Cloud hosting may be more cost-effective and efficient than non-cloud alternatives, but IT managers must evaluate whether it makes real business sense and ensure that it doesn't violate corporate security policies.

Editor's Note: This article is an introduction to the white paper "Security Considerations for the Cloud" available free to download from the MC White Paper Center.

Security concerns abound when it comes to cloud computing. If you do any research on the concerns associated with doing business in the cloud, a top concern—if not the top concern—is always data security and privacy.  Are these concerns justified, or is it simply the fear of the unknown? Let's take a look.

Considerations

Just as you do when you take advantage of any new technology, you have to decide whether the new technology is just "cool" or it actually meets your business needs. When it comes to cloud computing, it has the potential to save significant money over hosting your own computing resources—in terms of hardware, support of that hardware, and software licenses. But just because it saves money does not necessarily mean that it will meet your business requirements. Specifically, you must examine both the technology and the technology provider to ensure they can meet your organization's security policy requirements, legal requirements for issues such as discovery of information when in a lawsuit, and compliance requirements for all of the laws and regulations with which your organization must comply.

Much of whether cloud computing meets your business requirements depends on the type of data being stored, manipulated, or shared in the cloud. If you're thinking of using the cloud to manage Personally Identifiable Information (PII), healthcare information, or Payment Card Industry (PCI) data, you'll want to look at the requirements your organization's security policy places on this type of data.

 

Carol Woodbury is IBM i Security SME and Senior Advisor to Kisco Systems, a firm focused on providing IBM i security solutions. Carol has over 30 years’ experience with IBM i security, starting her career as Security Team Leader and Chief Engineering Manager for iSeries Security at IBM in Rochester, MN. Since leaving IBM, she has co-founded two companies: SkyView Partners and DXR Security. Her practical experience and her intimate knowledge of the system combine for a unique viewpoint and experience level that cannot be matched.

Carol is known worldwide as an author and award-winning speaker on security technology, specializing in IBM i security topics. She has written seven books on IBM i security, including her two current books, IBM i Security Administration and Compliance, 3^rd Edition and Mastering IBM i Security, A Modern, Step-by-Step Approach. Carol has been named an IBM Champion since 2018 and holds her CISSP and CRISC security certifications.

---

MC Press books written by Carol Woodbury available now on the MC Press Bookstore.

		IBM i Security Administration and Compliance: Third Edition Don't miss the newest edition by the industry’s #1 IBM i security expert. List Price $71.95 Now On Sale
		Mastering IBM i Security Get the must-have guide by the industry’s #1 security authority. List Price $49.95 Now On Sale