For a security manager, even a test environment could be too vulnerable when it’s located in the Web-accessible cloud.
Computerworld - What great timing! I had no sooner returned from the RSA Conference, where my focus was on cloud computing, than I was invited to a meeting to discuss our first venture into “the cloud.”
The IT department has decided to contract with an infrastructure-as-a-service provider to host a portion of our development environment. If this trial is successful, some of our production environment could be next. Having read up on the subject in white papers and attended seminars at RSA, I felt informed enough to ask the questions that needed to be answered before I could feel comfortable about an initiative that was going to open new portals to our network and our data.
And there’s no question that this could expose us to new dangers. Read the rest of this entry »
