SOA), and WG 3: Cloud Computing Number of published ISO standards under responsibility of ISO/IEC JTC 1/SC 38 (includes updates): 4 Participating countries: 27 Observing countries: Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 29
30 ISO/IEC JTC 1/SC 38 Stds Dev Process (My count on the day, may have been late starters too) Kobe, Japan, Monday, 23 September 2013 (start of work on SLA) From the 26 P-Members (National Body) (number-of-delegates-present): Australia (SA) (4) Brazil (ABNT) (1) Canada ( SCC ) (3) China ( SAC ) (8) France (AFNOR) (1) Germany (DIN) (3) Ireland (NSAI) (2) Japan (JISC) (5) Korea, Republic of (KATS) (6) Poland (PKN) (2) Singapore (SPRING) (1) Sweden (SIS) (2) Switzerland (SNV) (1) UK (BSI) (2) USA (ANSI) (15) 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 30
31 What it isn t 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 31
32 Not an Aussie SLA (ie Service Agreement) This standard is STRICTLY about service LEVELS 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 32
33 Not an SLA template document This standard does not provide a standard structure that used for cloud SLA contracts. Contracts are highly customized items between providers and customers. This international standard does not supersede any legal requirement Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 33
34 What it is 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 34
35 The Cloud Computing SLA Standard(s) This standard seeks to establish a set of common cloud SLA building blocks (concepts, terms, definitions, contexts) that can then be used to create cloud SLAs that help avoid confusion and facilitate common understanding between the cloud service providers and the cloud service customers Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 35
36 The Cloud Computing SLA Standard(s) RELATIONSHIP BETWEEN THE MASTER AGREEMENT AND SLAS CLOUD SLA MANAGEMENT THE ROLE OF SERVICE LEVEL OBJECTIVES, METRICS, REMEDIES, AND EXCEPTIONS IN THE SLA CLOUD SLA COMPONENTS 10.1 General 10.2 Covered Services Component Description Relevance Service Level Objectives SLA Definitions Component Description Relevance Service Level Objectives SLA Scope Component Description Relevance Service Level Objectives 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 36
37 The Cloud Computing SLA Standard(s) General Covered Services Component SLA Definitions Component SLA Scope Component Service Monitoring Component Roles and Responsibilities Component Accessibility Component Availability Component Cloud Service Response Time Protection of Personally Identifiable Information (PII) Component Information Security Component Termination of Service Component Support Component Governance Component Service Reliability Component Cloud Service Customer Data Backup and Restore Data Management Component Attestations, Certifications and Audits Component 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 37
38 Where it is going 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 38
39 19086 SLA Framework & Terminology WD ISO/IEC Information Technology Cloud Computing Service Level Agreement (SLA) Framework and Terminology Editors: Eric Simmon (US) Liu Na (China) Toshihiro Suzuki (Japan) Working Draft in progress 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 39
40 Part 1 : Overview and Concepts ISO/IEC Information Technology Cloud Computing Service Level Agreement (SLA) Framework and Terminology Part 1 : Overview and Concepts Acting Editors: Eric Simmon (US)* Liu Na (China)* Toshihiro Suzuki (Japan)* Pending Project Subdivision 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 40
41 Part 2 : Metrics ISO/IEC Information Technology Cloud Computing Service Level Agreement (SLA) Framework and Terminology Part 2 : Metrics Acting Editors: Eric Simmon (US)* Liu Na (China)* Toshihiro Suzuki (Japan)* Pending Project Subdivision 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 41
42 Part 3 : Core Requirements ISO/IEC Information Technology Cloud Computing Service Level Agreement (SLA) Framework and Terminology Part 3 : Core Requirements Acting Editors: Eric Simmon (US)* Liu Na (China)* Toshihiro Suzuki (Japan)* Pending Project Subdivision 2014 Copyright Standards Australia and Bridge Point Communications Pty Ltd slide 42
Lifting the Fog Around Cloud Computing. Eric A. Hibbard, CISSP-ISSAP, ISSEP, ISSMP, CISA CTO Security & Privacy Hitachi Data systems
Lifting the Fog Around Cloud Computing Eric A. Hibbard, CISSP-ISSAP, ISSEP, ISSMP, CISA CTO Security & Privacy Hitachi Data systems 1 Straw Poll Cloud Awareness A. To truly understand clouds one should
Cloud Computing Standards: Overview and first achievements in ITU-T SG13.
Cloud Computing Standards: Overview and first achievements in ITU-T SG13. Dr ITU-T, Chairman of Cloud Computing Working Party, SG 13 Future Networks Orange Labs Networks, Cloud & Future Networks Standard
6 Cloud computing overview
6 Cloud computing overview 6.1 General ISO/IEC 17788:2014 (E) Cloud Computing Overview Page 1 of 6 Cloud computing is a paradigm for enabling network access to a scalable and elastic pool of shareable
CLOUD SERVICE LEVEL AGREEMENTS Meeting Customer and Provider needs
CLOUD SERVICE LEVEL AGREEMENTS Meeting Customer and Provider needs Eric Simmon January 28 th, 2014 BACKGROUND Federal Cloud Computing Strategy Efficiency improvements will shift resources towards higher-value
Comparative Analysis of SOA and Cloud Computing Architectures using Fact Based Modeling
Comparative Analysis of SOA and Cloud Computing Architectures using Fact Based Modeling Baba Piprani 1, Don Sheppard 2, Abbie Barbir 3 1 MetaGlobal Systems, Canada 2 ConCon Management Services, Canada
Latest in Cloud Computing Standards. Eric A. Hibbard, CISSP, ISSAP, ISSEP, ISSMP, CISA CTO Security & Privacy Hitachi Data systems
Latest in Cloud Computing Standards Eric A. Hibbard, CISSP, ISSAP, ISSEP, ISSMP, CISA CTO Security & Privacy Hitachi Data systems 1 Short Introduction CTO Security & Privacy, Hitachi Data Systems Involved
ISO/TC 258, ISO Technical Committee for Project, Program, and Portfolio Management, convenes in Pretoria, South Africa
ISO/TC 258, ISO Technical Committee for Project, Program, and Portfolio Management, convenes in Pretoria, South Africa By [email protected] ISO/TC 258, the Technical Committee (TC) of the International
This document is a preview generated by EVS
TECHNICAL REPORT ISO/IEC TR 20000-9 First edition 2015-02-15 Information technology Service management Part 9: Guidance on the application of ISO/IEC 20000-1 to cloud services Technologies de l information
ISO 55001. Asset management. Management systems: Requirements. First edition 2014-01-15
ISO 55001 Asset management Management systems: Requirements First edition 2014-01-15 Our vision To be the world s leading provider of high quality, globally relevant International Standards through members
The Cloud Computing Revolution: Beyond the Hype
The Cloud Computing Revolution: Beyond the Hype KEN ADLER Partner and Chair, Technology and Outsourcing Practice Group Loeb & Loeb LLP Outsourcing in Financial Services Program October 19, 2010 Overview
ISO/IEC/IEEE 29119 The New International Software Testing Standards
ISO/IEC/IEEE 29119 The New International Software Testing Standards Stuart Reid Testing Solutions Group 117 Houndsditch London EC3 UK Tel: 0207 469 1500 Fax: 0207 623 8459 www.testing-solutions.com 1 Stuart
Comparative Analysis of SOA and Cloud Computing Architectures Using Fact Based Modeling
Comparative Analysis of SOA and Cloud Computing Architectures Using Fact Based Modeling Baba Piprani 1, Don Sheppard 2, and Abbie Barbir 3 1 MetaGlobal Systems, Canada 2 ConCon Management Services, Canada
Cloud Security considerations for business adoption. Ricci IEONG CSA-HK&M Chapter
Cloud Security considerations for business adoption Ricci IEONG CSA-HK&M Chapter What is Cloud Computing? Slide 2 What is Cloud Computing? My Cloud @ Internet Pogoplug What is Cloud Computing? Compute
A HYPE-FREE STROLL THROUGH CLOUD STORAGE SECURITY
Eric A. Hibbard, CISSP, CISA, ISSAP, ISSMP, ISSEP, SCSE Hitachi Data Systems A HYPE-FREE STROLL THROUGH CLOUD STORAGE SECURITY Subhash Sankuratripati NetApp SNIA Legal Notice The material contained in
Cloud Computing A NIST Perspective & Beyond. Robert Bohn, PhD Advanced Network Technologies Division
Cloud Computing A NIST Perspective & Beyond Robert Bohn, PhD Advanced Network Technologies Division ISACA National Capital Area Chapter Arlington, VA, USA 17 March 2015 Cloud Program Overview Launch &
Securing The Cloud. Foundational Best Practices For Securing Cloud Computing. Scott Clark. Insert presenter logo here on slide master
Securing The Cloud Foundational Best Practices For Securing Cloud Computing Scott Clark Agenda Introduction to Cloud Computing What is Different in the Cloud? CSA Guidance Additional Resources 2 What is
Fundamental Concepts and Models
Chapter 4: Fundamental Concepts and Models Nora Almezeini MIS Department, CBA, KSU From Cloud Computing by Thomas Erl, Zaigham Mahmood, and Ricardo Puttini(ISBN: 0133387526) Copyright 2013 Arcitura Education,
Accelerating Cloud adoption with Security Level Agreements automation, monitoring and industry standards compliance
Accelerating Cloud adoption with Security Level Agreements automation, monitoring and industry standards compliance Cirrus Workshop, Vienna, Austria, November 19, 2013 Dr. Said Tabet Senior Technologist
Perspectives on Moving to the Cloud Paradigm and the Need for Standards. Peter Mell, Tim Grance NIST, Information Technology Laboratory 7-11-2009
Perspectives on Moving to the Cloud Paradigm and the Need for Standards Peter Mell, Tim Grance NIST, Information Technology Laboratory 7-11-2009 2 NIST Cloud Computing Resources NIST Draft Definition of
Standardizing Cloud Services for Financial Institutions through the provisioning of Service Level Agreements (SLAs)
Standardizing Cloud Services for Financial Institutions through the provisioning of Service Level Agreements (SLAs) Robert Bohn, PhD Advanced Network Technologies Division Cloud FS Americas 2015 New York,
Clinical Trials in the Cloud: A New Paradigm?
Marc Desgrousilliers CTO at Clinovo Clinical Trials in the Cloud: A New Paradigm? Marc Desgrousilliers CTO at Clinovo What is a Cloud? (1 of 3) "Cloud computing is a model for enabling convenient, on-demand
Improving IT Service Management Architecture in Cloud Environment on Top of Current Frameworks
Improving IT Service Management Architecture in Cloud Environment on Top of Current Frameworks Fatemeh Arabalidousti 1 and Ramin Nasiri 2 1 Department of Computer Engineering, Islamic Azad University,
Managing your Information Assets in the Cloud
Managing your Information Assets in the Cloud Nick Loy, Director, Portfolio Management Documents BancTec Certified Information Professional Enterprise Content Management Practioner Prior to BancTec, was
Public Cloud Workshop Offerings
Cloud Perspectives a division of Woodward Systems Inc. Public Cloud Workshop Offerings Cloud Computing Measurement and Governance in the Cloud Duration: 1 Day Purpose: This workshop will benefit those
Information Security ISO Standards. Feb 11, 2015. Glen Bruce Director, Enterprise Risk Security & Privacy
Information Security ISO Standards Feb 11, 2015 Glen Bruce Director, Enterprise Risk Security & Privacy Agenda 1. Introduction Information security risks and requirements 2. Information Security Management
Cloud Computing Guide & Handbook. SAI USA Madhav Panwar
Cloud Computing Guide & Handbook SAI USA Madhav Panwar Background 2010 WGITA approved the cloud computing project with SAI USA as lead and Canada & India as members 2011 A status report was presented and
CHAPTER 8 CLOUD COMPUTING
CHAPTER 8 CLOUD COMPUTING SE 458 SERVICE ORIENTED ARCHITECTURE Assist. Prof. Dr. Volkan TUNALI Faculty of Engineering and Natural Sciences / Maltepe University Topics 2 Cloud Computing Essential Characteristics
Cloud Computing. What is Cloud Computing?
Cloud Computing What is Cloud Computing? Cloud computing is where the organization outsources data processing to computers owned by the vendor. Primarily the vendor hosts the equipment while the audited
Fujitsu World Tour 2015. Human Centric Innovation. The Future of the Datacenter. Ayman Abouseif VP Product Marketing. 0 Copyright 2015 FUJITSU
Fujitsu World Tour 2015 The Future of the Datacenter Ayman Abouseif VP Product Marketing Human Centric Innovation 0 Copyright 2015 FUJITSU A hyperconnected world 1 Copyright 2015 FUJITSU A new business
ITU- T Focus Group Cloud Compu2ng
ITU- T Focus Group Cloud Compu2ng International Telecommunication Union 1 ITU-T FG Cloud Management & Structure Management team: Chairman: Victor Kutukov (Russia) Vice-Chairman: Jamil Chawki (France Telecom
The Magical Cloud. Lennart Franked. Department for Information and Communicationsystems (ICS), Mid Sweden University, Sundsvall.
The Magical Cloud Lennart Franked Department for Information and Communicationsystems (ICS), Mid Sweden University, Sundsvall. 2014-10-20 Lennart Franked (MIUN IKS) The Magical Cloud 2014-10-20 1 / 35
NIST Cloud Computing Security Reference Architecture (SP 500-299 draft)
NIST Cloud Computing Security Reference Architecture (SP 500-299 draft) NIST Cloud Computing Security Working Group Dr. Michaela Iorga, NIST Senior Security Technical Lead for Cloud Computing Chair, NIST
ISO/IEC JTC 1 SC 38 Cloud Works & Issues
ISO/IEC JTC 1 SC 38 Cloud Works & Issues International Cloud Symposium 2011 10-13 October 2011, Ditton Manor, UK Dr. Seungyun Lee [email protected] International Cloud Symposium 2011, 10-13 October 2011,
Federal Aviation Administration. efast. Cloud Computing Services. 25 October 2012. Federal Aviation Administration
efast Cloud Computing Services 25 October 2012 1 Bottom Line Up Front The FAA Cloud Computing Vision released in 2012 identified the agency's road map to meet the Cloud First Policy efast must provide
IT Audit in the Cloud
IT Audit in the Cloud Pavlina Ivanova, CISM ISACA-Sofia Chapter Content: o 1. Introduction o 2. Cloud Computing o 3. IT Audit in the Cloud o 4. Residual Risks o Used Resources o Questions 1. ISACA Trust
OWASP Chapter Meeting June 2010. Presented by: Brayton Rider, SecureState Chief Architect
OWASP Chapter Meeting June 2010 Presented by: Brayton Rider, SecureState Chief Architect Agenda What is Cloud Computing? Cloud Service Models Cloud Deployment Models Cloud Computing Security Security Cloud
Cloud Security Introduction and Overview
Introduction and Overview Klaus Gribi Senior Security Consultant [email protected] May 6, 2015 Agenda 2 1. Cloud Security Cloud Evolution, Service and Deployment models Overview and the Notorious
ISO/IEC JTC 1/SC 38 N 282
ISO/IEC JTC 1/SC 38 N 282 ISO/IEC JTC 1/SC 38 Distributed application platforms and services (DAPS) Secretariat: ANSI Document type: Request for comments Title: Draft Study Group on Cloud Computing Report
When Security, Privacy and Forensics Meet in the Cloud
When Security, Privacy and Forensics Meet in the Cloud Dr. Michaela Iorga, Senior Security Technical Lead for Cloud Computing Co-Chair, Cloud Security WG Co-Chair, Cloud Forensics Science WG March 26,
journey to a hybrid cloud
journey to a hybrid cloud Virtualization and Automation VI015SN journey to a hybrid cloud Jim Sweeney, CTO GTSI about the speaker Jim Sweeney GTSI, Chief Technology Officer 35 years of engineering experience
Security Issues in Cloud Computing
Security Issues in Computing CSCI 454/554 Computing w Definition based on NIST: A model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources
The Hybrid Cloud: Bringing Cloud-Based IT Services to State Government
The Hybrid Cloud: Bringing Cloud-Based IT Services to State Government October 4, 2009 Prepared By: Robert Woolley and David Fletcher Introduction Provisioning Information Technology (IT) services to enterprises
The Cloud in Regulatory Affairs - Validation, Risk Management and Chances -
45 min Webinar: November 14th, 2014 The Cloud in Regulatory Affairs - Validation, Risk Management and Chances - www.cunesoft.com Rainer Schwarz Cunesoft Holger Spalt ivigilance 2014 Cunesoft GmbH PART
A Study on Analysis and Implementation of a Cloud Computing Framework for Multimedia Convergence Services
A Study on Analysis and Implementation of a Cloud Computing Framework for Multimedia Convergence Services Ronnie D. Caytiles and Byungjoo Park * Department of Multimedia Engineering, Hannam University
Cloud Computing Technology
Cloud Computing Technology The Architecture Overview Danairat T. Certified Java Programmer, TOGAF Silver [email protected], +66-81-559-1446 1 Agenda What is Cloud Computing? Case Study Service Model Architectures
Essential Characteristics of Cloud Computing: On-Demand Self-Service Rapid Elasticity Location Independence Resource Pooling Measured Service
Cloud Computing Although cloud computing is quite a recent term, elements of the concept have been around for years. It is the maturation of Internet. Cloud Computing is the fine end result of a long chain;
Securing and Auditing Cloud Computing. Jason Alexander Chief Information Security Officer
Securing and Auditing Cloud Computing Jason Alexander Chief Information Security Officer What is Cloud Computing A model for enabling convenient, on-demand network access to a shared pool of configurable
How To Understand The Differences Between The 2005 And 2011 Editions Of Itil 20000
A Guide to the new ISO/IEC 20000-1 The differences between the 2005 and the 2011 editions A Guide to the new ISO/IEC 20000-1 The differences between the 2005 and the 2011 editions Lynda Cooper First published
CLOUD COMPUTING DEMYSTIFIED
CLOUD COMPUTING DEMYSTIFIED Definitions you ve been pretending to understand JACK DANIEL, CCSK, CISSP, MVP ENTERPRISE SECURITY Definitions Words have meaning, professionals need to understand them. We
Fujitsu Cloud IaaS Trusted Public S5. shaping tomorrow with you
Fujitsu Cloud IaaS Trusted Public S5 shaping tomorrow with you Realizing the cloud opportunity: Fujitsu Cloud iaas trusted Public s5 All the benefits of the public cloud, with enterprise-grade performance
Cloud Service Level Agreement Standardisation Guidelines
Cloud Service Level Agreement Standardisation Guidelines Brussels 24/06/2014 1 Table of Contents Preamble... 4 1. Principles for the development of Service Level Agreement Standards for Cloud Computing...
Cloud Computing: Opportunities, Challenges, and Solutions. Jungwoo Ryoo, Ph.D., CISSP, CISA The Pennsylvania State University
Cloud Computing: Opportunities, Challenges, and Solutions Jungwoo Ryoo, Ph.D., CISSP, CISA The Pennsylvania State University What is cloud computing? What are some of the keywords? How many of you cannot
Summary of responses to the public consultation on Cloud computing run by CNIL from October to December 2011 and analysis by CNIL
Summary of responses to the public consultation on Cloud computing run by CNIL from October to December 2011 and analysis by CNIL 1. Definition of Cloud Computing In the public consultation, CNIL defined
Katerina Apostolaki, [email protected] Marketing Manager
Cloud for Telcos Katerina Apostolaki, [email protected] Marketing Manager As an introduction Broadband is refered as a network infrastructure capable of reliably delivering diverse convergent services through
Architectural Implications of Cloud Computing
Architectural Implications of Cloud Computing Grace Lewis Research, Technology and Systems Solutions (RTSS) Program Lewis is a senior member of the technical staff at the SEI in the Research, Technology,
Planning the Migration of Enterprise Applications to the Cloud
Planning the Migration of Enterprise Applications to the Cloud A Guide to Your Migration Options: Private and Public Clouds, Application Evaluation Criteria, and Application Migration Best Practices Introduction
Cloud Computing and Security Risk Analysis Qing Liu Technology Architect STREAM Technology Lab [email protected]
Cloud Computing and Security Risk Analysis Qing Liu Technology Architect STREAM Technology Lab [email protected] 1 Disclaimers This presentation provides education on Cloud Computing and its security
International Organization for Standardization TC 215 Health Informatics. Audrey Dickerson, RN MS ISO/TC 215 Secretary
International Organization for Standardization TC 215 Health Informatics Audrey Dickerson, RN MS ISO/TC 215 Secretary 1 Topics Introduction to ISO TC 215, Health Informatics Definitions Structure Membership
Security & Trust in the Cloud
Security & Trust in the Cloud Ray Trygstad Director of Information Technology, IIT School of Applied Technology Associate Director, Information Technology & Management Degree Programs Cloud Computing Primer
WHAT DOES IT SERVICE MANAGEMENT LOOK LIKE IN THE CLOUD? An ITIL based approach
WHAT DOES IT SERVICE MANAGEMENT LOOK LIKE IN THE CLOUD? An ITIL based approach Marc Jansen Computer Science Institute University of Applied Sciences Ruhr West Tannenstr. 43, 46240 Bottrop Germany [email protected]
Cloud Computing A NIST Perspective and Beyond. Robert Bohn, PhD Advanced Network Technologies Division
Cloud Computing A NIST Perspective and Beyond Robert Bohn, PhD Advanced Network Technologies Division CASC Fall Meeting 2014 17 September 2014 Federal IT Strategies 2 The NIST Cloud Computing Program Goal
TECHNOLOGY GUIDE THREE. Emerging Types of Enterprise Computing
TECHNOLOGY GUIDE THREE Emerging Types of Enterprise Computing TECHNOLOGY GU IDE OUTLINE TG3.1 Introduction TG3.2 Server Farms TG3.3 Virtualization TG3.4 Grid Computing TG3.5 Utility Computing TG3.6 Cloud
OFFICE OF AUDITS & ADVISORY SERVICES CLOUD COMPUTING AUDIT FINAL REPORT
County of San Diego Auditor and Controller OFFICE OF AUDITS & ADVISORY SERVICES CLOUD COMPUTING AUDIT FINAL REPORT Chief of Audits: Juan R. Perez Audit Manager: Lynne Prizzia, CISA, CRISC Senior Auditor:
A Gentle Introduction to Cloud Computing
A Gentle Introduction to Cloud Computing Source: Wikipedia Platform Computing, Inc. Platform Clusters, Grids, Clouds, Whatever Computing The leader in managing large scale shared environments o 18 years
Secure Cloud Computing through IT Auditing
Secure Cloud Computing through IT Auditing 75 Navita Agarwal Department of CSIT Moradabad Institute of Technology, Moradabad, U.P., INDIA Email: [email protected] ABSTRACT In this paper we discuss the
Cloud Security Strategies. Fabio Gianotti, Head of Cyber Security and Enterprise Security Systems
Cloud Security Strategies Fabio Gianotti, Head of Cyber Security and Enterprise Security Systems London, 14 October 2015 UNICREDIT AT A GLANCE Employees: more than 146.600 Branches: 8.403 Banking operations
BUSINESS MANAGEMENT SUPPORT
BUSINESS MANAGEMENT SUPPORT Business disadvantages using cloud computing? Author: Maikel Mardjan [email protected] 2010 BM-Support.org Foundation. All rights reserved. EXECUTIVE SUMMARY Cloud computing
Cloud Computing and Standards
Cloud Computing and Standards Heather Kreger CTO International Standards, IBM [email protected] 2012 IBM Corporation Technology will play the key role in success Speed Value 90% 1 view cloud as critical
Table of Contents. Abstract... Error! Bookmark not defined. Chapter 1... Error! Bookmark not defined. 1. Introduction... Error! Bookmark not defined.
Table of Contents Abstract... Error! Bookmark not defined. Chapter 1... Error! Bookmark not defined. 1. Introduction... Error! Bookmark not defined. 1.1 Cloud Computing Development... Error! Bookmark not
Cloud Services Overview
Cloud Services Overview John Hankins Global Offering Executive Ricoh Production Print Solutions May 23, 2012 Cloud Services Agenda Definitions Types of Clouds The Role of Virtualization Cloud Architecture
[email protected] [email protected]
1 The following is merely a collection of notes taken during works, study and just-for-fun activities No copyright infringements intended: all sources are duly listed at the end of the document This work
Auditing Cloud Computing and Outsourced Operations
Session 136 Auditing Cloud Computing and Outsourced Operations Monday, May 7, 2012 3:30 PM 5:00 PM Mike Schiller Director of Sales & Marketing IT, Texas Instruments Co Author, IT Auditing: Using Controls
Perspectives on Cloud Computing and Standards. Peter Mell, Tim Grance NIST, Information Technology Laboratory
Perspectives on Cloud Computing and Standards Peter Mell, Tim Grance NIST, Information Technology Laboratory Caveats and Disclaimers This presentation provides education on cloud technology and its benefits
Standard Big Data Architecture and Infrastructure
Standard Big Data Architecture and Infrastructure Wo Chang Digital Data Advisor Information Technology Laboratory (ITL) National Institute of Standards and Technology (NIST) [email protected] May 20, 2016
Cloud Computing. Course: Designing and Implementing Service Oriented Business Processes
Cloud Computing Supplementary slides Course: Designing and Implementing Service Oriented Business Processes 1 Introduction Cloud computing represents a new way, in some cases a more cost effective way,
2011 Morrison & Foerster LLP All Rights Reserved mofo.com. Risk, Governance and Negotiation in the Cloud: Capture Benefits and Reduce Risks
2011 Morrison & Foerster LLP All Rights Reserved mofo.com Risk, Governance and Negotiation in the Cloud: Capture Benefits and Reduce Risks 14 September 2011 Presenters Alistair Maughan Morrison & Foerster
The InterNational Committee for Information Technology Standards INCITS Big Data
The InterNational Committee for Information Technology Standards INCITS Big Data Keith W. Hare JCC Consulting, Inc. April 2, 2015 Who am I? Senior Consultant with JCC Consulting, Inc. since 1985 High performance
Architecting the Cloud
Architecting the Cloud Sumanth Tarigopula Director, India Center, Best Shore Applications Services 2011Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without
Cloud Computing: Contracting and Compliance Issues for In-House Counsel
International In-house Counsel Journal Vol. 6, No. 23, Spring 2013, 1 Cloud Computing: Contracting and Compliance Issues for In-House Counsel SHAHAB AHMED Director Legal and Corporate Affairs, Microsoft,
Cloud Computing--Efficiency and Security
Cloud Computing--Efficiency and Security Mick Atton, VP & Chief Architect Thomson Reuters--Legal July 22, 2013 Thomson Reuters Thomson Reuters is the leading source of intelligent information for the world's
Healthcare Enterprise View of Cloud What is Cloud Additional Needs Cloud Models Cloud Economics 101 Stack Decision Framework
Cloud 101 General Overview of Cloud Services January 21, 2015 Agenda Healthcare Enterprise View of Cloud What is Cloud Additional Needs Cloud Models Cloud Economics 101 Stack Decision Framework 2. 2014
Validation of a Cloud-Based ERP system, in practice. Regulatory Affairs Conference Raleigh. 8Th September 2014
Validation of a Cloud-Based ERP system, in practice. Regulatory Affairs Conference Raleigh. 8Th September What is the The Cloud Some Definitions The NIST Definition of Cloud computing Cloud computing is