Welcome!

@CloudExpo Authors: Yeshim Deniz, Pat Romanski, Elizabeth White, Zakia Bouachraoui, Liz McMillan

Related Topics: @CloudExpo, Microservices Expo

@CloudExpo: Blog Feed Post

What Are the Cloud Computing Challenges and Risks?

Part 1: Cloud Security Advantages!

Perhaps by now, after you have read the:

- Cloud Computing, in Plain English, to IT Directors, VP's, CIO's and CEO's
- Why Should IT Directors, VP's, CIO's and CEO's Care About Cloud Computing?
- Cloud Equals SaaS, Grid, Utility Computing, Hosting...?
- What Exactly is Cloud Computing?
- Why Large Public and Private Sector Organizations (not just SMB's) Are Seriously Considering Cloud Computing?


you may be asking the following questions, among many others:

Where is my data?
• How does my data securely enter and exit the cloud?
How is my data protected in transit?
Who has access to my data?
• Who is accountable if something goes wrong?
• What’s the disaster recovery plan, including response to a pandemic?
• How to comply with Export and Privacy laws?
• Will my data disappear when my online storage site shuts down?

What happens if my cloud provider disappears?
How is the environment monitored for OS / DB / application failures and how are we notified?
How is the data protected and secured from theft and damage? Encrypted? and how are the
encryption keys rotated and managed?
• How easy is it to integrate with existing in-house IT?
• Does the system have enough customization capabilities to suit my needs?
Will on-demand cost more? What is the sweet-spot to consider when weighing Cloud vs inhouse?
• How difficult is it to migrate back to an in-house system? Is it even possible?
• Are there any regulatory requirements on my business that can prevent me from using the cloud?

You are not alone, as you can see by the results of the following poll:



Permission to use image provided by Frank Gens - http://blogs.idc.com/ie/


And let's start with probably the biggest one:

Security Issues in Cloud Computing Environments (Advantages and Challenges)

Research showed that the most common concern about implementing Cloud programs was security and privacy, a finding supported by an IDC study of 244 CIO's on Cloud Computing where 75% of respondents listed Security as their number one concern.

"With services such as Google's SaaS, data loss is less likely because the information is accessible from anywhere and anytime without saving it to an easily lost or stolen USB stick or CD" (Eran Feigenbaum, director of security for Google Apps)

Most organizations pay extraordinary attention and devote considerable resources to IT security, but that doesn't mean that their data is any more or less secure. The reality is that many attacks come from a lack of timely software update management and server misconfiguration. And the likelihood of such issues occurring (at least as frequently) is greatly reduced in the Cloud, where security-patching process is more streamlined than in a typical enterprise: vendors, servers and software architecture tend to be more homogeneous, and due to economies of scale, there is staff dedicated to security, ensuring application of the latest security patches.

In addition, the larger Cloud providers tend to have a better grasp of threats, because these people deal with security issues at more complex levels than your own IT team sees on a daily basis.

Let's look at some Cloud Security Advantages before looking to the Security Challenges:

Cloud Security Advantages

• Data fragmentation and dispersal are held by Unbiased Party (cloud vendor assertion); in fact,
shifting public data to an external cloud reduces the exposure of the internal sensitive data
Survey says that more than one-third of IT professionals abuse administrative passwords to access confidential data (in
http://www.internetnews.com/breakingnews/article.php/3824296)
• Cloud homogeneity makes security auditing/testing simpler
Dedicated Security Team
• Rapid Re-Constitution of Services
• Greater Investment in Security Infrastructure (Real-Time Detection of System Tampering; Low- Cost Disaster Recovery and Data Storage Solutions, Hypervisor Protection Against Network Attacks)
1 In 5 Companies Cutting IT Security Spending in 2009 (in
http://www.informationweek.com/news/storage/security/showArticle.jhtml?articleID=218100139&cid=RSSfeed_IWK_All )
• Simplification of Compliance Analysis
• On-Demand Security Controls


However, that doesn't mean you should blindly assume instant security when you opt for a services provider. Verify the Cloud provider procedures, even if that provider has security certifications.

So, in the next article we will look at some Cloud Security Challenges.
Thanks, and please let me know how can I help you.
Maria Spínola
http://www.twitter.com/MariaSpinola

P.S. Also see:
- Cloud Computing, in Plain English, to IT Directors, VP's, CIO's and CEO's
- Why Should IT Directors, VP's, CIO's and CEO's Care About Cloud Computing?
- Cloud Equals SaaS, Grid, Utility Computing, Hosting...?
- What Exactly is Cloud Computing?
- Why Large Public and Private Sector Organizations (not just SMB's) Are Seriously Considering Cloud Computing?

Read the original blog entry...

More Stories By Maria Spínola

Maria Spínola is a Researcher, White Paper Author and Copywriter, and Cloud Computing Evangelist and Advisor with more than 15 years experience in enterprise information technologies.

She holds a Software Engineering degree and a "Marketing and Innovation in Retail and Distribution" pos-graduation.

CloudEXPO Stories
Every organization is facing their own Digital Transformation as they attempt to stay ahead of the competition, or worse, just keep up. Each new opportunity, whether embracing machine learning, IoT, or a cloud migration, seems to bring new development, deployment, and management models. The results are more diverse and federated computing models than any time in our history.
On-premise or off, you have powerful tools available to maximize the value of your infrastructure and you demand more visibility and operational control. Fortunately, data center management tools keep a vigil on memory contestation, power, thermal consumption, server health, and utilization, allowing better control no matter your cloud's shape. In this session, learn how Intel software tools enable real-time monitoring and precise management to lower operational costs and optimize infrastructure for today even as you're forecasting for tomorrow.
"Calligo is a cloud service provider with data privacy at the heart of what we do. We are a typical Infrastructure as a Service cloud provider but it's been designed around data privacy," explained Julian Box, CEO and co-founder of Calligo, in this SYS-CON.tv interview at 21st Cloud Expo, held Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA.
Isomorphic Software is the global leader in high-end, web-based business applications. We develop, market, and support the SmartClient & Smart GWT HTML5/Ajax platform, combining the productivity and performance of traditional desktop software with the simplicity and reach of the open web. With staff in 10 timezones, Isomorphic provides a global network of services related to our technology, with offerings ranging from turnkey application development to SLA-backed enterprise support. Leading global enterprises use Isomorphic technology to reduce costs and improve productivity, developing & deploying sophisticated business applications with unprecedented ease and simplicity.
While a hybrid cloud can ease that transition, designing and deploy that hybrid cloud still offers challenges for organizations concerned about lack of available cloud skillsets within their organization. Managed service providers offer a unique opportunity to fill those gaps and get organizations of all sizes on a hybrid cloud that meets their comfort level, while delivering enhanced benefits for cost, efficiency, agility, mobility, and elasticity.