What is Cloud Security




   Cloud Security is a broad set of policies,
    technologies, and controls deployed to
    protect data, applications, and the
    associated infrastructure of cloud
    computing.
Storage Auditing and
Compliance
   Compliance - Cloud service providers
    must comply appropriately with all the
    regulations within a country, regarding
    cloud security and data security.

   Storage Auditing – Certain Auditing
    companies may audit a cloud
    service, making sure it meets
    regulations of Compliance
Compliance Regulations

   Regulations including FISMA, HIPAA,
    and SOX in the United States, and the
    credit card industry's PCI DSS.

   Users may have to adopt community or
    hybrid deployment modes that are
    typically more expensive and may offer
    restricted benefits.
SSAE 16 “Certification”?
   SSAE 16 is an attestation standard put
    forth by the Auditing Standards Board
    (ASB) of the American Institute of
    Certified Public Accountants (AICPA)

   There is no designation, certification,
    award, confirmation, or any other type of
    validation for an actual SSAE 16
    assessment.
Storage Auditing services
   Storage Auditing services is provided by
    a 3rd Party Auditor and makes sure that
    your cloud computing data is secure and
    meets Compliance regulations
Security Solution providers
What does it cost today?
   Agiliance Continuous Compliance
    Service - $87,500 Per Year

   Average PCI DSS audit cost - $225K
    Per Year
What enhancements can be
expected?
   Enhanced Security regulations

   Increased Customer privacy regulations

   New regulations as Cloud Computing
    increases
What industries will likely be
impacted?
   Companies implementing Cloud
    Services
What products and services are
likely to be impacted?
   Cloud Services

     PAAS


     SAAS


     IAAS


     Etc.
Who benefits from Cloud
Compliance?
   Large and Mid size companies offering
    Cloud Computing.

   Compliance can reduce fees produced
    by Violations in regulations.
     HIPAA Violations cost the health care
     industry over 1.5 Million in penalties each
     year.
Multiple Choice Questions
   What is Cloud Computing
    A. set of policies, technologies, and controls
       deployed to protect data, applications, and
       the associated infrastructure of cloud
       computing.
    B. regulations such as FISMA, HIPAA, and
       SOX in the United States
    C. provisions and policies adopted by the
       network administrator
   What is Cloud Compliance
     A.   Regulations regarding Cloud Security and
          Data Security

     B.   An auditing service dedicated to cloud
          computing

     C. Enhancing Security in a network
The average PCI DSS audit cost is $30K
  Per Year

  A. True
  B. False
   FISMA, HIPAA, and SOX are all Cloud
    Compliance Regulations

     A. True
     B. False
   Which companies that Offer Cloud
    Services are most affected by Cloud
    Compliance

    A. Large and mid-size companies
    B. Small Companies
    C. No one is affected

Cloud security - Auditing and Compliance

  • 2.
    What is CloudSecurity  Cloud Security is a broad set of policies, technologies, and controls deployed to protect data, applications, and the associated infrastructure of cloud computing.
  • 3.
    Storage Auditing and Compliance  Compliance - Cloud service providers must comply appropriately with all the regulations within a country, regarding cloud security and data security.  Storage Auditing – Certain Auditing companies may audit a cloud service, making sure it meets regulations of Compliance
  • 4.
    Compliance Regulations  Regulations including FISMA, HIPAA, and SOX in the United States, and the credit card industry's PCI DSS.  Users may have to adopt community or hybrid deployment modes that are typically more expensive and may offer restricted benefits.
  • 5.
    SSAE 16 “Certification”?  SSAE 16 is an attestation standard put forth by the Auditing Standards Board (ASB) of the American Institute of Certified Public Accountants (AICPA)  There is no designation, certification, award, confirmation, or any other type of validation for an actual SSAE 16 assessment.
  • 6.
    Storage Auditing services  Storage Auditing services is provided by a 3rd Party Auditor and makes sure that your cloud computing data is secure and meets Compliance regulations
  • 7.
  • 8.
    What does itcost today?  Agiliance Continuous Compliance Service - $87,500 Per Year  Average PCI DSS audit cost - $225K Per Year
  • 9.
    What enhancements canbe expected?  Enhanced Security regulations  Increased Customer privacy regulations  New regulations as Cloud Computing increases
  • 10.
    What industries willlikely be impacted?  Companies implementing Cloud Services
  • 11.
    What products andservices are likely to be impacted?  Cloud Services  PAAS  SAAS  IAAS  Etc.
  • 12.
    Who benefits fromCloud Compliance?  Large and Mid size companies offering Cloud Computing.  Compliance can reduce fees produced by Violations in regulations.  HIPAA Violations cost the health care industry over 1.5 Million in penalties each year.
  • 13.
    Multiple Choice Questions  What is Cloud Computing A. set of policies, technologies, and controls deployed to protect data, applications, and the associated infrastructure of cloud computing. B. regulations such as FISMA, HIPAA, and SOX in the United States C. provisions and policies adopted by the network administrator
  • 14.
    What is Cloud Compliance A. Regulations regarding Cloud Security and Data Security B. An auditing service dedicated to cloud computing C. Enhancing Security in a network
  • 15.
    The average PCIDSS audit cost is $30K Per Year A. True B. False
  • 16.
    FISMA, HIPAA, and SOX are all Cloud Compliance Regulations A. True B. False
  • 17.
    Which companies that Offer Cloud Services are most affected by Cloud Compliance A. Large and mid-size companies B. Small Companies C. No one is affected