By using this site, you agree to the Privacy Policy and Terms of Use.
Accept
SmartData Collective
  • Analytics
    AnalyticsShow More
    predictive analytics in dropshipping
    Predictive Analytics Helps New Dropshipping Businesses Thrive
    12 Min Read
    data-driven approach in healthcare
    The Importance of Data-Driven Approaches to Improving Healthcare in Rural Areas
    6 Min Read
    analytics for tax compliance
    Analytics Changes the Calculus of Business Tax Compliance
    8 Min Read
    big data analytics in gaming
    The Role of Big Data Analytics in Gaming
    10 Min Read
    analyst,women,looking,at,kpi,data,on,computer,screen
    Promising Benefits of Predictive Analytics in Asset Management
    11 Min Read
  • Big Data
  • BI
  • Exclusive
  • IT
  • Marketing
  • Software
Search
© 2008-23 SmartData Collective. All Rights Reserved.
Reading: The Culture of Cloud in an Information Security World
Share
Notification Show More
Latest News
ai software development
Key Strategies to Develop AI Software Cost-Effectively
Artificial Intelligence
ai in omnichannel marketing
AI is Driving Huge Changes in Omnichannel Marketing
Artificial Intelligence
ai for small business tax planning
Maximize Tax Deductions as a Business Owner with AI
Artificial Intelligence
ai in marketing with 3D rendering
Marketers Use AI to Take Advantage of 3D Rendering
Artificial Intelligence
How Big Data Is Transforming the Maritime Industry
How Big Data Is Transforming the Maritime Industry
Big Data
Aa
SmartData Collective
Aa
Search
  • About
  • Help
  • Privacy
Follow US
© 2008-23 SmartData Collective. All Rights Reserved.
SmartData Collective > IT > Cloud Computing > The Culture of Cloud in an Information Security World
Cloud Computing

The Culture of Cloud in an Information Security World

ryanward
Last updated: 2014/05/30 at 5:50 PM
ryanward
5 Min Read
Image
SHARE

ImageWorking in the information security field, I obviously hear a lot about “the cloud” and its many security implications.

Contents
Cloud Information Security Cultural TransitionCloud Information Security Maturation

ImageWorking in the information security field, I obviously hear a lot about “the cloud” and its many security implications. There are definitely valid security concerns associated with cloud computing, but isn’t the entire industry of “information security” based on the concept of “securing information” no matter where it resides (including the cloud)? Security professionals need to accept the cloud as simply another platform that must be secured in order to protect information. Rather than talk about security controls though, I thought I would step back and first focus on the journey many organizations take to cloud adoption since security fears and IT change still appear to be hurdles.

The differences between cloud adoptions from one organization to another are very interesting to me. Working with a variety of businesses, I have learned that each takes its own approach to embracing cloud solutions without a 100% direct correlation between specific industries or size. This phenomena could be the result of the personality and experience of the current IT and Security leaders in place, or simply the culture of an organization who likes to do everything themselves vs. outsource capabilities. While there are obviously some similarities between cloud acceptance and organization type, corporate culture seems to be the larger variable in play for the adoption of cloud.

Cloud Information Security Cultural Transition

This cloud culture seems to apply to any cloud solution decision, whether IaaS, PaaS or SaaS. Organizations are either all-in with cloud, dipping their toes in the water with cloud or avoiding cloud altogether. No matter what your current culture, cultures can change over time, and I believe there is a logical transition that can occur to safely migrate to a culture of cloud acceptance. Just as CEOs can strive to change corporate culture within their organization to meet specific goals, CISOs and CIOs can evolve IT culture to help meet business goals as well. However, this should not be a forced migration because security issues as well as operational issues can occur. Both IT and Information Security capabilities need time to evolve and mature. As cloud culture evolves and matures within an organization, start with smaller initiatives and grow from there.

More Read

cloud data security in 2023

Top Tools for Your Cloud Data Security Stack in 2023

Businesses Must Cope with the Benefits and Risks of Cloud Computing
Cloud-Centric Companies Discover Benefits & Pitfalls of Network Relocation
Optimizing Cost with DevOps on the Cloud
Cloud Technology Advances Make Telecommuting Highly Viable

Successful transition to a cloud culture should follow a path that is driven by risk-based decisions where low-risk decisions are made first. If you are part of an organization who chooses not to invest in any cloud-based technologies, a great way to become comfortable with the concept of cloud (with minor risk) is to select a SaaS solution that contains minimal or no sensitive data. By starting down this path, you can develop information security processes to review cloud vendors and become comfortable with the overall concept of cloud.

Cloud Information Security Maturation

When it comes to securing information, using a framework such as the Cloud Security Alliance Cloud Controls Matrix can really help build information security competencies without reinventing the wheel. Vendor due diligence is critical. Information security leadership skills are required to influence both vendors and internal business resources to modify processes to ensure security is realized.

If the initial Software as a Service solution goes smoothly, other SaaS solutions should be entertained with increasing risk and correspondingly increasing maturity around information security cloud management practices. At this stage, the business and IT operations should be over the hump of the cloud/no cloud barrier and further investments in cloud solutions can be pursued in line with your growing maturity of IT and Security cloud capabilities.

Obviously, low-risk choices around IaaS and PaaS could also be entertained if they pose no direct risk to the organization, but my experience has seen most organizations begin to accept SaaS solutions first, which then corresponds to a gradual culture swing which allows information security departments to adapt slowly and confidently. With the initial barrier broken, IaaS and PaaS can be introduced with minimal trepidation.

Yes, there are risks with cloud, just like there are risks with internal systems, but cloud initiatives are here to stay. Therefore, every organization needs to adapt and change their approach to IT and security in order to safely reap the benefits. Begin the journey to the cloud by first engaging in low-risk solutions and grow from there.

ryanward May 30, 2014
Share this Article
Facebook Twitter Pinterest LinkedIn
Share

Follow us on Facebook

Latest News

ai software development
Key Strategies to Develop AI Software Cost-Effectively
Artificial Intelligence
ai in omnichannel marketing
AI is Driving Huge Changes in Omnichannel Marketing
Artificial Intelligence
ai for small business tax planning
Maximize Tax Deductions as a Business Owner with AI
Artificial Intelligence
ai in marketing with 3D rendering
Marketers Use AI to Take Advantage of 3D Rendering
Artificial Intelligence

Stay Connected

1.2k Followers Like
33.7k Followers Follow
222 Followers Pin

You Might also Like

cloud data security in 2023
Cloud Computing

Top Tools for Your Cloud Data Security Stack in 2023

7 Min Read
cloud computing benefits and risks
Cloud Computing

Businesses Must Cope with the Benefits and Risks of Cloud Computing

9 Min Read
cloud-centric companies using network relocation
Cloud Computing

Cloud-Centric Companies Discover Benefits & Pitfalls of Network Relocation

5 Min Read
DevOps on cloud
Development

Optimizing Cost with DevOps on the Cloud

7 Min Read

SmartData Collective is one of the largest & trusted community covering technical content about Big Data, BI, Cloud, Analytics, Artificial Intelligence, IoT & more.

ai in ecommerce
Artificial Intelligence for eCommerce: A Closer Look
Artificial Intelligence
AI chatbots
AI Chatbots Can Help Retailers Convert Live Broadcast Viewers into Sales!
Chatbots

Quick Link

  • About
  • Contact
  • Privacy
Follow US

© 2008-23 SmartData Collective. All Rights Reserved.

Removed from reading list

Undo
Go to mobile version
Welcome Back!

Sign in to your account

Lost your password?