Tips

Tips

• Development of NIST cloud security guidelines a complex process

  Several public-private partnerships are working to develop specifications to support the NIST roadmap.  Continue Reading

• Using SSAE 16 standard, SOC reports to assess cloud provider security

  The SAS 70 report has been replaced by the SSAE 16, but how does it stack up as a tool to measure a provider’s security?  Continue Reading

• Massachusetts 201 CMR 17.00 and cloud services

  Organizations face a March 1 deadline for ensuring their cloud and other service providers comply with Massachusetts’ data protection regulation.  Continue Reading

• Are cloud providers HIPAA business associates?

  Deciding whether your cloud provider is a business associate comes down to a judgment call based on the type of cloud usage.  Continue Reading

• SaaS security: Weighing SaaS encryption options

  A look at SaaS encryption techniques and challenges.  Continue Reading

• The proposed EU data protection regulation and its impact on cloud users

  Cloud customers and cloud providers would face stricter data security requirements under draft European regulation.  Continue Reading

• Cloud content security: Understanding SaaS data protection options

  Forrester Research's Rick Holland examines transitioning to a cloud content security model, and explores today's SaaS data protection options.  Continue Reading

• VMware configuration management, patching best practices

  How to use vSphere 5 tools to streamline configuration and patch management.  Continue Reading

• Detecting VM sprawl in a private cloud

  Learn techniques and tools to track rogue images and inappropriate use.  Continue Reading

• Cloud outages and cloud computing breaches: Lessons learned

  Recent incidents illustrate the need for redundancy and provider security reviews.  Continue Reading

• Stepping carefully into health care cloud computing

  Health care providers must plan any cloud migration carefully to protect patient safety and maintain HIPAA compliance.  Continue Reading

• Cloud computing and security: It’s all about automation

  An API-driven strategy could streamline cloud security and improve security overall.  Continue Reading

• NIST guidance cites cloud security gaps, need for standards

  The NIST roadmap was designed to foster government cloud adoption but is helpful for private businesses as well.  Continue Reading

• How to evaluate virtual firewalls

  Enterprises have a lot of choice when it comes to virtual firewalls. Here’s what you should look for.  Continue Reading

• Cloud contracts: Cloud computing pricing

  The unpredictability of cloud service pricing can make budgeting difficult for CIOs and CISOs.  Continue Reading