cloud computing security risks or opportunities

37
CLOUD COMPUTING Security Risks or Opportunities? Catalin Paunescu Oct 02 nd , 2013

Upload: se-cts-cert-gov-md

Post on 18-Nov-2014

326 views

Category:

Technology


0 download

DESCRIPTION

CLOUD COMPUTING Security Risks or Opportunities? Catalin Paunescu Star Storage

TRANSCRIPT

Page 1: CLOUD COMPUTING Security Risks or  Opportunities

CLOUD COMPUTINGSecurity Risks or Opportunities?Catalin PaunescuOct 02nd , 2013

Page 2: CLOUD COMPUTING Security Risks or  Opportunities

TODAY, IT’S ALL ABOUT ...

Page 3: CLOUD COMPUTING Security Risks or  Opportunities

Nu putem sa nu vorbim de ...

Page 4: CLOUD COMPUTING Security Risks or  Opportunities

The ECONOMY - BEFORE and AFTER

Page 5: CLOUD COMPUTING Security Risks or  Opportunities

People - BEFORE and AFTER

DoingNot

Doing

Page 6: CLOUD COMPUTING Security Risks or  Opportunities

Doing

It is not only about technology.

It is about PEOPLE and attitude to change!

Page 7: CLOUD COMPUTING Security Risks or  Opportunities

EVERYBODY SPEAKS ABOUT ...

Page 8: CLOUD COMPUTING Security Risks or  Opportunities

Everybody speaks about …

Page 9: CLOUD COMPUTING Security Risks or  Opportunities

Optimistic vs. Pessimistic Approach

Page 10: CLOUD COMPUTING Security Risks or  Opportunities

It’s all about the perspective …

Page 11: CLOUD COMPUTING Security Risks or  Opportunities

Enjoy the journey to the CLOUD!

• Reduce IT infrastructure costs

• 0 (zero) initial investment – use

your capital for core business, not

for IT infrastructure investments

• On-Demand - Pay just for what you need and only when you need

• Fast & Easy implementation – self-service

• Always ON / Available Everywhere

• Top Performance / Top Security

Page 12: CLOUD COMPUTING Security Risks or  Opportunities

BEWARE !!!

•Security issues

•Performance

•Availability

•Losing Control

•Cutting Jobs

Page 13: CLOUD COMPUTING Security Risks or  Opportunities

CLOUD COMPUTINGLet’s talk about risks!

Page 14: CLOUD COMPUTING Security Risks or  Opportunities

CLOUD COMPUTING – How big are the risks?

Page 15: CLOUD COMPUTING Security Risks or  Opportunities

What about the risks of “NOT DOING?”

Page 16: CLOUD COMPUTING Security Risks or  Opportunities

Optimistic vs. PessimisticWhat about the realists?

Page 17: CLOUD COMPUTING Security Risks or  Opportunities

CLOUD COMPUTING – How big are the risks?

“52% Business Executives Worried About Security of Cloud Storage but 65% Use It “Survey from SafeNet Labs

Page 18: CLOUD COMPUTING Security Risks or  Opportunities

CLOUD COMPUTING – How big are the risks?

Page 19: CLOUD COMPUTING Security Risks or  Opportunities

It’s all about execution, so …You should check the reality

Page 20: CLOUD COMPUTING Security Risks or  Opportunities

WHAT Cloud Computing should deliver?

• Reduce IT infrastructure costs

• 0 (zero) initial investment – use your capital

for core business, not for IT infrastructure

investments

• On-Demand - Pay just for what you need and

only when you need

• Fast & Easy implementation – self-service

• Always ON / Available Everywhere

• Top Performance / Top Security

Page 21: CLOUD COMPUTING Security Risks or  Opportunities

PreSales … and After

Page 22: CLOUD COMPUTING Security Risks or  Opportunities

Cloud Computing – Reality really matters

• Who is the Service Provider?

What is the history? What is the

present? What about the future?

• Where is my data?

Page 23: CLOUD COMPUTING Security Risks or  Opportunities

Who is the Service Provider? Key figures & Evolution

2013Cloud Services for RealCertification AQAP 2110: 2009ISO 22301:2012

2011Technology for envelopes wrapping Certification BS25999

2007ISO 14001, 18001, 27001

2001Document Conversion Center

2010Records Archiving & Management CenterData Center certification in compliance with the Law 135/2007 and MCSI order no. 489/2009

2009New Data Center (TIA-942, Tier-3)

2008Document Production Center

2002ISO 9001:2000

2000Solution Center

• 500+ Employees

• 50+ Enterprise customers

• 100+ applications developed on information & processes management platforms

• 50,000+ day by day users for our solutions

• Significant investments for our customers - Solution Center (Demo Center)

• The largest Document Conversion Center in CEE

• Over 1 Mil. Documents per day processing capacity

• The most modern Document Production Center (output management) in Romania

• The safest and state of the art Data Center (Tier 3 according to TIA 942 and Uptime Institute)

• The most modern Records Archiving & Management Center

Achievements:

Page 24: CLOUD COMPUTING Security Risks or  Opportunities

Star Storage – an international player

Page 25: CLOUD COMPUTING Security Risks or  Opportunities

The Service Provider – Processes / Certifications

ISO 9001:2008 (the quality management system)

ISO 14001:2004 (the environment management system)

ISO 18001:2007 (the professional health and security management system)

ISO 20000-1:2005 (the IT services management system)

ISO/ IEC 27001:2005 (the information security management system)

ISO 22301/ BS 25999 (the business continuity management system)

Page 26: CLOUD COMPUTING Security Risks or  Opportunities

Where is my data?

Page 27: CLOUD COMPUTING Security Risks or  Opportunities

Facility matters - Tier 3 Data Center

27

Data Centre Tier 3

Compliance – Uptime

Institute, ISO 27001, ISO

20000, ISO 22301, ITIL,

Accreditation for Electronic

Archiving (MCSI)

A redundant system of UPS

and emergency power

supply, and a redundant

climatic control system

Security - biometric reader,

video surveillance and

centralized security

management 24/7/365

A double detection system

with an automatic

extinguishing system with

“Inergen” inert gas;

Page 28: CLOUD COMPUTING Security Risks or  Opportunities

Facility matters - What is next?

2014

Our newstate-of-the-art Data Centerin Cluj

• New Disaster Recovery / Business Continuity Services• Our CLOUD Services to the next level

Page 29: CLOUD COMPUTING Security Risks or  Opportunities

“… as a Service”What should I look for?

Page 30: CLOUD COMPUTING Security Risks or  Opportunities

IT as a Service – IaaS – You should look for …

Data Center / Facilities

Infrastructure (Performance, Availability)

Security

Self-Service / Automation

SLA

Technical Support

Page 31: CLOUD COMPUTING Security Risks or  Opportunities

Infrastructure matters

Page 32: CLOUD COMPUTING Security Risks or  Opportunities

Security matters

Page 33: CLOUD COMPUTING Security Risks or  Opportunities

Automation / Self Service matters

Page 34: CLOUD COMPUTING Security Risks or  Opportunities

SLA (Service Guarantee) matters

• Facilities: 99,982%• Network: 99,999%• ....

Page 35: CLOUD COMPUTING Security Risks or  Opportunities

Technical Support / Specialists matters

Over 150 specialists holding more than 500

technical certifications among which there

are: EMC (EMCIE, EMCTA, EMCPE, EMCCE),

VMware (VCP), Cisco (CCDP, CCSP, CCDA,

CCNA, CCNP, CCAI, CEFDS), Brocade (BCFP,

BCSD, BCSM), Qualys, ISACA, F5, EC-

Council, Checkpoint, PECB (External Auditor

ISMS), etc.

Page 36: CLOUD COMPUTING Security Risks or  Opportunities

StarVault – Cloud Service for Real

Page 37: CLOUD COMPUTING Security Risks or  Opportunities

Thank you!