The document discusses cloud computing security strategies and IBM's approach. It recommends identifying important data, understanding different cloud models and workloads, and building security into the cloud fabric. IBM's security portfolio applies workload-driven security across private, public and hybrid clouds. The document provides guidance on preparing to move workloads to the cloud securely.

2. Choosing the Right Security Strategy for Cloud Computing Harold Moss CTO/Chief Architect Cloud Security Strategy

5. Introduction to Cloud Computing

11. “ The Cloud has the potential to be more secure than traditional environments”

14. What’s Important?

15. Can you identify your Important Data?

16. http://creativecommons.org/licenses/by/2.5/

27. There are Multiple Delivery Models for Clouds

28. And Multiple Deployment Paths…

29. What Other Vendors Tell People About their Clouds and Their Security

30. Our Perspective

31. Our Approach to the Cloud

32. Security by Design: “Building Security into the fabric of the Cloud”

33. Just Like there are different Clouds, there are different workloads

34. Workload Driven: “Relevant security not just Fluff”

35. Service Enabled: “Building Better Walls”

36. Innovation Powered: “Creating Security for tomorrow”

37. The IBM Security Portfolio

38. Applying Workload Driven Security to a Private Cloud Intrusion Prevention Monitoring Access Management Data Security Application Evaluation Database Design/Test Virtual Server Protection Security Event Monitoring Provisioning

39. Example: Cloud Security in the Public Space Firewall IPS Data Protection Access Identity Federated Identity VM Protection Patch Mgmt. Configuration Mgmt. Security Event Log Mgmt. Audit Vulnerability Mgmt.

40. Hybrid Cloud Scenario

41. New Security Capabilities for 2011

42. Preparing to Move to the Cloud “ Cloud Computing” is complex where to begin: Engage Experts who have had prior success in the cloud. Establish a set of measures that clarify what a successful engagement in the cloud would look like. If externally hosting your cloud ensure that your vendor is reliable Identify what workloads you are most comfortable with don’t just dive in. Determine the appropriate security for your workload, and leverage managed services where possible Build Consensus upfront, one sided decisions tend to fail in the cloud

43. IBM Cloud Security Guidance Based on cross-IBM research and customer interaction on cloud security Highlights a series of best practice controls that should be implemented Broken into 7 critical infrastructure components: Building a Security Program Confidential Data Protection Implementing Strong Access and Identity Application Provisioning and De-provisioning Governance Audit Management Vulnerability Management Testing and Validation

44. Cloud Security Whitepaper Trust needs to be achieved, especially when data is stored in new ways and in new locations, including for example different countries. This paper is provided to stimulate discussion by looking at three areas: What is different about cloud? What are the new security challenges cloud introduces? What can be done and what should be considered further? http://www-03.ibm.com/press/us/en/attachment/32799.wss?fileId=ATTACH_FILE1&fileName=10-0861_US%20Cloud%20Computing%20White%20Paper_Final_LR.pdf

45. Why IBM IBM is the only company with the Breadth and depth of products, technologies, services and business partners to provide end-to-end security. IBM has over 200 Security related products and over 3500 Highly Skilled Security professionals IBM has over 40 years of security development and innovation experience IBM has six worldwide research labs innovating security technology and nine security operations centers. IBM analyzes more than 13 billion security events on behalf of its clients and block more than 150 million attacks each day. IBM is one of the most trusted companies in the World.