Risk and Security in the Enterprise
Cloud
Mark Masterson | http://jroller.com/MasterMark

… is a topic too big for 5 minutes.
So, here’s the rest:
http://www.slideshare.net/mastermark/enterprise-cloud-risk-and-security
Mark Masterson | http://jroller.com/MasterMark

http://www.flickr.com/photos/peterpearson/347124844/
Mark Masterson | http://jroller.com/MasterMark

http://www.flickr.com/photos/paszczak000/2564969200/
Mark Masterson | http://jroller.com/MasterMark

http://www.flickr.com/photos/rachels_secret/220269351/
Mark Masterson | http://jroller.com/MasterMark

Mark Masterson | http://jroller.com/MasterMark

Mark Masterson | http://jroller.com/MasterMark

http://en.wikipedia.org/wiki/Bertrand_Russell
Mark Masterson | http://jroller.com/MasterMark

http://en.wikipedia.org/wiki/Kurt_Gödel
Mark Masterson | http://jroller.com/MasterMark

No formal system extending basic
arithmetic can be used to prove its
own consistency.
Mark Masterson | http://jroller.com/MasterMark

Risk exposure (RE) =
probability(loss) * magnitude(loss)
http://books.google.com/books?id=0RfANAwOUdIC&pg=PA800&lpg=PA800&dq=risk+exposure+re+formula&s
ource=web&ots=pENn1no-zn&sig=Xe72BRymob2ftXlp4CciUr-ly-
Y&hl=en&ei=QquNSfLdMob00AXB4OGcCw&sa=X&oi=book_result&resnum=5&ct=result
(The Handbook Of Information Security)
Mark Masterson | http://jroller.com/MasterMark

LOL!
http://en.wikipedia.org/wiki/Kurt_Gödel
Mark Masterson | http://jroller.com/MasterMark

Mark Masterson | http://jroller.com/MasterMark

What’s “the Cloud” got to do with
this?
Mark Masterson | http://jroller.com/MasterMark

http://www.flickr.com/photos/rachels_secret/220269351/
Mark Masterson | http://jroller.com/MasterMark

http://www.flickr.com/photos/paszczak000/2564969200/
Mark Masterson | http://jroller.com/MasterMark

So. What to do?
Mark Masterson | http://jroller.com/MasterMark

?
http://www.flickr.com/photos/peterpearson/347124844/
Mark Masterson | http://jroller.com/MasterMark

LOL!
http://en.wikipedia.org/wiki/Kurt_Gödel
Mark Masterson | http://jroller.com/MasterMark

http://www.flickr.com/photos/euthman/2989437967/in/set-72057594114099781/
Mark Masterson | http://jroller.com/MasterMark

The U.S. DOE published an
excellent report in December: “A
Scientific Research & Development
Approach to Cyber Security”.
http://chas.typepad.com/dli/2009/01/cyber-security-rd-needs-for-doe.html
Mark Masterson | http://jroller.com/MasterMark

The Jericho Forum, part of The
Open Group, is doing important
work in defining models of security
and risk that don’t ignore Gödel’s
LOL.
https://www.opengroup.org/jericho/about.htm
Mark Masterson | http://jroller.com/MasterMark

LOL!
http://en.wikipedia.org/wiki/Kurt_Gödel
Mark Masterson | http://jroller.com/MasterMark