All Articles

Cloud Security Alliance Unveils Governance, Risk Management and Compliance (GRC) Stack

Press Release Published: 11/17/2010

GRC Stack Provides Toolkit for Key Stakeholders to Implement and Assess Security of Cloud Environments Orlando, FL – CSA Congress – November 17, 2010 ** – The Cloud Security Alliance (CSA) today announced the availability of the CSA Governance, Risk Management and Compliance (GRC) Stack, a s...

Cloud Security Alliance announces that CloudAudit has become an official project of the CSA

Press Release Published: 10/27/2010

CloudAudit to Enable Automation and Integration of CSA Research into Technology Solutions San Francisco, CA – October 27, 2010 – The Cloud Security Alliance (CSA) today announced that CloudAudit has become an official project of the CSA, with the joint mission of promoting the use of best pr...

Cloud Security Alliance announces availability of Consensus Assessments Initiative Questionnaire

Press Release Published: 10/12/2010

London, UK – October 12, 2010 (RSA Europe Conference) – The Cloud Security Alliance today has announced the release of version 1.0 of the Consensus Assessments Initiative Questionnaire. The questionnaire can be downloaded at www.cloudsecurityalliance.org/cai. The Consensus Assessments Initiative ...

Cloud Security Alliance announces strategic partnership with HISPI

Press Release Published: 09/21/2010

Strategic Partnership: HISPI & CSA LITHONIA, GA — September 21, 2010 – The Holistic Information Security Practitioner Institute (HISPI), the worldwide visionary in Governance, Risk, and Compliance (GRC) thought leadership, today announced today a strategic partnership with the Cloud Se...

Cloud Security Alliance Seeks Community Input for Top Threats Report

Press Release Published: 09/09/2010

Version 2.0 slated for release in late 2010 San Francisco, CA – September 9, 2010 – The Cloud Security Alliance is now soliciting input for Version 2.0 of its "Top Threats to Cloud Computing Report." This pending revision is the first to Version 1.0, which was published and announced earlier t...

Cloud Security Alliance announces availability of Certificate of Cloud Security Knowledge (CCSK)

Press Release Published: 09/01/2010

Cloud Security Alliance’s User Certification Now Available Certificate of Cloud Security Knowledge (CCSK) Aimed at Promoting Secure Cloud Computing for All San Francisco, CA – September 1, 2010 – The Cloud Security Alliance’s Certificate of Cloud Security Knowledge (CCSK) is now open for testi...

Cloud Security Alliance announces the world's first user certification for cloud security

Press Release Published: 07/28/2010

Cloud Security Alliance Sets Industry Standard with New User Certification Certificate of Cloud Security Knowledge (CCSK) Aimed at Promoting Secure Cloud Computing for All Las Vegas, NV – July 28, 2010 - The Cloud Security Alliance today unveiled the industry’s first user certification program ...

Multi-tenancy and bad landlords

Blog Published: 06/13/2010

So there's been a lot of discussion about multi-tenancy recently and what it means for cloud providers and users. To put it simply: multi-tenancy is highly desirable to providers because they can provide a service or a platform (such as WordPress) and cram a kajillion users into it without having...

Backups and security for cloud applications

Blog Published: 06/10/2010

Backups, the thing we all love to hate, and hate to love. Recreating data is rarely cheap, especially if it involves detailed analysis and combination. So we back it up.Take for example this blog, it's based on WordPress; which is about as standard and supported as you can get for a blog. Backing...

Put your chauffeur on the upgrade treadmill

Blog Published: 06/03/2010

I don't know if anyone here remembers the "Billion Dollar Brain" by Len Deighton. One scene that stuck with me is General Midwinter making his minion (a chauffeur or bodyguard, I can't remember which) do his time on the exercise bike for him and asking "how many miles did we bike today?"Wouldn't ...

News roundup for May 28 2010

Blog Published: 05/28/2010

Financial Services Like The Cloud, Provided It's Private - http://www.informationweek.com/cloud-computing/blog/archives/2010/05/financial_servi.htmlNovell Identity Manager extended to cloud - http://www.computerworlduk.com/technology/applications/software-service/news/index.cfm?newsid=20357Amazon...

Software evaluation 2.0 ?

Blog Published: 05/27/2010

I spend a lot of time evaluating software; for product reviews, to see which versions are vulnerable to various exploits and sometimes just to see if I should be using it. Most often this looks something like: find the software, download it, find the install and configuration documents, walk thro...

Counterfeit gear in the cloud

Blog Published: 05/26/2010

One of the best and worst things about outsourced cloud computing (as opposed to in house efforts) is the ability to spend more time on what is important to you, and leave things like networking infrastructure, hardware support and maintenance and so on to the provider. The thing I remember most ...

Cloud Security Alliance announces appointment of general counsel Francoise Gilbert

Press Release Published: 05/24/2010

Noted Attorney and Author Francoise Gilbert to Manage Cloud Security Alliance's Legal Affairs Palo Alto, California – May 24, 2010 – The Cloud Security Alliance today has announced that Francoise Gilbert, founder and managing director of the IT Law Group, has accepted the appointment as General ...

Amazon AWS - 11 9's of reliability?

Blog Published: 05/24/2010

Amazon recently added a new redundancy service to their S3 data storage service. Amazon now claims that data stored in the "durable storage" class is 99.999999999% "durable" (not to be confused with availability - more on this later). "If you store 10,000 objects with us, on average we may lose ...