Manage

Evaluating Cloud Computing Providers

• 3 steps to ensure data sovereignty in cloud computing

  Data sovereignty regulations combined with a tsunami of data growth and increased cloud usage have created a perfect storm for enterprises. Follow these steps to ensure compliance. Continue Reading

• How Azure, AWS, Google handle data destruction in the cloud

  Data destruction is a topic that has been poorly covered until recently. Regardless of which cloud service provider you use, this review of the top three CSPs' data destruction documentation should improve your due diligence. Continue Reading

• Multi-cloud security strategies rely on visibility, uniformity

  More companies are instituting a multi-cloud strategy that creates unforeseen security challenges. In this tip, get answers to the top multi-cloud security strategy questions. Continue Reading

• Juggling a multi-cloud security strategy takes work

  Enterprise security best practices must account for changes in cloud landscapes. Learn how to overcome such challenges and bolster multi-cloud security with technology and policy. Continue Reading

• How to beef up S3 bucket security to prevent a breach

  Security teams have plenty of tools at their disposal to help their organizations achieve and maintain S3 bucket security. Learn about the threats and best practices to stay safe. Continue Reading

• Multi-tenant cloud security requires enterprise awareness

  Moving to a multi-tenant cloud environment can be daunting, but many of the usual risks are legacy issues. Expert Rob Shapland discusses what to know before moving.Continue Reading

• Adding a cloud security policy to your overall IT defense strategy

  Enterprises should consider a cloud security policy in the wake of more services moving to the cloud. Expert Mike Chapple examines how IT security standards can be reworked.Continue Reading

• Top AWS security features organizations need to know about

  As cloud security becomes more essential, Amazon security features become more important. Expert Matthew Pascucci takes a look at specific AWS security products available today.Continue Reading

• What cloud security controls are best for due diligence?

  With increasing use of cloud sending more enterprise data outside of the organization's control, due diligence is crucial. Expert Dan Sullivan offers advice on how to get it right.Continue Reading

• How to perform cloud-based application analysis

  Before using cloud-based applications, it's important for enterprises to know their implications. Here are some static and dynamic application analysis techniques that can help.Continue Reading

• Should open source virtualization software be avoided?

  Xen bugs have been popping up, creating concerns about the security of open source virtualization software. Expert Dan Sullivan explains why open source is not to blame for security pitfalls.Continue Reading

• How to craft an enterprise cloud change management policy

  Though few enterprises have one, a cloud change management policy can be a lifesaver when confronted with transitions and security risks.Continue Reading

• Create a cloud exit strategy to prepare for the unknown

  What happens if your service provider unexpectedly shuts down? Or drops mission-critical services? Expert Ed Moyle explains the benefits of cloud exit strategies and how to build one for your enterprise.Continue Reading

• Container security: Is CoreOS Rocket better than Docker?

  Expert Dan Sullivan takes a look at how CoreOS Rocket and Docker differ security-wise, and how to decide which to deploy in your enterprise.Continue Reading

• Can AWS security features help HealthCare.gov security?

  Moving HealthCare.gov onto AWS helped the government improve the safety of the site. Expert Dan Sullivan explains which AWS security features were most beneficial.Continue Reading

• Securing data and ensuring compliance in cloud-based services

  Cloud-based services are already widely in use in enterprises, but are your corporate data and systems both secure and compliant with industry regulations?Continue Reading

• Three steps to secure cloud database services in the enterprise

  Database as a service may be easy to deploy and easy to manage, but it is not without its security challenges. Expert Ed Moyle outlines three major steps enterprises should take to secure cloud database services in the enterprise.Continue Reading

• Three steps to finding the ideal cloud data archiving services

  While cloud data archiving services can be highly beneficial, careful consideration must be taken to find the service that best suits an enterprise's needs. Expert Ed Moyle outlines three steps to find your ideal cloud data archiving service.Continue Reading

• Why would public cloud providers turn off customer cloud accounts?

  Public cloud providers reserve the right to shut off vulnerable cloud accounts, but how does it work? Expert Dan Sullivan explains.Continue Reading

• Keep credentials safe despite insecure mobile cloud backup services

  A recent study revealed app developers that use mobile cloud backup services put user credentials at risk. Expert Rob Shapland explains how to defend against the threat.Continue Reading

• Private cloud sprawl: How cloud consolidation can improve security

  Vast private cloud infrastructure can be detrimental to an organization. Expert Ed Moyle looks at how and when to consider cloud consolidation to reduce cloud creep.Continue Reading

• IaaS management: How much do you know?

  This IaaS management quiz will test what you have learned from the tip, videos and podcast in this Cloud Security School.Continue Reading

• Best practices for cloud-based identity and access management

  While using the cloud for identity and access management can simplify the task, it is critical to consider a number of factors when implementing cloud IAM products and services. Expert Dave Shackleford explains.Continue Reading

• Cloud forensics: An intro to cloud network forensic data collection

  This introduction to cloud forensics explores the challenges of collecting cloud network forensic data and finding a provider to support the process.Continue Reading

• Cloud stack security: Understanding cloud VM risk scenarios

  Expert Dave Shackleford explains how cloud stack security must withstand a variety of a current and emerging threats, particularly cloud VM risk.Continue Reading

• How to assess cloud risk tolerance

  Assessing risk tolerance is a key part of a cloud risk management strategy. In this tip expert Ed Moyle explains how to assess cloud risk tolerance.Continue Reading

• SOC 2 reports: The de facto cloud provider security standard

  They're not perfect, but SOC 2 reports are becoming the baseline for cloud provider security assessments. Expert Dave Shackleford discusses.Continue Reading

• Amazon S3 encryption overview: How to secure data in the Amazon cloud

  Learn details for employing Amazon S3 encryption features. Expert Dave Shackleford compares S3 encryption to other cloud provider offerings.Continue Reading

• Cloud API security risks: How to assess cloud service provider APIs

  The CSA says cloud API security is a top threat to cloud environments. Expert Dave Shackleford explains how to assess the security of providers' APIs.Continue Reading

• How to overcome unique cloud-based patch management challenges

  Expert Dave Shackleford discusses how patch management differs in a cloud environment and provides tips for dealing with new patching obstacles.Continue Reading

• Countering cloud computing threats: Malicious insiders

  Learn the questions to ask in order to vet your cloud provider’s hiring practices and administrative controls.Continue Reading

• Using SSAE 16 standard, SOC reports to assess cloud provider security

  The SAS 70 report has been replaced by the SSAE 16, but how does it stack up as a tool to measure a provider’s security?Continue Reading

• Cloud risk assessment and ISO 27000 standards

  How do you measure the trustworthiness of a cloud service provider? The ISO 27000 security series can help.Continue Reading

• A framework for evaluating cloud computing risk

  One approach for building a customized, due-diligence process for evaluating cloud provider risk and presenting the results to management.Continue Reading