Cloud computing spl: Peeping in the holes in cloud

Cloud computing spl: Peeping in the holes in cloud

There are many holes yet to be patched in the cloud when it comes to worry lines of enterprises

Pratima H

Friday, May 29, 2009

Comments

RSS

Another virtualization player, Nivio echoes the same assurance.

Sachin Duggal, CEO Nivio, that claims the world’s first online Windows Desktop, says that each part of data grid is encrypted and the company spends crores on firewall technologies to take care of security.

While they may sound reassuring, CIOs still have their questions on security claims made by V-world vendors. V Subramanian, chief information security officer of IDBI Bank feels that though the claims could be feasible, they raise the tight-rope balance question again. "Specially for BFSI, transactions, for example like those of ATMs, should be quick enough. Encryption gives security, but encrypting and decrypting a transaction slows down the process too, thus impacting the performance." He admits that there is progress happening both in terms of technology and POCs (Proofs of Concept). "Still, in a shared environment, no matter with how many firewalls, there is always a worry for either security of your own bank's data or slackness in functions.

What should CIOs do?

Gartner advised that the process of securing virtual machines must start before they are deployed, and ideally before vendors and products are selected so that security and "securability" can be factored into the evaluation and selection process.

Here's a small check-list from Andi Mann. CIOs can use this as their consideration filter before deciding on or type of virtualization.

Every enterprise is going to be different, and there is a very long list of essential criteria for selecting a cloud vendor. Some of the most important considerations, as he outlines, will include:

Is the cloud provider going to provide a secure environment?

Are they going to guarantee and meet service levels, with some significant penalties for SLA breaches?

Do they have adequate reporting and controls for compliance and audit purposes?

Ask these, and then decide if the cloud is worth the flight.

<<PREVIOUS NEXT>>