What a difference a year makes! The Cloud Security Alliance’s (CSA) second annual congress was held in Orlando, FL November 16th and 17th and even though the event was held at a Disney Resort hotel, it’s not like there was time for fun, games and rides. Upon my arrival in Orlando, the bus driver from [...]
We are still looking for participants in our 5-minute cloud security survey, so if you and your company are using cloud-based solutions or thinking about moving applications or processes to the cloud, please take our survey. Meanwhile, we just couldn’t resist taking a sneak peek at some of the early results. We won’t spill all the beans, but some thoughts about cloud security appear to be taking a 180-degree turn from a year ago.
Cloud security will always be a hot topic – as it should be – because overall security (not just cloud security alone) remains a top priority for every IT department. To address the cloud specifically, there’s a plethora of information available for people to consume, but little guidance on what companies really need to focus to ensure their cloud deployments are safe. And what does “safe” really mean after all? Is securing the cloud any different from securing the rest of your IT infrastructure?
Hubspan has been at the forefront of cloud security, and part of that is our membership in the Cloud Security Alliance (CSA). We also invest heavily in maintaining compliance to key mandates, including SAS 70 Type 2 and PCI DSS. Our announcement with the CSA today brings these two areas together, as we are sponsoring a new training program by the CSA that focuses on PCI DSS compliance for cloud computing.
Perhaps this sounds ridiculously elementary, however, I hear enough questions and comments about the “cloud” to know there are people not thinking about this. In spite of concerns voiced loudly around security and control, many companies are jumping into the cloud to get a quick fix without doing the proper due diligence of the physical infrastructure behind the cloud.
This week, we announced the successful completion of our SAS 70 Type 2 audit. With this Certification, Hubspan has maintained SAS 70 compliance for four years running. We are proud of this accomplishment, not only because it is a company-wide initiative that takes discipline and clear processes, but because it is one more reason our [...]
Hubspan today released results from a cloud security survey we conducted a couple of months ago, with the key outcome being most companies in the survey (84%) believe sensitive data can be secured in the cloud. This was higher than I expected. What’s more, nearly half of the respondents also said they believe cloud-based solutions are [...]
The Cloud Security Alliance recently introduced a new, Web-based test for competency in CSA standards called the Certificate of Cloud Security Knowledge (CCSK), for securing private, public or hybrid cloud environments. The intent is to raise the baseline of knowledge on cloud security technologies and issues. And I’m happy to report that I (Stuart Lisk, Hubspan [...]
