Question

5 pages paper expected on the following topic:

-Review of security management to gain trust of cloud clients

Answer 1

Cloud computing is used to store, manage and process data in a private or public network involving remote servers. Cloud clients often use IaaS (Infrastructure as a Service), PaaS (Platform as a Service) and SaaS (Software as a Service) to manage and process data in a remote manner. Often security issues arise in such cloud platforms and security management plays a critical role in cloud computing and protecting the security of cloud client’s data.
Security management in the cloud is aimed at developing the trust and security of cloud clients. A review of various security management practices indicates that giving more control to cloud clients by being flexible helps to develop trust. The cloud clients are given full access to determine the permissions and grant access to their accounts. Most of the IT managers want to prevent a certain employee from getting access to confidential information and in a multinational company, managers do not want employees in one country to get access to vital information while providing access to employees in another country. Flexibility is the solution to such a situation of security management in cloud computing.
Organizations have established strong data governance strategy for security management to get the trust of cloud clients. The data governance strategy is aimed at reducing the security risks at each level to protect the integrity and confidentiality of data.
A security management review of various organizations reveals that reducing risks at technological, organizational, operations, data management and data governance are effective measures to earn the trust of the cloud clients.
Technological risks are reduced through API’s, IAM controls, upgrading infrastructure to manage security procedures and policies of the organization, central management of all users and managing infrastructure.
Organizational risks are reduced through proper documentation, roles and responsibilities description, integration of IT with human resource department, establishing good communication, employee training and providing organization access privileges.
Data management risks are reduced by complying with the legal requirements of government and employing SSL security mechanism for security management of data stored. Operations risks are reduced through a disaster recovery plan and business continuity measures.
Overall, the main responsibility of security management lies with the cloud service provider in reducing or eliminating the security risks associated with cloud computing. IT departments of various organizations ensure that the organization data stored in the cloud is safe and secure through the cloud service provider. The cloud service provider ensures the security management of cloud data despite several attacks from saboteurs and hackers.