Peter Shorney, Global Head of Information Security - Rentokil Initial PLC
This document discusses the shared responsibilities in cloud computing between cloud service providers and customers. It explains that in an on-premises environment, the customer manages all aspects of the infrastructure including applications, data, servers, storage, and networking. However, with cloud models like IaaS, PaaS and SaaS, there is a division of responsibilities where the provider manages more of the infrastructure and the customer retains control over applications and data. The document outlines specific responsibilities for security controls like identity and access management, application controls, and physical security that are shared across customer and providers depending on the cloud model. It stresses the importance of contractual agreements that define privacy, compliance, risk management, auditing and exit strategies for customers
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Peter Shorney, Global Head of Information Security - Rentokil Initial PLC
Similar to Peter Shorney, Global Head of Information Security - Rentokil Initial PLC (20)
More from Global Business Intelligence
More from Global Business Intelligence (20)
Recently uploaded
Recently uploaded (17)
Peter Shorney, Global Head of Information Security - Rentokil Initial PLC
- 1. Understanding the Shared Responsibility of Cloud Computing Pete Shorney Global Head of Information Security
- 4. Applications Data Runtime Middleware OS Virtualisation Servers Storage Networking wemanage On-premises environment Applications Data Runtime Middleware OS Virtualisation Servers Storage Networking wemanage Infrastructure as-a-Service providermanages Applications Data Runtime Middleware OS Virtualisation Servers Storage Networking wemanage Platform as-a-Service providermanages Applications Data Runtime Middleware OS Virtualisation Servers Storage Networking Software as-a-Service providermanages Shared Responsibilities Classification Identity & Access Application Level Controls Network Controls Host Infrastructure Physical Security Client & End Point Classification Network Controls Host Infrastructure Physical Security Client & End Point Classification Application Level Controls Network Controls Host Infrastructure Physical Security Classification Identity & Access Application Level Controls End Point Network Controls Physical Security End Point Host Infrastructure Classification End Point Identity and Access Classification End Point Application Level Controls Physical SecurityPhysical Security Classification Client & End Point Identity and Access Acknowledgement > Microsoft Shared responsibilities of Cloud Computing 2016 Author Frank SimorjayCustomer Provider
- 6. The Commercial Engagement Contractual Engagement • Privacy / Compliance – Controller / Processor / Both ? – Adequacy • Shared risk framework – Vulnerability assessment/ Risk Management – Patching/ Keeping current (implications for you !) • Right to audit, service assurance • How to exit and take your data with you • Backup / DR / DDOS Protection • How deletion of your data is verified • Supplier Management • Cyber Incident Response management in Shared environment • ... • ...
- 7. The Circle of Trust Can You trust your provider to? ● keep you Compliant ● operate Securely ● minimise threats and risk ● protect Confidentiality and Integrity Do they do a better job than You could ?
- 8. Shared Responsibility ? Shared responsibility Huh !! Still means that the buck stops with YOU ! QUESTIONS ?