In mid-December 2011, Microsoft Corporation made some notable steps towards compliance with EU and US standards for data protection and security. This addressed the mounting tension around cloud services, caused by a number of high-profile data breaches and security scares that have plagued the cloud environment over the last year or so. This article takes [...]
Whether an organization is considering SaaS (software as a service) applications, PaaS (platform as a service) models or IaaS (infrastructure as a service) options, it’s pretty much a given that security and compliance issues will be priority considerations. However, potential cloud service customers do run into trouble trying to determine if the security and audit [...]
In this article, the baked-in and bolted-on approaches to secure architecture are examined, especially in light of recent standards pushing for a baked-in approach to cloud security. The article also discusses the recently-announced Cloud First Policy, developed by the US federal government to ensure that baked-in security is a requirement of its agencies and departments.