Cloud

Security Certifications and Promoting Cloud Computing

September 13th, 2010

There is an abundance of certifications in the IT industry covering application development, project management, security, and vendor tool specific.  An interesting spin to all of this is a security framework tied specifically to cloud computing. The Cloud Security Alliance (CSA) published the second edition of its guidelines for secure cloud computing, delivering a document

Cloud Computing Definitions and Use Cases

September 9th, 2010

An active discussion on cloud computing use cases brings a somewhat more practical approach to what this service might offer to a company and how it might evolve over time.  Not everyone can use salesforce.com or Google mail services, which are the most frequently cited examples of cloud computing. The NIST definition describes five essential

Security in the New Data Center

August 31st, 2010

Information security in data centers has historically relied on perimeter firewalls, pattern matching “after the fact” with intrusion detection, and at the server level by installing host-based intrusion detection, identity enforcement, antivirus, and other software agents.  Internal LANs can be segmented and boundary controls implemented using the same firewall technology. Virtualization adds a layer of

Ebb and Flow of Virtualization Implementations

August 27th, 2010

Gartner says that just 16% of data center loads are virtualized, and in a recent InformationWeek Analytics survey found that 35% of respondents say they expect to virtualize less than 25% of their data centers by 2011. That finding reflects either a less optimistic or more realistic assessment than survey respondents exhibited last year, when

SOA Rebranded as Cloud Computing Services

August 18th, 2010

Just have to love some marketing folks and analysts that jump to the latest buzz word and extol the differences, benefits, pitfalls, fear, uncertainty and doubt.   There have recently been some press releases concerning cloud computing concepts and technology that seems to have been lifted from previous Service Oriented Architecture (SOA) overviews from the same vendors. 

Subcontracting Issues within Cloud Computing Services

August 10th, 2010

Multi-cloud relationships and subcontractors can be an issue when using some cloud providers.  For example, a Customer might start out slow with Cloud Computing and enter into a SaaS service just to get a feel for how all of this works and to satisfy an immediate need that the internal IT department cannot quickly fulfill.

Due Diligence for Cloud Computing Service Arrangements

August 3rd, 2010

It does not matter how you start down the path towards cloud computing or outsourcing, but a written RFP that has been vetted by the stakeholders within the organization—IT, legal, compliance, information security, and all of the relevant business groups, is usually a helpful starting point.   Listed below is a starter set of questions that

Cloud computing key risks

July 30th, 2010

For every positive benefit there is almost always a negative to compensate for rapid adoption based on wild enthusiasm.  Cloud computing has a number of key risks.  1) data privacy and governing privacy laws  2)  multi-cloud relationships and subcontractors are also an issue when using a cloud provider 3)  multi-tenancy on the same virtual server

Cloud Computing key benefits

July 29th, 2010

Like any good consultant or analyst, you can summarize the key benefits in three easy statements: 1) cost, 2) computing on-demand or scalability, and 3) access to expertise on virtualization and technology.  The entire business model for cloud providers is to achieve economies of scale and provide processing power at a very low price.  It