Cloud Security and Privacy: An Enterprise Perspective on Risks and Compliance - Softcover

Mather, Tim; Kumaraswamy Subra; Latif, Shahed

Softcover

ISBN 10: 0596802765 ISBN 13: 9780596802769

Publisher: O'Reilly Media, 2009

Synopsis

You may regard cloud computing as an ideal way for your company to control IT costs, but do you know how private and secure this service really is? Not many people do. With Cloud Security and Privacy, you'll learn what's at stake when you trust your data to the cloud, and what you can do to keep your virtual infrastructure and web applications secure.

Ideal for IT staffers, information security and privacy practitioners, business managers, service providers, and investors alike, this book offers you sound advice from three well-known authorities in the tech security world. You'll learn detailed information on cloud computing security that-until now-has been sorely lacking.

• Review the current state of data security and storage in the cloud, including confidentiality, integrity, and availability
• Learn about the identity and access management (IAM) practice for authentication, authorization, and auditing of the users accessing cloud services
• Discover which security management frameworks and standards are relevant for the cloud
• Understand the privacy aspects you need to consider in the cloud, including how they compare with traditional computing models
• Learn the importance of audit and compliance functions within the cloud, and the various standards and frameworks to consider
• Examine security delivered as a service-a different facet of cloud security

About this title

About the Author

Tim Mather is V.P. & Chief Security Strategist for RSA, The Security Division of EMC. He is assigned to the vendor-agnostic RSA Conference, responsible for keeping ahead of security industry trends, technology, and threats. He was formerly Vice-President of Technology Strategy in Symantec's Office of the Chief Technology Officer, responsible for coordinating the company's long-term technical and intellectual property strategy. Previously at Symantec, he served for nearly seven years as Chief Information Security Officer (CISO). As V.P. & CISO, he was responsible for development of all information systems security policies, oversight of implementation of all security-related policies and procedures, and all information systems audit-related activities. He also worked with internal products groups on security capabilities in Symantec products. Prior to joining Symantec in September 1999, Tim was the Manager of Security at VeriSign. Additionally, he was formerly Manager of Information Systems Security at Apple Computer. Mr. Mather's experience also includes seven years in Washington, D.C. working on secure communications for a classified, national-level command, control, communications, and intelligence (C3I) project, which involved both civilian and military departments and agencies. Tim is a Certified Information Systems Security Professional (CISSP) and a Certified Information Systems Manager (CISM). He holds Masters Degrees in National Security Studies from Georgetown University, and International Policy Studies from Monterey Institute of International Studies. Tim holds a Bachelor's Degree in Political Economics from the University of California at Berkeley. Subra Kumaraswamy has more than 17 years of engineering and management experience encompassing information security, Internet and e-commerce technologies. He is currently leading a security access management program in the IT Security office at Sun. Subra's past roles include incident response manager, IT architect, software engineer, security consultant at Accenture, Netscape, Lycos and Sun. Subra has a Masters degree in Computer Engineering from Clemson University and is also CISSP certified. Subra's recent interest include security and privacy aspects of Web 2.0 and cloud computing. In his spare time, Subra tries to get his hands dirty with emerging technologies to understand the security and privacy implications for users and enterprises. Shahed Latif is a partner in KPMG's Advisory practice having extensive IT and business skills. He has over 21 years of experience working with the global fortune 1000 companies focusing on providing business and technology solutions across a variety of areas. Shahed has spent 10 years in the London office working in the financial sector consulting group, Information Risk management group and the assurance practice. He has worked on large global companies giving him the opportunity to have worked in Africa, Asia, and Europe.

Edition details

• Publisher: O'Reilly Media
• Publication date: 2009
• ISBN 10: 0596802765
• ISBN 13: 9780596802769
• Binding: Paperback
• Language: English
• Number of pages: 334