The Coalfire Blog
Welcome to the Coalfire Blog, a resource covering the most important issues in IT security and compliance. You'll also find information on Coalfire's insights into the unique cybersecurity issues that impact the industries we serve, including Cloud Service Providers, Retail, Financial Services, Healthcare, Higher Education, Payments, Government, Restaurants, and Utilities.
The Coalfire blog is written by the company's leadership team and our highly-credentialed security assessment experts. We look forward to your comments, so please join the conversation.
The Coalfire Blog
Trust the ‘Cloud’ (just make sure you have it examined first)
April 26, 2011, Tom McAndrew, EVP Commercial Services, Coalfire
In the wake of Amazon’s Web Service disruption over the past few days we think it is important to look at the case a little closer.
First of all, we are believers in the future of cloud computing and what it will provide. As more companies look to take advantage of some of the cloud’s efficiencies, they should also look to protect themselves. Two fundamental and simple ways to gain a level of protection and help you sleep at night are through an independent audit and adequate service level agreement.
Watch the Basket.
As Mark Twain said, “Put all your eggs in one basket, and watch the basket.” Cloud service providers are extremely secretive about their operations (with good reason), but any company who chooses to move operations to cloud services should receive some assurance the service provider is meeting their expectations.
Have your own set of experts take a look at the controls in place and “watch the basket.”
What does your Service Level Agreement look like?
Even with an independent assessment, any cloud service contract should come with a robust service level agreement. If service is maintained, that is fantastic and everyone wins. If service is not available and a service level agreement is not in place it can crush
What can we learn from Amazon?
As Amazon continues to bring its web services back to 100% it is important to remember that the same outage can happen anywhere. If a company is paying for a service they should receive some assurance that that service is going to be met. Investigating the cloud service through an audit and negotiating a service level agreement are two simple ways to receive that assurance.”
<< Go Back