Episode #97 Head in the Clouds

"Why going to the cloud means more work for security not less, shared responsiblity is 100% your problem <br />- Am I going to treat this like a green field, or the next dumpster to throw the data, systems, and stuff we can’t deal with in real life? <br />- What are my expectations? (planning, timing, longevity, migration, business, etc.)<br />- Will we use it as an enclave to simply separate developers from anything else, or vice-versa, OR will we take a stance and work with ALL the teams to build it out successfully?<br />- DOES my cloud governance align with the rest of my business and technology policies and goals?<br />- AM I willing to implement the recommendations that most cloud providers offer TO make things safer and more secure?<br />- Can I manage the audit and compliance of a new world, and HOW will I integrate it?<br />- Speaking of integration, WILL my business and technology actually function IN/WITH the cloud?<br />- The cloud is MUCH more than someone else’s computers OR a spare data centre, but it still has to live somewhere, so WHERE does it live, and HOW do you get to it?<br />- Where’s YOUR staff, how do they talk with the cloud, what controls, management, etc.<br />- How much control will I have over my data in YOUR cloud?<br />- Who’s got access TO my little slice of the cloud, hardware, system, bare metal, data, etc.<br />- How do I (OR who’s going to) monitor YOUR cloud infrastructure, and MY systems for access, etc.<br /> - And if it’s on your side, do I get to see the logs<br /> - What’s the charges FOR monitoring<br /> - SLA’s etc?<br />- Who’s managing the encryption for my data, if it’s YOU then where’s my key’s if it’s me what help etc.<br />- I don’t want to catch cooties from YOUR other clients, how to you maintain separation/segmentation?<br />- What options exist to backup my data, my configs, and what happens if YOUR systems go down?<br />- What areas of the technology, services, systems, and environments fall into shared responsibilities?<br /> - Who has to deal