As many organizations shift elements of their IT infrastructures to the public cloud, they must be aware of the new risks this move carries. Often, organizations make the false assumption that, in outsourcing the ownership of hardware and data center operations, they have also outsourced security to the cloud service provider.

While this is partially true because the organization is no longer required to deal with physical and infrastructure security, stakeholders are still responsible for compliance, data security, application security and possibly platform security if they are managing their own virtual machines or containers. A CSP’s documentation of the shared responsibility model will explain in more detail where it delineates responsibility.

In my previous blog post, I discussed the importance of using the shared responsibilities model and mapping out, between you and the cloud vendor, who owns which parts of the security of your data. This post will continue that conversation and provide guidance on standardizing your cloud security tools. Necessary Security Resources There are three…

Cloud and security — are they oxymorons or synonymous with each other? Actually, they’re both. Assuring the security of your cloud environment starts with knowing who is doing what. It begins by mapping everyone’s area of responsibilities; the shared responsibility model in cloud computing. Shared responsibility is a key part of any cloud discussion and…