What Is The Cloud And How Can Your Agency Use It Tom Konop Mark Piontek Cathleen Christensen
Video Computer Basics: What is the Cloud
What is Cloud Computing
Cloud Computing Basics The use of the word cloud tries to describe two essential concepts Abstraction Virtualization
Abstraction System details hidden from users Physical systems aren t specified Administration is outsourced to others Data is stored in unknown locations Access by users is ubiquitous (everywhere)
Virtualization Resources are pooled and shared Storage provided from centralized infrastructure Pay-as-you-use model Allows multiple tenants Scalable & agile
Types of Clouds Private, Public, Community, Hybrid Private Private Private Private Cloud Infrastructure operated solely for a single organization
Types of Clouds Private, Public, Community, Hybrid Public Public Cloud Applications, Storage and other resources are made available to the general public by a service provider.
Types of Clouds Private, Public, Community, Hybrid Community Community Cloud Shares information between several organizations from a specific community with common concerns.
Types of Clouds Private, Public, Community, Hybrid Public Private Hybrid Cloud Composition of two or more clouds (private, community or public) that remain unique entities but are bound together.
Structure of Cloud Offerings as a Service many options and opportunities DaaS Data as a Service STaaS Storage as a Service SaaS Software as a Service NaaS Network as a Service PaaS Platform as a Service IaaS Infrastructure as a Service SECaaS Security as a Service DBaaS Database as a Service TEaaS Test Environment as a Service
Structure of Cloud Offerings as a Service many options and opportunities XaaS Anything as a Service
Cloud Computing Features Elasticity The ability to right-size resources as required by your application.
Cloud Computing Features Scalability Access to unlimited computer resources as needed.
Cloud Computing Features Utility Model A pay-as-you-use model matches resources to need on a continuous basis which eliminates and shifts risk from the client to the service provider.
Cloud Computing Features Low Barrier to Entry Gaining access to systems only requires a small investment.
Cloud Computing Advantages Beyond the inherit cloud computing features of elasticity, scalability, and cost other advantages include
Cloud Computing Advantages Redundancy Depending on your cloud service provider your services are replicated across multiple data centers.
Cloud Computing Advantages Convenience Access to systems and/or data anywhere you can connect to the internet.
Cloud Computing Advantages Security Most cloud service providers use industrial level security software and practices.
Cloud Computing Advantages IT Infrastructure Management of on-site hardware and software is minimized reducing need for specialized IT expertise.
Cloud Computing Disadvantages Security Cloud service providers are bigger targets for malicious groups.
Cloud Computing Disadvantages Internet Access Cloud computing makes your business dependent on the reliability of your internet connection.
Cloud Computing Disadvantages Cost Understand the cost of both models (Cloud vs. In-house).
Cloud Computing Disadvantages Inflexibility Are you locking yourself into proprietary applications or formats. If so understand your requirements.
Cloud Computing Disadvantages Support In most cases you are adding another layer between your infrastructure and application.
Cloud layers Cloud Client Web Browser, Mobile App, Thin Client SaaS Application PaaS Platform IaaS Infrastructure With SaaS you don t buy the software. You buy the use of the service. Google Apps or Netflix Operating systems and databases are predefined. Typically tool set for development. Windows Azure to develop mobile apps, social apps Hardware only. You install operating system, databases.
E & O and Security In The Cloud Mary Hauri Greg Kirsch Barb Van Herwaarden
Let s Look at 5 Key Areas For The Protection Of Your Business Regulatory compliance Data location and Data segregation Disaster Recovery User access control Security Sources: InfoWorld, Cisco,
Regulatory compliance Customers ultimately responsible for security and integrity of their own data Traditional service providers are subjected to external audits and security certifications Choose reputable cloud computing providers
Regulatory compliance Consider Cyber Liability Policies Ponemon Institute estimates the cost for a breach up to $216 per customer.
Data location Do you know where your data is? Questions to ask your providers: Will they commit to specific jurisdictions for storage & processing? Make a contractual commitment to obey privacy requirements?
Data segregation Shared environment with other customers Encryption is effective but isn't a cure-all
Disaster Recovery Understand what happens to your data What is your cloud provider s disaster plan?
User access control Your data is accessible by cloud provider s employees Who s managing your data?
Cloud Computing Security 10 Tips For Keeping Your Cloud Data Safe 1. Password First. 2. Security Question, Check. 3. Try Out Encryption. 4. Manage Passwords. 5. Two Factor Authentication.
Cloud Computing Security 10 Tips For Keeping Your Cloud Data Safe 6. Don t Think, Just Backup. 7. Delete When Done. 8. Be Careful Where You Log In. 9. Use Anti-Virus and Anti-Spy Software. 10. Keep Your Mouth Shut. Source: Cloud Tweaks http://www.cloudtweaks.com/2012/10/cloud-computing-security-10-tips-forkeeping-your-cloud-data-safe/
Security Internal clouds are not inherently secure Companies lack security visibility and risk awareness Sensitive information needs safer storage. Apps aren t secure Authentication and authorization must be more robust. Still need to protect the devices accessing the cloud, e.g., desktops and mobile devices.
Security areas you need to be aware of with your Cloud Provider Physical Security Insider Abuse Data Encryption Third party relationships Network Security Virtualization Security Access Controls Application Security
Final thoughts Do Your Homework!! Understand Service Level Agreements (SLAs) Ask the right questions
Security
QUESTIONS???