Focus - Cloud computing is a new way of delivering computing resources, not a new technology. Computing services ranging from data storage and processing to software, such as email handling, are now available instantly, commitment-free and on-demand. Since we are are experiening stringent times, this new economic model for computing has found fertile ground and is seeing massive global investment. Governments are interested in the possibility of using cloud computing to reduce IT costs and increase capabilities. For example, the US GSA now offers a portal for cloud computing services.
Governments in particular have serious hurdles to overcome - in terms of public perception of the secure processing of citizens’ personal information in cloud computing infrastructures. Then there are also legal and regulatory obstacles which prevent many applications from moving to cloud. Nevertheless, both public and private sector entities face the reality that many of their employees will be using cloud-based services whether or not this is part of their official policy.
Strength - For cloud computing to reach the full potential promised by the technology, it must offer solid information security. Tailwind knows what cloud computing means for network and information security, data protection and privacy. We look at the security benefits of cloud computing and its risks. We cover the technical, policy and legal implications. Most importantly, we make concrete recommendations on how to address the risks and maximize the benefits. Finally, it is important to note that cloud computing can refer to several different service types, including:
The risks and benefits associated with each model will differ and so will the key considerations in contracting for this type of service
Tailwind understands that one of the most important aspects is a set of assurance criteria designed to accomplish the following:
The preparation of effective security questionnaires for third party service providers is a significant drain on resources for cloud customers and one which is difficult to achieve without expertise in cloud-specific architectures.
Tailwind will work closely with you to help determine if your applications are targets for cloud computing by employing our knowledge of the many offerings and the associated risks.
Tailwind will work with you to implement the target application(s) in the selected cloud computing environment.
Acknowledgements to NIST and ENISA for specific content.