The document summarizes a CIO forum on security, compliance, and cloud computing. It discusses Jelecos cloud and managed services, changing compliance landscapes like PCI DSS 3.0, and the evolution of hybrid clouds and compliance. It also covers topics like data breaches, security predictions for 2015, planning cloud strategies, and ensuring data protection and compliance in hybrid clouds and with emerging technologies like IoT.

1. CIO Forum:
Security, Compliance, & Cloud
February 19, 2015

2. JELECOS TODAY
Cloud Services
Application
Services
Strategic Advisory
Services
Managed Infrastructure
Managed Backup and
Recovery
Managed Security and
Compliance
Managed Storage
Discovery
Development
Optimization
Strategic Planning
Business/Tech Alignment
IT Governance

3. JELECOS – BUILT FOR COMPLIANCE

4. DILBERT ON SECURITY

5. IN THE SPOTLIGHT
Leon Thomas
President & CEO, Jelecos

6. OBJECTIVES
 Overview of changing cloud landscape
 Overview of changing compliance landscape (PCI-DSS 3.0)
 Evolution of hybrid cloud and compliance relationship
 New challenges have arrived
 Planning and next steps

7. FOOD FOR THOUGHT
 By 2020 cloud computing will cross the $270 billion mark.
 94% of managers say their business security has improved after adopting cloud
applications.
 91% of SMBs says their cloud providers made it easier to satisfy compliance
requirements.
 By 2016 36% of all data is expected to be stored in the cloud, up from 7% in 2013.
 90% of Microsoft's R&D budget is being used to improve cloud technology and
security services.
Source: http://blog.icorps.com/20-cloud-computing-facts-for-2015

8. CURRENT PLANS
What are your current plans?
You need more than one plan.
PCI-DSS 1…2…3
HIPAA-HITECH/Meaningful Use
Red Flag Rules
FISMA/NIST
Gramm-Leach-Bliley
Sarbanes-Oxley
FINRA
Cloud Adoption
IoT
BYOD
Storage Growth
Shadow ITITaaS
SSAE-16
Fabric
Infrastructure
Convergence

9. IMPACT AND COST OF BREACHES
o Malicious Breach
o 1/3 not caught by company defenses
o Average cost of $840,000 per breach
o Lost reputation and brand value
o Non-malicious Breach
o 1/3 identified accidentally
o Average cost of $470,000 per breach
o Lost reputation and brand value

10. WORLD’S BIGGEST DATA BREACHES
Source: http://www.informationisbeautiful.net/visualizations/worlds-biggest-data-breaches-hacks/

11. SECURITY PREDICTIONS FOR 2015
0 2 4 6 8 10 12 14
Regulation, compliance & cyberinsurance
High-profile data breaches
Encryption & privacy
Mobile technology
IoT & critical infrastructure
Evolutions of existing cybersecurity solutions
New attack vectors & platforms
2015 Cybersecurity Predictions
Number of predictions

12. PCI DSS 3.0: COMMONLY ASKED QUESTIONS
 Why is there a new standard?
 Who does it affect?
 When is the PCI DSS 3.0 deadline?
 What does PCI DSS 3.0 mean for my business?
 How can I ensure compliance with PCI DSS 3.0?

13. CONTROL OF CLOUD BASED DATA
 The challenge of Cloud is data
management
 Data to a network or compute is transient
 Once data is placed in storage it has to be
managed for the long term
 Data protection, governance, security,…
 Maintain control of data
Controlled Data
Direct Connect Location
Cloud
Compute
Cloud
Storage
Controlled Data
On Premises
Customer
Provisioned
MPLS/VPN Network
Direct Connect
/
ExpressRoute
Capability
Cloud
Service
Provider
NetApp Private Storage

14. COMPLIANCE IN THE AGE OF BIG DATA
 Analytics derived from Big
Data becoming as valuable as
traditional enterprise data
 Often cloud solutions are the
only way to meet scalability,
performance and security
challenges posed by Big Data

15. COMPLIANCE IN THE AGE IOT
 IoT devices will grow from
~16B in 2014 to ~41B in 2020,
adding $10 – 15 trillion (yes,
with a “T”) to global GDP by
2035
 Guarding the gateways will be
essential to compliance and
security due to elongated and
fuzzy chain of custody

16. PLANNING YOUR 2015 CLOUD STRATEGY
Source: Computerworld 2015 Forecast Study
Top Five Tech Spending Increases in 2015

17. EVOLUTION OF THE HYBRID CLOUD
Four Steps to Ensuring Data Protection in the Hybrid Cloud
1. Ask the right questions of your cloud provider
2. Understand where you are vulnerable
3. Centralize governance and control of cloud deployments
4. Use solutions optimized for data protection

18. CONCEPTS TO WATCH
 PCI-DSS 3.0 Adoption – June 2015 Deadline
 VMWare vRealize suite
 Future of vCloud Director
 EVORail/Rack

19. SELF-ASSESSMENT
 How secure is your organization today?
 Do you consider security a competitive advantage?
 What is your organization saying (or not saying) to its current and prospective
customers and vendors about its security?
 Do you have an Incident Response Plan? If so, how current is it?

20. CHANGE OF MINDSET
Stop thinking
“If we get hacked”
and start thinking
“When we get hacked”.

21. THANKS FOR JOINING US THIS MORNING