Find Resources and Connect with members on topics that interest you.

Applications

Audit

Business Processes

Career Management

Cloud Computing/Virtualization

COBIT

Controls and Monitoring

Country

Databases

Exam Communities

Fraud and Computer Crime

Governance and Management

Industry

Information Security

IT Service Management

Mobile/Wireless

Operating Systems

Privacy/Data Protection

Regulations

Risk

Standards

Access Control

Application Controls

Application Security

Audit Guidelines

Audit Standards

Audit Tools and Techniques

Basel

Big Data

Business Analytics/Intelligence

Business Continuity-Disaster Recovery Planning

Business Process Management

Career Management

Casinos and Gambling

CGEIT Exam Study Community 2013

Change Management

CISA Exam Study Community 2013

CISM Exam Study Community 2013

Cloud Computing

COBIT (4.1 and earlier) - Use it Effectively

COBIT (4.1 and earlier) Implementation

COBIT 5 - Implementation

COBIT 5 - Use It Effectively

Compliance

Computer Crime

Continuous Monitoring/Auditing

Controls Monitoring

CRISC Exam Study Community 2013

CyberSecurity

Enterprise Architecture

Enterprise Data Management

Financial Reporting Compliance

Forensics

Frameworks

Fraud

Governance of Enterprise IT

Green IT

Healthcare

HIPAA

HP Non-Stop (Tandem)

Identity Management

IFRS

Incident Management

India

Information Security Management

Information Security Policies/Procedures

Intrusion Prevention/Detection

ISAE 3402

ISO/IEC 20000

ISO/IEC 27000 Series

ISO/IEC 38500

ITIL

J-SOX

Mobile Computing

Network Security

Oracle

Oracle Database

Oracle E-Business Suite

OS/400

PCI DSS

PeopleSoft

Performance Measurement

Physical Security

Privacy/Data Protection

Project/Program/Portfolio Management (P3M)

Quality Standards

Risk Assessment

Risk Management

SAP

Sarbanes-Oxley (SOX)

Security Tools

Security Trends

Service Management

SharePoint

Solvency II

SQL Server

Strategic Planning/Alignment

Students

Unix-like

Value Delivery

Virtualization

Windows

Wireless

XBRL

Young Professionals

z/OS-OS/390

AI - Acquire and Implement

PO - Plan and Organize

DS - Deliver and Support

ME - Monitor and Evaluate

Application Controls

Process Controls

Please sign in to see your topics.

Subscribe to this discussion

Can We Trust The Cloud?

High-profile data breaches and missteps involving personal data seem to be reported almost daily by the media. Tension has arisen between individual perceptions of harm and powerlessness versus organizational feelings of control and ownership. The result: a decline in trust among all stakeholders. Individuals are beginning to lose trust in how organizations and governments are using data about them, organizations are losing trust in their ability to secure data and leverage it to create value, and governments are seeking to strengthen trust to protect an individual’s privacy. Yet, at the same time, consumers continue to share personal data and online retail continues to grow. Stakeholders (individuals, organizations and governments) have different cultural norms, timeframes for action and paths to a potential solution. Different regions are at different stages of this process of establishing a framework for dealing with personal data. For you, what is the best approach for establishing rules that allow data to flow in a trusted manner?
Posted by yves_le_roux on August 21, 2012 03:13AM
You must sign in to rate content.
(1 ratings)

Comments

RE: Can We Trust The Cloud?

Very interesting observation and question indeed. 
Depending on the type of cloud (private, public, community), the risks are different.
I strongly believe that it is up to companies promoting cloud to prove that they have "their house in order".
Privacy becomes a big stumbling block for endusers and they are requesting more assurance, especially after incidents happened.  It can put online services out of business in a flash.  
I believe that a company must show how to handle my data in a professional manner (secure, integer) with a proper policy to improve as required by the technological and social evolutions
For example, recently, DROPBOX improved its security access http://www.labnol.org/internet/secure-dropbox-account/25096/ unfortunately after a serious security breach. But at least they are improving.
There is no such thing as "the best approach" in my opinion, unless keeping everything away from the internet (and even then, there is still risk, as Stuxnet has proven), which is becoming less evident in a world where we want our information in reach wherever we are.
Finally, cloud allows to improve vastly the backup - recovery option in a cheaper way than ever before.
Marc Vael at 8/26/2012 2:45:58 PM
You must sign in to rate content.
(Unrated)

RE: Can We Trust The Cloud?

Very interesting observation and question indeed. 
Depending on the type of cloud (private, public, community), the risks are different.
I strongly believe that it is up to companies promoting cloud to prove that they have "their house in order".
Privacy becomes a big stumbling block for endusers and they are requesting more assurance, especially after incidents happened.  It can put online services out of business in a flash.  
I believe that a company must show how to handle my data in a professional manner (secure, integer) with a proper policy to improve as required by the technological and social evolutions
For example, recently, DROPBOX improved its security access http://www.labnol.org/internet/secure-dropbox-account/25096/ unfortunately after a serious security breach. But at least they are improving.
There is no such thing as "the best approach" in my opinion, unless keeping everything away from the internet (and even then, there is still risk, as Stuxnet has proven), which is becoming less evident in a world where we want our information in reach wherever we are.
Finally, cloud allows to improve vastly the backup - recovery option in a cheaper way than ever before.
Marc Vael at 8/26/2012 2:45:58 PM
You must sign in to rate content.
(Unrated)

RE: Can We Trust The Cloud?

Very interesting observation and question indeed. 
Depending on the type of cloud (private, public, community), the risks are different.
I strongly believe that it is up to companies promoting cloud to prove that they have "their house in order".
Privacy becomes a big stumbling block for endusers and they are requesting more assurance, especially after incidents happened.  It can put online services out of business in a flash.  
I believe that a company must show how to handle my data in a professional manner (secure, integer) with a proper policy to improve as required by the technological and social evolutions
For example, recently, DROPBOX improved its security access http://www.labnol.org/internet/secure-dropbox-account/25096/ unfortunately after a serious security breach. But at least they are improving.
There is no such thing as "the best approach" in my opinion, unless keeping everything away from the internet (and even then, there is still risk, as Stuxnet has proven), which is becoming less evident in a world where we want our information in reach wherever we are.
Finally, cloud allows to improve vastly the backup - recovery option in a cheaper way than ever before.
Marc Vael at 8/26/2012 2:45:58 PM
You must sign in to rate content.
(Unrated)

Leave a Comment

* required

You must login to leave a comment.

« Return to All Discussions « Return to Topic