Cloud Security Benchmark Webinar. January 7, :00 AM ET
|
|
|
- Emory Perry
- 8 years ago
- Views:
Transcription
1 Cloud Security Benchmark Webinar Top 10 Cloud Service Providers: Q January 7, :00 AM ET
2 Disclaimer NO WARRANTY. CloudeAssurance makes this presentahon available AS- IS, and makes no warranty as to its accuracy or use. The informahon contained in this presentahon may include inaccuracies or typographical errors, and may not reflect the most current developments. CloudeAssurance does not represent, warrant or guarantee that it is complete, accurate, or up- to- date, nor does CloudeAssurance offer any cerhficahon or guarantee with respect to any opinions expressed herein or any references provided. Changing circumstances may change the accuracy of the content herein. Opinions presented in this presentahon reflect judgment at the Hme of publicahon and are subject to change. Any use of the informahon contained in this presentahon is at the risk of the user. CloudeAssurance assumes no responsibility for errors, omissions, or damages resulhng from the use of or reliance on the informahon herein. CloudeAssurance reserves the right to make changes at any Hme without prior nohce. 2
3 Session Agenda The Need Study Goals and A Brief History Study Methodology CloudeAssurance Scoring Algorithm Study Scoring Guidelines Q Results and Changes Q Top 10 Control Gaps Benefits of a CloudeAssurance Score CloudeAssurance What We Do Cloud Assurance Assessor Program (CAAP) ValidaHon Process Cloud and Cybersecurity AlertApp! Mobile ApplicaHon InteracHve Poll and Results 3
4 Speakers Taiye Lambo Founder & CTO - CloudeAssurance Jordan Flynn Lead Cloud Security Analyst and Researcher - CloudeAssurance 4
5 The Need Security is the Number 1 barrier to cloud adop:on. Massive Apple icloud Nude Photo Leak, Celebrities Exposed 5
6 Study Goals TRANSPARENCY METHODOLOGY OBJECTIVITY OBSERVE RESOURCE CATALYST CONTINUOUS IMPROVEMENT 6
7 A Brief History IniHal research began in September 2012 and compiled publicly available informahon for approximately 20 Cloud Service Providers (CSPs). First Report published on January 3 rd, 2013 covered Top 10 CSPs for Q CSPs assessed for Q1 2013, 32 for Q2 2013, 37 for Q3 2013, 44 for Q4 2013, 52 for Q1 2014, 66 for Q2 2014, 76 for Q and 87 for Q (same CSPs + new entries each quarter). Study split into two separate documents, an ExecuHve Summary with results and Appendix A- E discussing methodology, scoring guidelines and various terms and definihons. Updated quarterly and changes achvely tracked. 7
8 Study Methodology Assessments created within CloudeAssurance plaiorm using publicly available informahon for each CSP. Leveraged CSA GRC stack as the standard which assessments were performed against (CAIQ + CCM). UHlized CMMI Maturity Model with objechvity established using ISO cerhficahon as benchmark and evidence of process maturity. Assessments scored in CloudeAssurance plaiorm using proprietary scoring algorithm (score is similar in theory to a credit score). 8
9 CloudeAssurance Scoring Algorithm 9
10 Study Scoring Guidelines Study limits score to a max of
11 Q Study Results 11
12 12
13 Q Study Changes 14% increase in sample size from Q to Q (from 76 to 87 CSPs). Despite increase in sample size and CSPs with ISO cerhficahon, no change in Top 10 list from Q3 to Q New World TelecommunicaHons Limited from 569 (Q3) to 566 (Q4). No change as result of change. Top 10 control gaps changed with NWT upgrade to CAIQ v3.0.1 from v1.1. RI- 01 Risk Management Program moved from #7 to #10. 13
14 Q Top 10 Control Gaps #1 #2 #3 #4 #5 #6 #7 #8 #9 #10 14
15 Benefits of a CloudeAssurance Score Valuable asset that can be effechvely uhlized by a CSP, cloud customer, cloud auditor, cloud broker and cyber liability insurance underwriters. Regardless of the score, it remains an essenhal benchmark due to revelahon of overall cloud security posture and possible exposure/control weakness. Highlights areas in cloud environment that may lead to a breach and ensures gap idenhficahon and remediahon. PotenHal to save millions of dollars in losses, remediahon costs, and generate addihonal revenue by displaying validahon seal as market differenhator. 15
16 CloudeAssurance What We Do 16
17 Cloud Assurance Assessor Program (CAAP) Valida:on Process INDEPENDANT Cloud Process = validahon of cloud security / assurance. ValidaHon process (Step 2) leverages cerhficahons and evidence of process maturity like ISO 27001, PCI- DSS, FISMA, FedRAMP and SOC 2/SOC 3. 17
18 Cloud and Cybersecurity Cloud and Cybersecurity are closely intertwined. ConversaHons about Cybersecurity inevitably lead to conversahons about Cloud security. Cybersecurity liability insurance is becoming more crihcal as businesses adopt 3 rd party cloud. CloudeAssurance fills a blind spot in Cyber liability insurance through this cloud security benchmark study. Validated scores provides ongoing risk mihgahon and protechon. 18
19 AlertApp! Mobile Applica:on Consumer Assurance Powered By CloudeAssurance Launched in August 2014 Free download mobile app from app stores with 30 day free trial $0.99 per user for annual subscrip:on (Android) $1.99 (ios) 19
20 AlertApp! Mobile Applica:on According to a recent industry study, cloud and social media users had the highest incidence of fraud. Target; Facebook (1.2 billion), Google+ (540 million), LinkedIn (300 million), Twi\er (274 million). 20
21 Interac:ve Poll How many cloud services are you currently using? A. None B. 1 5 C D. Unknown How are you currently assessing your cloud security risks? A. Require independent cerhficahon (ISO 27001, SSAE16, PCI- DSS, etc.) B. Perform onsite assessments and validahon C. Send out vendor risk assessment queshonnaires D. Unknown Do you currently uhlize an automated assessment, rahng, trending and benchmarking sosware plaiorm to assess your cloud security risks? A. Yes. B. No. C. Unknown. Do you currently receive real Hme alerts containing perhnent informahon, related to the safety and security of your cloud service? A. Yes. B. No. C. Unknown. 21
22 Interac:ve Poll Results 22
23 For a Personal Demo of the CloudeAssurance Pla_orm or AlertApp! Mobile Applica:on Please Contact Us: Jordan Flynn Lead Cloud Security Analyst CloudeAssurance JFlynn@eFortresses.com Phone: (678) Sign up TODAY for a FREE 30-Day trial at and receive a complimentary copy of our study when you register. 23
Cloud Security Benchmark: Top 10 Cloud Service Providers Executive Summary January 5, 2015
Cloud Security Benchmark: Top 10 Cloud Service Providers Executive Summary January 5, 2015 2015 CloudeAssurance Page 1 Table of Contents Copyright and Disclaimer... 3 Results: Top 10 Cloud Service Providers
Cloud Security Benchmark: Top 10 Cloud Service Providers Appendix A E January 5, 2015
Cloud Security Benchmark: Top 10 Cloud Service Providers Appendix A E January 5, 2015 2015 CloudeAssurance Page 1 Table of Contents Copyright and Disclaimer... 3 Appendix A: Introduction... 4 Appendix
Building an Effective
Building an Effective Cloud Security Program Becky Swain Co-Founder/Chair, CSA CCM Board Member, CSA Silicon Valley Chapter Partner, EKKO Consulting Marlin Pohlman Co-Chair, CSA CCM Co-Chair/Founder, CSA
IT Cloud / Data Security Vendor Risk Management Associated with Data Security. September 9, 2014
IT Cloud / Data Security Vendor Risk Management Associated with Data Security September 9, 2014 Speakers Brian Thomas, CISA, CISSP In charge of Weaver s IT Advisory Services, broad focus on IT risk, security
IIA Conference. September 18, 2015. Paige Needling Director, Global Information Security Recall, Inc.
IIA Conference September 18, 2015 Paige Needling Director, Global Information Security Recall, Inc. IT SECURITY UMBRELLA Compliance for IT Data Privacy Protection Privacy Risk Assessment Vulnerability
DON T BE A VICTIM! IS YOUR INVESTMENT PROGRAM PROTECTED FROM CYBERSECURITY THREATS?
HEALTH WEALTH CAREER DON T BE A VICTIM! IS YOUR INVESTMENT PROGRAM PROTECTED FROM CYBERSECURITY THREATS? Gregg Sommer, CAIA Head of Operational Risk Assessments St. Louis MERCER 2015 0 CYBERSECURITY BREACHES
Dodging Breaches from Dodgy Vendors: Tackling Vendor Risk Management in Healthcare
Dodging Breaches from Dodgy Vendors: Tackling Vendor Risk Management in Healthcare Strengthening Cybersecurity Defenders #ISC2Congress Healthcare and Security "Information Security is simply a personal
TOOLS and BEST PRACTICES
TOOLS and BEST PRACTICES Daniele Catteddu Managing Director EMEA, Cloud Security Alliance ABOUT THE CLOUD SECURITY ALLIANCE To promote the use of best practices for providing security assurance within
Cloud Security Panel: Real World GRC Experiences. ISACA Atlanta s 2013 Annual Geek Week
Cloud Security Panel: Real World GRC Experiences ISACA Atlanta s 2013 Annual Geek Week Agenda Introductions Recap: Overview of Cloud Computing and Why Auditors Should Care Reference Materials Panel/Questions
Consolidated Audit Program (CAP) A multi-compliance approach
Consolidated Audit Program (CAP) A multi-compliance approach ISSA CONFERENCE Carlos Pelaez, Director, Coalfire May 14, 2015 About Coalfire We help our clients recognize and control cybersecurity risk,
Which is the Right EMM: Enterprise Mobility Management. Craig Cohen - President & CEO Adam Karneboge - CTO
Which is the Right EMM: Enterprise Mobility Management Craig Cohen - President & CEO Adam Karneboge - CTO Mobile is strategic for business Mobile provides a beeer experience Mobile changes the way people
PCI-DSS Penetration Testing
PCI-DSS Penetration Testing Adam Goslin, Co-Founder High Bit Security May 10, 2011 About High Bit Security High Bit helps companies obtain or maintain their PCI compliance (Level 1 through Level 4 compliance)
Cloud Security Certification
Cloud Security Certification January 21, 2015 1 Agenda 1. What problem are we solving? 2. Definitions (Attestation vs Certification) 3. Cloud Security Responsibilities and Risk Exposure 4. Who is responsible
10 Considerations for a Cloud Procurement. Anthony Kelly Erick Trombley David DeBrandt Carina Veksler January 2015
10 Considerations for a Cloud Procurement Anthony Kelly Erick Trombley David DeBrandt Carina Veksler January 2015 www.lbmctech.com info@lbmctech.com Purpose: Cloud computing provides public sector organizations
Wrapping Audit Arms around the Cloud Georgia 2013 Conference for College and University Auditors
1 Wrapping Audit Arms around the Cloud Georgia 2013 Conference for College and University Auditors Scott Woodison Executive Director, Compliance and Enterprise Risk Office of Internal Audit and Compliance
HITRUST CSF Assurance Program
HITRUST CSF Assurance Program Simplifying the information protection of healthcare data 1 May 2015 2015 HITRUST LLC, Frisco, TX. All Rights Reserved Table of Contents Background CSF Assurance Program Overview
DON T BE A VICTIM! IS YOUR ORGANIZATION PROTECTED FROM CYBERSECURITY THREATS?
HEALTH WEALTH CAREER DON T BE A VICTIM! IS YOUR ORGANIZATION PROTECTED FROM CYBERSECURITY THREATS? FREEMAN WOOD HEAD OF MERCER SENTINEL NORTH AMERICA GREGG SOMMER HEAD OF OPERATIONAL RISK ASSESSMENTS MERCER
Robert Brammer. Senior Advisor to the Internet2 CEO rfbtech@internet2.edu. Internet2 NET+ Security Assessment Forum. 8 April 2014
Robert Brammer Senior Advisor to the Internet2 CEO rfbtech@internet2.edu Internet2 NET+ Security Assessment Forum 8 April 2014 INTERNET2 NET+ Security Initiative Primary objective -- develop guidance to
State of Information Security
State of Information Security Second Annual Assessment Study 2013 Table of Contents: Synopsis and Methodology _ page 2 A Snapshot of Participants _ page 2 Survey Findings _ page 5 Final Thoughts _ page
AWS Worldwide Public Sector
15 Minute Introduction to AWS and Q&A April 2015 Mark Fox Sr. Manager DoD Sales I love/hate relationship with the term cloud Now the IT norm Commercial Cloud should not be scary nor considered less secure
Grid SM for E-Signature Winter 2014
Grid SM for E-Signature Winter 2014 E-Signature Products The following products are shown on the Grid for e-signature and have received a minimum of 10 reviews/ratings in data gathered by January 20, 2014:
Constant Contact. Responsyssys. VerticalResponse. Bronto. Satisfaction
Contenders Leaders sys Scale Campaign aign Monitor Niche High Performers Satisfaction Email Marketing Products Products shown on the Grid for Email Marketing have received a minimum of 10 reviews/ratings
With Eversync s cloud data tiering, the customer can tier data protection as follows:
APPLICATION NOTE: CLOUD DATA TIERING Eversync has developed a hybrid model for cloud-based data protection in which all of the elements of data protection are tiered between an on-premise appliance (software
Open Certification Framework. Vision Statement
Open Certification Framework Vision Statement Jim Reavis and Daniele Catteddu August 2012 BACKGROUND The Cloud Security Alliance has identified gaps within the IT ecosystem that are inhibiting market adoption
Protec'ng Data and Privacy in a World of Clouds and Third Par'es Vincent Campitelli
Protec'ng Data and Privacy in a World of Clouds and Third Par'es Vincent Campitelli Vice President, IT Risk Management McKesson Corpora-on What is Your Business Model? Economic Moats In business, I look
A Flexible and Comprehensive Approach to a Cloud Compliance Program
A Flexible and Comprehensive Approach to a Cloud Compliance Program Stuart Aston Microsoft UK Session ID: SPO-201 Session Classification: General Interest Compliance in the cloud Transparency Responsibility
Information Security Management System for Microsoft s Cloud Infrastructure
Information Security Management System for Microsoft s Cloud Infrastructure Online Services Security and Compliance Executive summary Contents Executive summary 1 Information Security Management System
WhitePaper. Private Cloud Computing Essentials
Private Cloud Computing Essentials The 2X Private Cloud Computing Essentials This white paper contains a brief guide to Private Cloud Computing. Contents Introduction.... 3 About Private Cloud Computing....
Protecting your brand in the cloud Transparency and trust through enhanced reporting
Protecting your brand in the cloud Transparency and trust through enhanced reporting Third-party Assurance November 2011 At a glance Cloud computing has unprecedented potential to deliver greater business
CA Service Desk Manager - Mobile Enabler 2.0
This Document is aimed at providing information about the (CA SDM) Mobile Enabler and mobile capabilities that is typically not available in the product documentation. This is a living document and will
Cloud Assessments. Federal Computer Security Managers Forum. John Connor, IT Security Specialist, OISM, NIST. Meeting.
Cloud Assessments SaaS Email Working Group John Connor, IT Security Specialist, OISM, NIST Meeting August, 2015 Background Photo - JILA strontium atomic clock (a joint institute of NIST and the University
Information Security ISO Standards. Feb 11, 2015. Glen Bruce Director, Enterprise Risk Security & Privacy
Information Security ISO Standards Feb 11, 2015 Glen Bruce Director, Enterprise Risk Security & Privacy Agenda 1. Introduction Information security risks and requirements 2. Information Security Management
STREAM Cyber Security
STREAM Cyber Security Management Software Governance, Risk Management & Compliance (GRC) Security Operations, Analytics & Reporting (SOAR) Fast, flexible, scalable, easy to use and affordable software
KLC Consulting, Inc. All Rights Reserved. 1 THIRD PARTY (VENDOR) SECURITY RISK MANAGEMENT
1 THIRD PARTY (VENDOR) SECURITY RISK MANAGEMENT About Kyle Lai 2 Kyle Lai, CIPP/G/US, CISSP, CISA, CSSLP, BSI Cert. ISO 27001 LA President of KLC Consulting, Inc. Over 20 years in IT and Security Security
Practical Vendor Management to Minimize Compliance Risks November 12, 2015
Practical Vendor Management to Minimize Compliance Risks November 12, 2015 v 1 Today s Speakers Ray Everett Principal Consultant & Director Product Management TRUSTe Charlie Miller SVP Shared Assessments
Managing the Business of IT in the Cloud Era. VMware vrealize Business
Managing the Business of IT in the Cloud Era VMware vrealize Business KEY HIGHLIGHTS VMware vrealize Business supports better business-it alignment by delivering transparency into the cost and quality
An Introduc+on to CloudPrime
TM An Introduc+on to CloudPrime Secure messaging pla/orm to protect pa2ent privacy and uphold HIPAA/HITECH regula2on Mari Tangredi, CloudPrime 1 CloudPrime Company Overview! Headquartered in San Francisco,
Risky Business. Is Your Cybersecurity in Cruise Control? ISACA Austin Chapter Meeting May 5, 2015
Risky Business Is Your Cybersecurity in Cruise Control? ISACA Austin Chapter Meeting May 5, 2015 What We ll Cover About Me Background The threat Risks to your organization What your organization can/should
9/14/2015. Before we begin. Learning Objectives. Kevin Secrest IT Audit Manager, University of Pennsylvania
Evaluating and Managing Third Party IT Service Providers Are You Really Getting The Assurance You Need To Mitigate Information Security and Privacy Risks? Kevin Secrest IT Audit Manager, University of
Securing Amazon It s a Jungle Out There
ANALYST BRIEF Securing Amazon It s a Jungle Out There PART 1 CONTROLS AND OPTIONS OFFERED BY AMAZON Author Rob Ayoub Overview Infrastructure as a service (IaaS) is a foundational component of modern cloud
VENDOR MANAGEMENT. General Overview
VENDOR MANAGEMENT General Overview With many organizations outsourcing services to other third-party entities, the issue of vendor management has become a noted topic in today s business world. Vendor
Cyber Governance Preparing for the Inevitable Perimeter Breach
SAP Brief SAP Extensions SAP Regulation Management by Greenlight, Cyber Governance Edition Objectives Cyber Governance Preparing for the Inevitable Perimeter Breach Augment your preventive cybersecurity
Grid SM for Help Desk Spring 2014. Market Presence. Satisfaction. Zendesk Desk.com. Freshdesk. Parature. Kayako IssueTrak. TeamSupport.
Contenders Leaders Market Presence Parature Zendesk Desk.com Freshdesk Kayako IssueTrak TeamSupport HappyFox Niche High Performers Satisfaction Help Desk Products Products shown on the Grid for Help Desk
Moving your enterprise systems to the cloud? What do you need to know to manage the risks? Jamie Levitt, Director
www.pwc.com Moving your enterprise systems to the cloud? What do you need to know to manage the risks? November 2015 Jamie Levitt, Director Disclaimer Certain matters reviewed today may represent services
Logically Securing a Public Cloud Service
SESSION ID: CIN-W07 Logically Securing a Public Cloud Service Tim Mather CISO Cadence Design Systems @mather_tim Disclaimer: AWS (Amazon Web Services) is referenced in this presentation extensively, only
STATEMENT OF. Dr. David McClure Associate Administrator Office of Citizen Services and Innovative Technologies General Services Administration
STATEMENT OF Dr. David McClure Associate Administrator Office of Citizen Services and Innovative Technologies General Services Administration BEFORE THE HOUSE COMMITTEE ON HOMELAND SECURITY SUBCOMMITTEE
Final Review Workshop. CSC phase 2, WP 3
Final Review Workshop. CSC phase 2, WP 3 Bernd Becker, Emmanuel Darmois, Anders Kingstedt, Olivier Le Grand, Peter Schmi>ng, Wolfgang Ziegler Brussels, October 1 st, 2015 ETSI 2015. All rights reserved
Vendor Compliance Management Series: Performing an Effective Risk Assessment
Vendor Compliance Management Series: Performing an Effective Risk Assessment Legal Disclaimer This information is not intended to be legal advice and may not be used as legal advice. Legal advice must
CERTIFICATE MANAGEMENT SURVEY
CERTIFICATE MANAGEMENT SURVEY GLOBAL RESULTS 2013 CONTENTS 3 4 5 7 8 9 METHODOLOGY INTRODUCTION SSL CERTIFICATE MANAGEMENT IS COMPLEX STAKES HIGH WITH CERTIFICATE MANAGEMENT COMPANIES IN DENIAL ABOUT EXPIRED
Address C-level Cybersecurity issues to enable and secure Digital transformation
Home Overview Challenges Global Resource Growth Impacting Industries Address C-level Cybersecurity issues to enable and secure Digital transformation We support cybersecurity transformations with assessments,
Logging In: Auditing Cybersecurity in an Unsecure World
About This Course Logging In: Auditing Cybersecurity in an Unsecure World Course Description $5.4 million that s the average cost of a data breach to a U.S.-based company. It s no surprise, then, that
Cloud Security Alliance and Standards. Jim Reavis Executive Director March 2012
Cloud Security Alliance and Standards Jim Reavis Executive Director March 2012 About the CSA Global, not for profit, 501(c)6 organization Over 32,000 individual members, 120 corporate members, 60 chapters
CONTENT OUTLINE. Background... 3 Cloud Security... 3. Instance Isolation:... 4. SecureGRC Application Security... 5
Page 2 Disclaimer THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT ARE FURNISHED UNDER AND ARE SUBJECT TO THE TERMS OF THE LICENSE AGREEMENT OR NON-DISCLOSURE AGREEMENT. EXCEPT AS EXPRESSLY SET
Security, Compliance & Risk Management for Cloud Relationships. Adnan Dakhwe, MS, CISA, CRISC, CRMA Safeway Inc. In-Depth Seminars D32
Security, Compliance & Risk Management for Cloud Relationships Adnan Dakhwe, MS, CISA, CRISC, CRMA Safeway Inc. In-Depth Seminars D32 Introductions & Poll Organization is leveraging the Cloud? Organization
Rethinking IT and IT Security Strategies in an Era of Advanced Attacks, Cloud and Consumerization
Rethinking IT and IT Security Strategies in an Era of Advanced Attacks, Cloud and Consumerization Neil MacDonald VP and Gartner Fellow Gartner Information Security, Privacy and Risk Research Twitter @nmacdona
Securing business data. CNS White Paper. Cloud for Enterprise. Effective Management of Data Security
Securing business data CNS White Paper Cloud for Enterprise Effective Management of Data Security Jeff Finch, Head of Business Development, CNS Mosaic 2nd July 2015 Contents 1 Non-Disclosure Statement...
Need to reassure customers that your cloud services are secure? Inspire confidence with STAR Certification from BSI
Need to reassure customers that your cloud services are secure? Inspire confidence with STAR Certification from BSI What is STAR Certification? TM STAR Certification is a unique new certification which
Need to reassure customers that your cloud services are secure? Inspire confidence with STAR Certification from BSI
Need to reassure customers that your cloud services are secure? Inspire confidence with STAR Certification from BSI What is STAR Certification? TM STAR Certification differentiates you from your competition.
Quick Service Data for Quick Service Restaurants
Copyright 2015 Splunk Inc. Quick Service Data for Quick Service Restaurants Brandon Burk, Juan Gomez Sonic Drive- In Disclaimer During the course of this presentahon, we may make forward looking statements
How To Build Trust In The Cloud
Building Trust in Global Cloud Computing Systems Jim Reavis, CEO & Founder Cloud Security Alliance Global, not-for-profit organization Building security best practices for next generation IT Research and
SUPPLY CHAIN ASSURANCE FRAMEWORK: THE SUPPLY CHAIN STANDARDS TRANSLATOR
SUPPLY CHAIN ASSURANCE FRAMEWORK: THE SUPPLY CHAIN STANDARDS TRANSLATOR Michael de Crespigny, CEO Information Security Forum Session ID: GRC R02B Session Classification: General Interest KEY ISSUE Our
PCI Risks and Compliance Considerations
PCI Risks and Compliance Considerations July 21, 2015 Stephen Ramminger, Senior Business Operations Manager, ControlScan Jon Uyterlinde, Product Manager, Merchant Services, SVB Agenda 1 2 3 4 5 6 7 8 Introduction
Securing The Cloud. Foundational Best Practices For Securing Cloud Computing. Scott Clark. Insert presenter logo here on slide master
Securing The Cloud Foundational Best Practices For Securing Cloud Computing Scott Clark Agenda Introduction to Cloud Computing What is Different in the Cloud? CSA Guidance Additional Resources 2 What is
New Mobile App. Virtual Inspector revolutionizes vehicle inspections
New Mobile App Virtual Inspector revolutionizes vehicle inspections Vehicle inspections don t have to be timeconsuming and costly. New technologies and analytics are making them easy and inexpensive. Underwriters
The Next Generation Data Centers: SPECS and The 3 rd Platform.
The Next Generation Data Centers: SPECS and The 3 rd Platform. Dr. Silvio La Porta Senior Research Scientist EMC Research Europe Dr. Said Tabet Senior Technology Strategist Corporate CTO Office, EMC 1
MaaSter Microsoft Ecosystem Management with MaaS360. Chuck Brown Jimmy Tsang www.maas360.com
MaaSter Microsoft Ecosystem Management with MaaS360 Chuck Brown Jimmy Tsang www.maas360.com Introductions Chuck Brown Product Management IBM MaaS360 Jimmy Tsang Director of Product Marketing IBM MaaS360
Security Breach: 10 Industries Impacted
WWW.IBISWORLD.COM April 2013 1 April 2013 Security Breach: 10 Industries Impacted By David Yang Digital information and web-based business are driving demand for increased cyber security. IBISWorld identifies
8 Key Requirements of an IT Governance, Risk and Compliance Solution
8 Key Requirements of an IT Governance, Risk and Compliance Solution White Paper: IT Compliance 8 Key Requirements of an IT Governance, Risk and Compliance Solution Contents Introduction............................................................................................
SOC on Amazon Web Services (AWS) What You Need To Know Understanding the regulatory roadmap for SOC on AWS
SOC on Amazon Web Services (AWS) What You Need To Know Understanding the regulatory roadmap for SOC on AWS Jeff Cook November 2015 Summary Service Organization Control (SOC) reports (formerly SAS 70 or
2014 SocialCPAs Survey. How Accounting Firms Use Social Media Today. Barry MacQuarrie Sarah Johnson Dobek
2014 SocialCPAs Survey How Accounting Firms Use Social Media Today Barry MacQuarrie Sarah Johnson Dobek EXECUTIVE SUMMARY SocialCPAs collaborated with Inovautus Consulting and the Association for Accounting
Hans Bos Microsoft Nederland. hans.bos@microsoft.com
Hans Bos Microsoft Nederland Email: Twitter: hans.bos@microsoft.com @hansbos Microsoft s Cloud Environment Consumer and Small Business Services Software as a Service (SaaS) Enterprise Services Third-party
Securing the Microsoft Cloud
Securing the Microsoft Cloud Page 1 Securing the Microsoft Cloud Microsoft recognizes that trust is necessary for organizations and customers to fully embrace and benefit from cloud services. We are committed
CORL Dodging Breaches from Dodgy Vendors
CORL Dodging Breaches from Dodgy Vendors Tackling Vendor Security Risk Management in Healthcare Introductions Cliff Baker 20 Years of Healthcare Security experience PricewaterhouseCoopers, HITRUST, Meditology
GRC Stack Research Sponsorship
GRC Stack Research Sponsorship Overview Achieving Governance, Risk Management and Compliance (GRC) goals requires appropriate assessment criteria, relevant control objectives and timely access to necessary
{Moving to the cloud}
{Moving to the cloud} plantemoran.com doesn t mean outsourcing your security controls. Cloud computing is a strategic move. Its impact will have a ripple effect throughout an organization. You don t have
Compliance in the Age of Cloud
ANALYST BRIEF Compliance in the Age of Cloud THE GOOD, THE BAD, AND THE UGLY Author Andrew Braunberg Overview Cloud is a nebulous term, but fundamentally, the term denotes that IT resources are delivered
RMS(one) Summary and Points for Discussion
RMS(one) Summary and Points for Discussion Prepared by Guy Carpenter 1 April 10, 2014 1. Background: The new RMS(one) platform debuts April 15 th 2014 with actual production starting in October 2014. It
5 things to consider when designing a security strategy for the Cloud William Crank, MEDHOST, Blake Sutherland, VP, Enterprise Business, Trend Micro
5 things to consider when designing a security strategy for the Cloud William Crank, MEDHOST, Blake Sutherland, VP, Enterprise Business, Trend Micro May 2015 Speakers Blake Sutherland, VP Enterprise Business,
Cloud Computing Risk management @HKQAA Symposium Antony Ma Chairman, CSA-HK&M Chapter Global, not-for-profit organization Over 40,000 individual members, around 200 corporate and affiliate members, 64
www.pwc.com Third Party Risk Management 12 April 2012
www.pwc.com Third Party Risk Management 12 April 2012 Agenda 1. Introductions 2. Drivers of Increased Focus on Third Parties 3. Governance 4. Third Party Risks and Scope 5. Third Party Risk Profiling 6.
Cloud Audit and Cloud Trust Protocol. By David Lingenfelter 2011
Cloud Audit and Cloud Trust Protocol By David Lingenfelter 2011 Background > MaaS360 SaaS Cloud Model > Mobile Device Management > FISMA Moderate Certified > SAS-70/SOC-2 Cloud Adoption Obstacles Planning
Hot Topics in IT. CUAV Conference May 2012
Hot Topics in IT CUAV Conference May 2012 Baker Tilly Virchow Krause, LLP Baker Tilly refers to Baker Tilly Virchow Krause, LLP, an independently owned and managed member of Baker Tilly International.
Dell and Red Hat Collaborate to Deliver OpenStack for Enterprise
Dell and Red Hat Collaborate to Deliver OpenStack for Enterprise Dell pragmatically invests in partners to fill-in most cloud strategy gaps. Highlights of the Dell Red Hat Joint Announcement on 12/12/2013
SAP Business One mobile app for Android Version 1.0.x November 2013
SAP Business One mobile app for Android Version 1.0.x November 2013 Legal disclaimer The information in this presentation is confidential and proprietary to SAP and may not be disclosed without the permission
Cybersecurity Practices of Ohio Investment Advisers; A Summary of Survey Responses
Cybersecurity Practices of Ohio Investment Advisers; A Summary of Survey Responses October 2014 A Pilot Survey to Compile Cybersecurity Information In July 2014, the Ohio Division of Securities participated
How to Lead the People in a Program Based Environment
SESSION ID: GRC-W01 Balancing Compliance and Operational Security Demands Steve Winterfeld Bank Information Security Officer CISSP, PCIP What is more important? Compliance with laws / regulations Following
Collaboration for Big Data, Business Intelligence, and Mobile Initiatives
Collaboration for Big Data, Business Intelligence, and Mobile Initiatives Valeh Nazemoff, Acolyst Sr. Vice President Session Code BI01 Speaker Bio Specializing in enterprise business performance management
Demystifying cloud computing for SMEs
Demystifying cloud computing for SMEs Tools & Guides for SMEs moving to the Cloud Silvana Muscella, Founder and CEO Trust-IT Services Ltd s.muscella@trust-itservices.com @silvanamuscella www.cloudwatchhub.eu
Increase success using business intelligence solutions
white paper Business Intelligence Increase success using business intelligence solutions Business intelligence (BI) is playing an increasingly important role in helping large insurance carriers and insurers
Close-Up on Cloud Security Audit
Close-Up on Cloud Security Audit Douglas W. Barbin 2014 BrightLine CPAs & Associates, Inc. All Rights Reserved 1 About Me Partner at BrightLine 17 years experience in security, assessments, forensics,
The Cloud Security Alliance
The Cloud Security Alliance Daniele Catteddu, Managing Director EMEA & OCF-STAR Program Director Cloud Security Alliance ABOUT THE CLOUD SECURITY ALLIANCE To promote the use of best practices for providing
Cybersecurity Strategic Consulting
Home Overview Challenges Global Resource Growth Impacting Industries Why Capgemini Capgemini & Sogeti Cybersecurity Strategic Consulting Enabling business ambitions, resilience and cost efficiency with
Games Cloud Vendors Play
International Municipal Lawyers Association, 2012 Mid Year Seminar, Washington, DC. Ethics Section Workshop 10:30 am 11:30 am, Sunday, April 22, 2012 Games Cloud Vendors Play From City of Los Angeles Agreement
SURVEY RESULTS CYBER-SECURITY PRACTICES OF MINNESOTA REGISTERD INVESTMENT ADVISERS
SURVEY RESULTS CYBER-SECURITY PRACTICES OF MINNESOTA REGISTERD INVESTMENT ADVISERS Minnesota Department of Commerce July 2014 GENERIC FIRM INFORMATION Has your firm been the subject of a cyber-security
Securing the Microsoft Cloud
Securing the Microsoft Cloud Securing the Microsoft Cloud Page 1 Securing the Microsoft Cloud Microsoft recognizes that trust is necessary for organizations and consumers to fully embrace and benefit from
Cloud Security. DLT Solutions LLC June 2011. #DLTCloud
Cloud Security DLT Solutions LLC June 2011 Contact Information DLT Cloud Advisory Group 1-855-CLOUD01 (256-8301) cloud@dlt.com www.dlt.com/cloud Your Hosts Van Ristau Chief Technology Officer, DLT Solutions
Agenda 3/7/2011. 2011 ERM Symposium March 14 16, 2011. Continuous Controls Monitoring. I. Changes In Corporate Environment
2011 ERM Symposium March 14 16, 2011 Continuous Controls Monitoring Futuristic Approach to Enterprise Risk Management Swissotel, Chicago, Chicago IL. Speakers: Syed M. Ali Alan Ash Sr. Audit Manager, Director
Automating the Audit July 2010
Jamie Williams PwC, Systems & Process Assurance PwC Agenda 1. Technology and PwC State of Internal Audit Survey 2. Technology/Data Analytics 3. Continuous Monitoring 4. Common Software 5. ACL Scripts 6.
Credit Cards and Oracle: How to Comply with PCI DSS. Stephen Kost Integrigy Corporation Session #600
Credit Cards and Oracle: How to Comply with PCI DSS Stephen Kost Integrigy Corporation Session #600 Background Speaker Stephen Kost CTO and Founder 16 years working with Oracle 12 years focused on Oracle
BUSINESS STRUCTURES: Using Corp., LLC, or General Partnership to Gain Credibility
BUSINESS STRUCTURES: Using Corp., LLC, or General Partnership to Gain Credibility If you have ever tried to obtain a credit card, a mortgage loan to buy a home, or a car loan, then you know how important