Trust & Value from Cloud Computing<br />Why you should go for it.<br />ISACA Cloud Computing Task Force<br />Marc Vael, Ch...
Whostartedallthis?<br />“What's interesting [now] is that there is an emergent new model, and you all are here because you...
We live in a world today that<br />is quiteradically different<br />from the world that existed<br />just five yearsago.<b...
5 essentialcharacteristics<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
5 essentialcharacteristics<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
5 essentialcharacteristics<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
5 essentialcharacteristics<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
5 essentialcharacteristics<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
3 service models<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
4 deployment models<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
Cloud computing advantages<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
T<br />R<br />U<br />S<br />T<br />V<br />A<br />L<br />U<br />E<br />Cloud computing advantages<br />Cloud Computing Trus...
53%<br />
Cloud computing attention topics<br />Keep 15 basic IT outsourcing lessonslearned in mind:<br />Psychological impact<br />...
Cloud computing ready?<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
Cloud computing auditing<br /><ul><li>PO4 Define IT processes, organization and relationships
PO8 Manage quality
PO9 Assess & manage IT risks
AI4 Enableoperation & use
AI5 Procure IT resources
AI6 Manage change
AI7 Install & accredit solutions & changes
DS1 Design & manage service levels
Upcoming SlideShare
Loading in...5
×

Isaca india trust & value from cloud computing (aug 2011) print

1,125

Published on

A brand new presentation I gave for an online webcast for ISACA India. All comments are

Published in: Technology, Business
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total Views
1,125
On Slideshare
0
From Embeds
0
Number of Embeds
2
Actions
Shares
0
Downloads
0
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Transcript of "Isaca india trust & value from cloud computing (aug 2011) print"

  1. 1. Trust & Value from Cloud Computing<br />Why you should go for it.<br />ISACA Cloud Computing Task Force<br />Marc Vael, Chairman<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  2. 2. Whostartedallthis?<br />“What's interesting [now] is that there is an emergent new model, and you all are here because you are part of that new model. I don't think people have really understood how big this opportunity really is. It starts with the premise that the data services and architecture should be on servers. We call it cloud computing – they should be in a "cloud" somewhere. And that if you have the right kind of browser or the right kind of access, it doesn't matter whether you have a PC or a Mac or a mobile phone or a BlackBerry or what have you – or new devices still to be developed – you can get access to the cloud.”<br />Mr. Eric Schmidt, Chairman & CEO Google<br />Search Engine Strategies Conference,9th of August 2006<br />http://www.google.com/press/podium/ses2006.html<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  3. 3. We live in a world today that<br />is quiteradically different<br />from the world that existed<br />just five yearsago.<br />Cloud Computing Task Force<br />Marc Vael, Chairman<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  4. 4. 5 essentialcharacteristics<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  5. 5. 5 essentialcharacteristics<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  6. 6. 5 essentialcharacteristics<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  7. 7. 5 essentialcharacteristics<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  8. 8. 5 essentialcharacteristics<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  9. 9. 3 service models<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  10. 10. 4 deployment models<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  11. 11. Cloud computing advantages<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  12. 12. T<br />R<br />U<br />S<br />T<br />V<br />A<br />L<br />U<br />E<br />Cloud computing advantages<br />Cloud Computing Trust & Value elements<br />Confidentiality<br />Privacy<br />Integrity<br />Availability<br />Compliance<br />Licensing<br />Reliability<br />Monitoring<br />Integration<br />Network centric<br />Lower upfront investments<br />More OPEX than CAPEX<br />On demand Convenience<br />Scalability<br />Better resource pooling/usage<br />Flexibility<br />Business control over IT solutions<br />Centralized data (sort of)<br />Faster implementation<br />Logging & Monitoring<br />Green IT<br />Trust creates the opportunity for Value<br />Value is based on an expectation of Trust<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  13. 13. 53%<br />
  14. 14.
  15. 15.
  16. 16. Cloud computing attention topics<br />Keep 15 basic IT outsourcing lessonslearned in mind:<br />Psychological impact<br />IT governance model<br />Integration withinternal IT systems<br />Network connectivity / bandwidth<br />Data location<br />Shared tenancy<br />Lock in withvendor<br />Cloud Service Provider stability, reliabilityandviability<br />Service portability<br />Legal & regulatory compliance aspects (includingLicensing, Contractual arrangements)<br />Information security management (including IAM)<br />Incident response & crisis management<br />Business Continuity Management & Disaster Recovery Planning<br />Data archiving & removal<br />(Right to) Audit (pentest, screening, monitoring,…)<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  17. 17. Cloud computing ready?<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  18. 18.
  19. 19. Cloud computing auditing<br /><ul><li>PO4 Define IT processes, organization and relationships
  20. 20. PO8 Manage quality
  21. 21. PO9 Assess & manage IT risks
  22. 22. AI4 Enableoperation & use
  23. 23. AI5 Procure IT resources
  24. 24. AI6 Manage change
  25. 25. AI7 Install & accredit solutions & changes
  26. 26. DS1 Design & manage service levels
  27. 27. DS2 Manage third-party services
  28. 28. DS4 Ensure continuous service
  29. 29. DS5 Ensure systems security
  30. 30. ME2 Monitor & evaluateinternal control
  31. 31. ME3 Ensure compliance withexternalrequirements</li></ul> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  32. 32.
  33. 33.
  34. 34. Your cloud computing solution<br />is as strong …<br />… as its weakest link<br />
  35. 35. Contact information<br />Marc VaelCISA, CISM, CISSP, CGEIT, ITIL Service Manager, Prince2 Chairman ISACA Cloud Computing Task Force<br /> ISACA<br />3701 Algonquin Road, Suite 1010<br /> Rolling Meadows<br /> IL 60008 USA<br />http://www.isaca.org/cloud <br />marc@vael.net <br />http://www.linkedin.com/in/marcvael <br />http://twitter.com/marcvael<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  36. 36. THANK YOU <br />FOR YOUR ATTENTION<br />
  37. 37. Cloud computing websites<br />www.cloudsecurityalliance.org/<br />www.enisa.europa.eu/act/rm/files/deliverables/cloud-computing-risk-assessment<br />csrc.nist.gov/groups/SNS/cloud-computing/<br />opencloudconsortium.org/ <br />www.opencloudmanifesto.org/<br />www.cloud-standards.org/wiki/<br />en.wikipedia.org/wiki/Cloud_computing<br />searchcloudcomputing.techtarget.com/<br />cloudcomputing.sys-con.com/ <br />cloudsecurity.org/<br />www.cloudaudit.org/<br />www.isaca.org/cloudcomputingresources<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />
  38. 38. Cloud computing publications<br />Executive’s Guide to Cloud Computing,Eric Marks-Bob Lozano, 304 pages, May 2010<br />Enterprise Cloud Computing: A Strategy Guide for Business and Technology Leaders, Andy Mulholland-Jon Pyke-Peter Fingar, 260 pages, April 2010<br />Cloud Computing: technologies & strategies of the ubiquitous data center, Curtis Franklin & Brian Chee, 288 pages, February 2010<br />Above the Clouds: managing risk in the world of cloud computing, Kevin Mcdonald, February 2010<br />Cloud Computing for dummies, Judith Hurwitz-Robin Bloor-Marcia Kaufman, 310 pages, November 2009<br />Cloud Security,Ronald Krutz Russell Dean Vines, 384 pages, July 2010<br />Management strategies for the Cloud Revolution,Charles Babcock, 272 pages, June 2010<br /> 5 August 2011 – Virtual Seminar and Tradeshow<br />

×