Tips

Tips

• A legal analysis of the updated EU General Data Protection Regulation

  The updated EU General Data Protection Regulation raises breach penalties for enterprises operating in the EU. Attorney Francois Gilbert explains.  Continue Reading

• PCI DSS 3.0: Three key requirements to maintain cloud compliance

  Ed Moyle details the three most important PCI DSS 3.0 requirements that enterprises must abide by to ensure PCI compliance in the cloud.  Continue Reading

• The definition of cloud computing: Why it matters to IT security

  So, what is cloud computing anyway? The definition isn't always clear. Ravila Helen White helps enterprise security professionals figure it out.  Continue Reading

• CSA STAR analysis: Processes for cloud provider security evaluation

  Security expert Ed Moyle explains the CSA STAR certification program and how enterprises can use it to improve cloud provider security evaluations.  Continue Reading

• Multifactor authentication in the cloud: Assessing provider services

  Expert Dave Shackleford discusses authentication in the cloud, including details on the multifactor authentication services of major cloud providers.  Continue Reading

• Five cloud computing security concerns and the products tackling them

  Expert Ed Moyle analyzes five key cloud computing security concerns vexing enterprises and the emerging products that are attempting to address them.  Continue Reading

• Managing virtualization machine security for in-house IaaS deployments

  Dave Shackleford outlines critical security best practices for virtual machine instances created for an in-house IaaS deployment.  Continue Reading

• Overcoming big data security challenges in cloud environments

  Expert Dave Shackleford distills advice from the CSA on the most pressing big data security challenges for enterprises in cloud environments.  Continue Reading

• VMware NSX platform: Implications for network virtualization security

  Expert Paul Kirvan discusses the debut of the VMware NSX platform and what it means to both network virtualization security and cloud security.  Continue Reading

• Ensuring cloud application security amid a cloud application migration

  Expert Paul Kirvan explains how to conduct a security profiling exercise to ensure application security is part of a cloud application migration plan.  Continue Reading

• Five things you can learn from the NASA cloud computing audit report

  NASA recently released a cloud computing audit report with best practices enterprises can use to assess and improve their cloud governance practices.  Continue Reading

• Cloud stack security: Understanding cloud VM risk scenarios

  Expert Dave Shackleford explains how cloud stack security must withstand a variety of a current and emerging threats, particularly cloud VM risk.  Continue Reading

• How to assess cloud risk tolerance

  Assessing risk tolerance is a key part of a cloud risk management strategy. In this tip expert Ed Moyle explains how to assess cloud risk tolerance.  Continue Reading

• Gauging cloud forensics: Ten questions to ask cloud providers

  Drawing from recent CSA guidance, expert Dave Shackleford lists key questions to ask cloud providers to determine their cloud forensics capabilities.  Continue Reading

• Storing data in the cloud: Addressing data location security issues

  When storing data in the cloud, ignoring the physical location of cloud data is a major mistake. Learn how to prevent data location security issues.  Continue Reading