Best Practices for Cloud Governance within Healthcare

When you think of cloud computing in the healthcare vertical, you also have to think of security and governance. Indeed, the need to control and secure healthcare data in the cloud is a big issue, and thus cloud governance is critical.
On the whole, cloud computing needs governance to succeed. If you think about it, at the end state of the cloud computing implementation, we’ll have thousands of services and data elements under management. To control how they are accessed, added, deleted, and altered, we need a solid approach, processes, procedures, and technology. That is why we call it ‘governance,’ or, more specifically, ‘service governance.’

read more

Securing Cloud Data from Cybercrime, Intrusion and Surveillance

In my previous post (Cloud Data, Security, Privacy & Confidentiality/ The ISV Perspective) I talked about the increasing exposure of data, the changing landscape of data confidentiality and the need to shield data rather than retreat into – largely mythical -“safe heavens” of on premise. When storing data in the cloud, key management becomes a critical aspect of data confidentiality and a new crop of vendors are beginning to emerge simplifying encryption and key management.
Having looked at most of the new crop of cloud encryption vendors, we liked Porticor for its innovative application of homomorphic algorithm to split key encryption and its use of a customer-owned security appliance. The combination of two eliminates the need to expose the encryption key and minimizes the risks offering a unique approach to comply with EU data protection legislation, not found elsewhere in the cloud.

read more

Securing Cloud Data from Cybercrime, Intrusion and Surveillance

In my previous post  (Cloud Data, Security, Privacy & Confidentiality/ The ISV Perspective) I talked about the increasing exposure of data, the changing landscape of data confidentiality and the need to shield data rather than retreat into – largely mythical  -“safe heavens” of on premise.  When storing data in the cloud, key management becomes a […]

The post Raythos Lab: Securing Cloud Data from Cybercrime, Intrusion and Surveillance appeared first on Porticor Cloud Security.

read more

G-Cloud 4 opens its doors for next round of tenders

The Cabinet Office has announced that the fourth iteration of the UK government cloud, G-Cloud 4, is open for business and is accepting submissions from suppliers for its Invitation to Tender (ITT).

Various improvements have been made to the ITT, according to Cabinet Office spokesman Peter Middleton. These include clearer application instructions, for suppliers both new to G-Cloud and for those previously on the ii and iii iterations.

The launch and timetable were posted on the UK government blog, with the clarification period closing on September 4, and the tender submission deadline arriving on September 23. Applicants will be informed on the success of their application on October 16, with the expected commencement date for the framework agreement later that month on October 29.

Suppliers who are on G-Cloud iii are safe until May 2014, whilst vendors still running on the second iteration have only until October 27 before the …

SYS-CON.tv: Demo on Dell Cloud-as-a-Service Solutions at Cloud Expo NY

In this demo at 12th International Cloud Expo, held June 10–13, 2013, at the Javits Center in New York City, Dell looks at cloud-as-a-service solutions and shows how to get started in the cloud.
Cloud Expo 2013 Silicon Valley, November 4–7, at the Santa Clara Convention Center in Santa Clara, CA, will feature technical sessions from a rock star conference faculty and the leading Cloud industry players in the world.
The growth and success of Cloud Computing will be on display at the upcoming Cloud Expo conference and exhibition in Santa Clara, California, November 4–7, 2013.

read more

Survey: Five Out of Six Organizations Use or Plan to Use Cloud Storage

TwinStrata onWednesday announced the results of its 2013 Cloud Storage Adoption Survey. Conducted during the first half of 2013, the survey – updated from June 2012 – focuses on the attitudes and experiences of a cloud-friendly sample group as determined by their attendance at a recent cloud conference. The survey results compare how this cloud-mature group has shifted year-over-year and highlights advancements in adoption and shifts in viewpoint. The report can be downloaded at: http://www.twinstrata.com/cloud-survey-2013.
Among the key findings:
Storage capacity requirements are quickly outstripping the ability of IT to support them, with three out of a full 60 percent of respondents agreeing, “It seems like we are always running out of storage.”
More than a third (37 percent) of respondents indicate that they have been using cloud computing for three or more years – an increase of more than a third over last year. Adoption rates across all cloud initiatives (including software as a service, platform as a service, infrastructure as a service and cloud storage) have increased year over year.

read more

Cloud Expo Silicon Valley: Understanding FedRAMP

Cloud Security Providers (CSPs) interested in doing business with the government have a strategic decision to make before entering the Federal Risk and Authorization Management Program (FedRAMP) authorization process. FedRAMP can help these providers consolidate their compliance demands by allowing them to leverage FedRAMP as the high-watermark of security control standards and apply them to other industries. Obtaining FedRAMP compliance can enable CSPs to achieve a security compliance baseline for their cloud solutions while also meeting other regulatory requirements (PCI, ISO 27001, SSAE 16, HIPAA/HITECH, FFIEC, etc.).
FedRAMP can provide CSPs with new business opportunities as federal agencies adopt the Cloud First initiative and public and private sectors expand their collaboration and interdependence.
In his session at the 13th International Cloud Expo, Douglas Greise, Principal & Co-Founder of Veris Group, will discuss how the strategic and technical solutions offered by an experienced third party can provide a cost-saving and business-driven approach to gain a competitive edge in the government sector, while also meeting existing and changing compliance standards.

read more

Cloud Monitoring Essentials: Part 1 | Cost

Part of 1 of a 3 part series outlining the essential components for effective cloud monitoring. This portion covers cost monitoring and presents 3 key issues that users need to address to maximize their ROI.
Cloud elasticity delivers significant increases in availability and scalability with enormous cost reductions relative to comparably functional data centers. Harnessing this strength and optimizing your cloud usage means monitoring and understanding what is occurring within your deployment – for cloud users, there is no such thing as benign neglect.
Just as data center users require solutions to assist in optimizing and controlling usage beyond the application layer, so to do public cloud users.
In fact, given the complexity and evolving innovation of cloud architecture, tools are even more critical for cloud users to avoid cost sprawl, security vulnerabilities, and service deterioration.

read more

Thinaire Selects Verizon Terremark Cloud to Support Mobile Platform

«These types of mobile campaigns represent the future of retail and we’re excited to be helping News America Marketing and Thinaire expand their reach,» said Chris Drumgoole, senior vice president of Global Operations with Verizon Terremark.
To support the rapid growth of Near Field Communications (NFC) media technology, Thinaire has selected Verizon Terremark’s Enterprise Cloud which allows for seamless scaling based upon traffic, need and demand. Such capabilities are critical for Thinaire when powering mobile marketing campaigns for customers, including News America Marketing whose SmartSource with NFC initiative has the capability to deliver in-store information and offers from thousands of retailers directly from the shelves to the mobile devices of millions of consumers.
Drumgoole continued, «The flexibility and scalability of our Enterprise Cloud makes it an ideal platform for multi-channel marketing campaigns of this size and complexity.»

read more

Thinaire Selects Verizon Terremark Cloud to Support Mobile Platform

«These types of mobile campaigns represent the future of retail and we’re excited to be helping News America Marketing and Thinaire expand their reach,» said Chris Drumgoole, senior vice president of Global Operations with Verizon Terremark.
To support the rapid growth of Near Field Communications (NFC) media technology, Thinaire has selected Verizon Terremark’s Enterprise Cloud which allows for seamless scaling based upon traffic, need and demand. Such capabilities are critical for Thinaire when powering mobile marketing campaigns for customers, including News America Marketing whose SmartSource with NFC initiative has the capability to deliver in-store information and offers from thousands of retailers directly from the shelves to the mobile devices of millions of consumers.
Drumgoole continued, «The flexibility and scalability of our Enterprise Cloud makes it an ideal platform for multi-channel marketing campaigns of this size and complexity.»

read more