Related Links

Related Stories

  • Cloud computing in the spotlight
    Cloud computing promises cost savings and productivity benefits, but how secure is the technology? Neil Stinchcombe investigates
  • Webroot joins the EuroCloud cloud services community
    Fresh from unveiling a number of cloud security services, notably a software-as-a-service (SaaS) email archiving solution late last year, Webroot has joined EuroCloud, which is billed as Europe's most influential cloud computing network.
  • Microsoft updates its software development best practices to support secure cloud environments
    According to Steve Lipner, senior director of security engineering strategy with Microsoft Trustworthy Computing Group, software development and secure cloud environments are all about best practice.
  • Comment: Protecting privacy in the cloud
    Cloud computing is rapidly emerging to complement the traditional model of software running on, and data being stored on, PCs and servers, especially as IT departments look to drive efficiencies in the current economic climate. However, consumer advocates, organisations, and regulators are raising a number of important privacy questions concerning how information and interactions are handled in this environment.
  • Forrester questions the security of cloud computing
    With the economic downturn, cloud computing is seen as a way to improve operational efficiency, reduce headcounts and help with the bottom line, but according to the report from Massachusetts-based Forrester Research on cloud computing, organisations should not jump on the ‘cloud wagon’ before considering security and privacy concerns.

News

Jericho Forum links with Cloud Security Alliance

27 May 2009

Hard on the heels of unveiling Cloud Cube, its four-dimensional best practice model for cloud computing security in April, security industry association the Jericho Forum has linked with the Cloud Security Alliance (CSA), a not-for-profit vendor group.

The aim of the link-up, says Paul Simmonds - a founding member of the Jericho Forum and who will act as one of the four liaison members between the two groups - will be to foster a set of best practices for cloud computing security.

The link between the two organisations has been in development for around nine months and builds on the extension of the Jericho Forum's secure de-perimeterisation ethos into the cloud environment - the Cloud Cube model - which was announced at the RSA conference in April.

Simmonds says that the extension of its IT security best practice approach in the cloud is an evolution, rather than a revolution, for the Jericho Forum.

"If you've been listening to our comments and best practices on open collaborative working and de-perimeterisation over the last four years, then your organisation's security model will be ready for the shift to cloud computing."

Under the best practices link-up between the forum and the CSA, each organisation will have two liaison members - one primary, one secondary - to co-ordinate their group's respective efforts.

Both groups, says Simmonds, have a single goal, namely to help businesses understand the opportunity posed by cloud computing and encourage common and secure cloud practices.

"If you look at the axes of the Cloud Cube model, the Z axis becomes the architecture when you are dealing with the cloud. Using this approach to defining the cube model allows you to extend the concept - which helps in the planning stages of IT security - into the cloud computing environment."

In parallel with the moves to promote cloud computing at the Jericho Forum, the CSA plans to revise its guidelines later in the year, so bringing it more closely into line with Jericho's long-term vision.

The plan is for the CSA's new guidelines to include more advice on data privacy.

 

 

This article is featured in:
Application Security Internet and Network Security Wireless and Mobile Security

 

Comment on this article

You must be registered and logged in to leave a comment about this article.