Key Management Critical in Cloud Security
Posted by Margaret Dawson on February 24, 2010
Earlier this week, Gartner analyst Neil MacDonald blogged about cloud security, noting that data encryption is important but key management is critical. We agree. If your company is considering leveraging cloud-based solutions, and there are many strong reasons to do so with multiple IT and Business benefits, make sure you are looking closely at a vendors security processes and capability.
Data encryption should be for all information, whether in motion or at rest. But most people don’t realize they need to ask a cloud vendor about its key management process. How is the key protected, stored, audited, managed, changed, etc. Also, it’s smart for the vendor (particularly if they want to be PCI compliant) to utlize KEK (key encrypted keys).
Tags: Cloud Security, Data Encryption, Gartner Neil MacDonald, Key Management
No Comments »
No comments yet.