4b - is the cloud safe - ed zedlewski
DESCRIPTION
TRANSCRIPT
![Page 1: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/1.jpg)
www.eduserv.org.uk
Is the cloud secure?Ed Zedlewski, CIO, Eduserv
![Page 2: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/2.jpg)
www.eduserv.org.uk
Cloud defined…
Cloud computing is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction.
[National Institute of Standards and Technology]
![Page 3: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/3.jpg)
www.eduserv.org.uk
Cloud defined…On-demand self-serviceBroad network accessResource poolingRapid elasticityMeasured service consumptionIaaS
SaaSPaaSPrivate CloudCommunity CloudPublic CloudHybrid Cloud
![Page 4: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/4.jpg)
www.eduserv.org.uk
Cloud defined…
I want to buy only the computing I need, when I need it
![Page 5: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/5.jpg)
www.eduserv.org.uk
What is Cloud Security?
I want my information and my services protected from the bad guys and from accidents
![Page 6: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/6.jpg)
www.eduserv.org.uk
What could possibly go wrong?
![Page 7: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/7.jpg)
www.eduserv.org.uk
Cloud scepticism
• 37% of businesses cite security concerns• 13% (and rapidly rising) complexity of IT systems
integration• 13% resistance to change
![Page 8: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/8.jpg)
… yet growth in cloud services is rising faster than ever • 71% of local government organisations are using
cloud computing • 37% of local government are currently using
cloud applications • UK adults accessing the internet through a mobile
device doubled between 2010 and 2012: source: Ofcom
![Page 9: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/9.jpg)
www.eduserv.org.uk
Who is looking after your service at 03:00 hours?
![Page 10: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/10.jpg)
www.eduserv.org.uk
Is the security model fit for purpose?
![Page 11: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/11.jpg)
www.eduserv.org.uk
Do you have effective MI and understand your risks?
![Page 12: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/12.jpg)
www.eduserv.org.uk
Where is your data?
![Page 13: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/13.jpg)
www.eduserv.org.uk
How do you access your cloud service• 8bn people• 12bn MID• 2bn houses• 2bn TV’s• 1.5bn bicycles• 1bn cars
![Page 14: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/14.jpg)
www.eduserv.org.uk
How secure is your own IT shop?
• You will be subject to the same security challenges• Do you have all the necessary skills• Are you prepared to pay the cost of providing
service elasticity
![Page 15: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/15.jpg)
www.eduserv.org.uk
Increase in cyber-attacks
On average 54 significant attacks by an unauthorised outsider were made on each large organisation in the last year
(twice the level seen in 2010)
![Page 16: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/16.jpg)
www.eduserv.org.uk
Security breaches by staffComputer fraud; data loss; regulatory breaches; lack of education about security
• 19% of organisations suffered staff IT fraud • 20% of small businesses lost confidential data
![Page 17: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/17.jpg)
www.eduserv.org.uk
Security Investment?67% of large organisations expect more security breaches next year
50% of large organisations expect to spend more on security next year
The challenge is getting value from the investment
![Page 18: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/18.jpg)
MYTH: An in-house (xxx) server is more secure than a hosted solutionTRUTH: for a business without dedicated, in-house IT Professionals to monitor the security of its network, in-house server solutions have less physical security, digital security and backup security than hosted solutions
![Page 19: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/19.jpg)
MYTH: An in-house solution offers more control than a Cloud solution• Maybe, but is this good or bad?• Who is counting the cost of change?• Heavy customisation increases cost and
reduces reliability • Application servers are very complex,
requiring high levels of skill 24x7 • Often cloud services abstract complexity
![Page 20: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/20.jpg)
So what’s the difference?• Robust authentication & authorisation• Applications need to be architected for cloud
deployment - Never trust user input - Encode all output
• Consider data encryption • Effective service and contract management
![Page 21: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/21.jpg)
www.eduserv.org.uk
Professionally built cloud services• Offer flexible levels of performance & security • Security designed in (not bolted on)• High availability designed in• Are monitored 7x24x365• Expertly managed
- Delivering appropriate CIA
![Page 22: 4B - Is the cloud safe - Ed Zedlewski](https://reader036.vdocuments.us/reader036/viewer/2022062417/54c120ea4a795974308b4594/html5/thumbnails/22.jpg)
www.eduserv.org.uk
Questions?
Ed Zedlewski, CIO, [email protected] 470431 Or visit the Eduserv stand