{"id":2098,"date":"2011-05-12T07:00:39","date_gmt":"2011-05-12T15:00:39","guid":{"rendered":"http:\/\/www.formtek.com\/blog\/?p=2098"},"modified":"2011-05-12T07:00:39","modified_gmt":"2011-05-12T15:00:39","slug":"compliance-organizations-worry-about-compliance-and-risk-management-for-the-cloud","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/compliance-organizations-worry-about-compliance-and-risk-management-for-the-cloud\/","title":{"rendered":"Compliance: Organizations Worry About Compliance and Risk Management for the Cloud"},"content":{"rendered":"

While Cloud Computing continues to grow in hype and number of deployments, seemingly out of step of the trends, many IT departments remain unconvinced that cloud computing is ready for prime time. \u00a0A survey <\/a>by ISACA <\/a>found that 45 percent of IT professionals still think that cloud computing is still too risk and insecure. \u00a0In fact, only 10 percent of IT professionals said that they’d even consider moving a mission critical application to the cloud.<\/p>\n

But that doesn’t mean that IT is totally ignoring the cloud. \u00a0The cost savings of cloud based solutions are well understood, and because of that, IT departments are closely monitoring developments in the world of cloud computing and assessing the risks. \u00a0 Strategies for moving to the cloud are being developed, and a primary element of every strategy blueprint is the risk assessment. \u00a0IT departments want to be able to understand the sensitivity of the data managed by each of their applications and the risks involved with moving application data from an on-premise infrastructure to a cloud-based one.<\/p>\n

The ISACA report found that compliance, governance and information security management are the top concerns of IT departments today. \u00a0Tony Noble, a member of ISACA\u2019s guidance and practices committee, said that “from the growing number of government regulations to consumer privacy concerns to ‘hacktivist’ attacks, enterprise IT assets are being challenged in ways that go far beyond the server room.”<\/p>\n

IT is increasingly being tasked with ensuring that their data management policies comply with numerous regulations. \u00a0Just a few of these regulations include Basel, Frank-Dodd, Sarbanes-Oxley, PII, Do Not Track, Solvency II and HITECH Meaningful Use. \u00a0Complicating the problem is that regulations are often very much a moving target — new ones are continually being \u00a0introduced, and existing one change frequently or expire.<\/p>\n

The ordered list of IT concerns listed in the ISACA report are as follows:<\/p>\n

\n
    \n
  1. Regulatory compliance<\/li>\n
  2. Enterprise-based IT management and governance<\/li>\n
  3. Information security management<\/li>\n
  4. Disaster recovery and Business continuity<\/li>\n
  5. Managing IT risks at five<\/li>\n
  6. Vulnerability management<\/li>\n
  7. Continuous process improvement and business agility<\/li>\n
  8. Cloud Computing<\/li>\n
  9. Mobile Device management<\/li>\n
  10. Virtualization<\/li>\n
  11. Business Development<\/li>\n<\/ol>\n<\/div>\n

    53 percent of IT staff say that regulatory compliance is now their top concern. \u00a080 percent say that senior management are slow to realize that data security is an important issue. \u00a045 percent are concerned about how to best manage IT project risk.<\/p>\n

    \"Digg<\/a><\/div>
    \"Reddit<\/a><\/div>
    \"Stumble<\/a><\/div>
    \"Buzz<\/a><\/div>
    \"Vote<\/a><\/div>
    \"Share<\/a><\/div>
    \"Bookmark<\/a><\/div>
    \"Kick<\/a><\/div>
    \"Shout<\/a><\/div>
    \"Share<\/a><\/div>
    \"Bookmark<\/a><\/div>
    \"Post<\/a><\/div>
    \"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

    While Cloud Computing continues to grow in hype and number of deployments, seemingly out of step of the trends, many IT departments remain unconvinced that cloud computing is ready for prime time. \u00a0A survey by ISACA found that 45 percent…<\/span><\/p>\n

    Read more ›<\/a><\/div>\n

    <\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,9],"tags":[],"class_list":["post-2098","post","type-post","status-publish","format-standard","hentry","category-cloud-computing","category-compliance"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/2098","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=2098"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/2098\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=2098"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=2098"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=2098"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}