As one looks at the misconceptions and realities of compliance in cloud computing and virtualized environments, one must address and resolve security issues. The truth is that cloud computing is a great environment for data protection with proper safeguards in place.Bentley ProjectWise One must also correct the misconception that regulators are against cloud computing adoption.

There can still be many misconceptions around security and compliance in the cloud computing technology space. So what's the relevance?

The IT team failed to update or patch Apache Struts,Bentley BIM a system used to drive individual controversial agency records, which became an open window for attackers to gain full access without proper updates.

As one looks at the misconceptions and realities of compliance in cloud computing and virtualized environments, one must address and resolve security issues.BIM Viewer The truth is that cloud computing is a great environment for data protection with proper safeguards in place. One must also correct the misconceptions of regulators against cloud adoption.

Myth 1: Enterprise data centers are more secure than cloud computing

Among the industry media's views on cloud security, some argue that cloud computing does not have the right mechanisms to create a truly secure or compliant environment. It is believed that people should be more cautious about any data on servers in their own data centers. Through his assessment of traditional and cloud ecosystems, it was shown that cloud computing is more secure than local data centers.

In other words, cloud computing is more compliant than traditional data management centers through one of the most powerful, cutting-edge and reliable tools. Analysts predict that by 2020, the number of breached businesses suffered by basic education facilities-as-a-service network systems will be at least 60 percent lower than in traditional financial data technology center work environments.

Myth 2: Regulators Hate Cloud Computing

The virtualized design of cloud computing is increasingly accepted as a viable form of technology by the two standards organizations for cloud computing and U.S. federal government agencies. For example, the PCI Security Standards Council has issued guidelines for cloud computing.

The Department of Health and Human Services (HHS) has issued guidelines for HIPAA and cloud computing that apply to healthcare organizations and aftercare partners that inherit or process electronic protected health information (ePHI). These parameters are of particular interest because they represent an acceptance that cloud computing can meet the stringent privacy and security requirements of federal law and provide appropriate protections.

Myth 3:Compliance with cloud computing does not require corporate accountability.

Compliance remains a dual social responsibility between cloud computing technology service providers and the development of regulated technology companies. The PCI Guidance China Principles carries the stipulation that "Customers and cloud computing providers should require companies to agree on policies and procedures with consistent objectives for all information security education requirements, and should clearly define and understand the operational, management, and reporting responsibilities for each work requirement." This instructional language is similar to the concept of Business Associate Agreements (BAA) under HHS. These network agreements are critical to understanding and describing a role and responsibility.

Myth #4: Virtualization is the enemy of conformity

Cloud computing is virtual machines, but what about virtual machines created in traditional data center environments? Organizations can be fully compliant with cloud computing requirements if they meet the specific needs of the virtual environment.

For example, it's important to pay special attention to VM monitoring procedures because virtualization is a unique attack surface. Organizations should also be careful about mixing VMs with different trust levels, as intruders can use less secure VMs to gain access to sensitive data. Virtual environments can meet all major standards and requirements as well as physical setups.

Myth 5: Compliance is easy

The truth is that compliance is complex. It's important to carefully review all providers to help organizations protect compliance data. It's also critical to ensure that proper protections are in place, such as encryption and backups, as well as a clear understanding of processes, roles and responsibilities.

Cloud computing is now underway in China using compliant settings to improve security, which is in line with industry experts who believe that cloud computing science and technology are primarily applicable to any organization.

精選文章:

What is the use of BIM in design? How to develop to realize efficient management play!

Eight developmental features of BIM technology, how many of us do you know?

How much do you know about the use of BIM model?

Posted by: daboluo at 09:44 AM | No Comments | Add Comment
Post contains 744 words, total size 6 kb.