{"id":3682,"date":"2013-04-12T07:00:34","date_gmt":"2013-04-12T15:00:34","guid":{"rendered":"http:\/\/www.formtek.com\/blog\/?p=3682"},"modified":"2013-04-12T07:00:34","modified_gmt":"2013-04-12T15:00:34","slug":"cloud-computing-security-it-leaders-too-hands-off-when-it-comes-to-cloud-security","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/cloud-computing-security-it-leaders-too-hands-off-when-it-comes-to-cloud-security\/","title":{"rendered":"Cloud Computing Security: IT Leaders Too &#039;Hands Off&#039; When it Comes to Cloud Security"},"content":{"rendered":"<p>About half of organizations have policies in place that for vetting cloud computing applications for possible security risks before deploying them, according to <a title=\"Ponenmon Study on Cloud security risks in 2013\" href=\"http:\/\/www.ca.com\/~\/media\/E7A969F22F88432EB84F95B30CDDCF3C.pdf\" target=\"_blank\">a report from the Ponemon Institute<\/a> on the state of Cloud User Security in 2013. \u00a0The group also summarized the <a title=\"Ponemon Infographic on Cloud security in 2013\" href=\"http:\/\/www.ca.com\/us\/~\/media\/Files\/whitepapers\/ca-infographic-cloudminder-final.pdf\" target=\"_blank\">findings of their study in an infographic available here.<\/a> That is an improvement, although a relatively small one. \u00a0The number of organizations saying that risks need to be assessed prior to cloud adoption has jumped about 10 percent this year compared to the results of a similar survey taken in 2010.<\/p>\n<p>But CA Technologies, sponsor of the report, says that cloud risk assessment isn&#8217;t really yet at a level that is &#8216;good enough&#8217;. \u00a0The results of the Ponemon report found that improvements in cloud security over the past two years have really only been incremental. \u00a0<a title=\"Mike Denning bio\" href=\"www.linkedin.com\/pub\/mike-denning\/0\/16b\/b0b\" target=\"_blank\">Mike Denning<\/a>, general manager of the Security group at CA Technologies, said that &#8220;Cloud security struggles to get past a grade of 50 percent when it comes to best practices, including the percentage of organizations that say they engage their security teams in determining the use of cloud services.&#8221;<\/p>\n<p>The report notes that many IT leaders are &#8216;alarmingly hands off&#8217; when it comes to both SaaS and IaaS security:<\/p>\n<ul>\n<li><strong>49 percent<\/strong> of organizations evaluate IaaS for security risks prior to deployment<\/li>\n<li><strong>22 percent<\/strong> say that the responsibility for security of IaaS is with the cloud provider<\/li>\n<li><strong>22 percent<\/strong> say that IaaS security is in the domain of IT itself<\/li>\n<li><strong>21 percent<\/strong> say that IaaS security is ultimately the responsibility of the end users<\/li>\n<\/ul>\n<p>But the report does not that there has been some improvement in the ability to prevent or curtail data loss from theft from the cloud. \u00a0Businesses are ranked nine percentage points higher in that area than they were back in 2010. \u00a0Ponemon attributes that to improvements in technology. \u00a0<a title=\"Larry Ponenmon bio\" href=\"http:\/\/www.linkedin.com\/pub\/larry-ponemon\/21\/909\/504\" target=\"_blank\">Larry Ponemon<\/a>, founder of the Ponemon Institute, <a title=\"Larry Ponemon on improvements in prevention of theft in the cloud with encryption\" href=\"http:\/\/www.darkreading.com\/database-security\/167901020\/security\/news\/240150083\/ponemon-prognosis-shows-state-of-cloud-security-improvements\" target=\"_blank\">said that<\/a> &#8220;In the last two years, there have been a ton of products building encryption technology in the cloud.&#8221;<\/p>\n<p style=\"text-align: left;\">\n<div class=\"lightsocial_container\"><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/digg.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fcloud-computing-security-it-leaders-too-hands-off-when-it-comes-to-cloud-security%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/digg.png\" alt=\"Digg This\" title=\"Digg This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fcloud-computing-security-it-leaders-too-hands-off-when-it-comes-to-cloud-security%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/reddit.png\" alt=\"Reddit This\" title=\"Reddit This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.stumbleupon.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fcloud-computing-security-it-leaders-too-hands-off-when-it-comes-to-cloud-security%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/stumbleupon.png\" alt=\"Stumble Now!\" title=\"Stumble Now!\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/buzz.yahoo.com\/buzz?targetUrl=https%3A%2F%2Fformtek.com%2Fblog%2Fcloud-computing-security-it-leaders-too-hands-off-when-it-comes-to-cloud-security%2F&amp;headline=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/yahoo_buzz.png\" alt=\"Buzz This\" title=\"Buzz This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dzone.com\/links\/add.html?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fcloud-computing-security-it-leaders-too-hands-off-when-it-comes-to-cloud-security%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dzone.png\" alt=\"Vote on DZone\" title=\"Vote on DZone\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.facebook.com\/sharer.php?t=&amp;u=https%3A%2F%2Fformtek.com%2Fblog%2Fcloud-computing-security-it-leaders-too-hands-off-when-it-comes-to-cloud-security%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/facebook.png\" alt=\"Share on Facebook\" title=\"Share on Facebook\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/delicious.com\/save?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fcloud-computing-security-it-leaders-too-hands-off-when-it-comes-to-cloud-security%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/delicious.png\" alt=\"Bookmark this on Delicious\" title=\"Bookmark this on Delicious\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dotnetkicks.com\/kick\/?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fcloud-computing-security-it-leaders-too-hands-off-when-it-comes-to-cloud-security%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetkicks.png\" alt=\"Kick It on DotNetKicks.com\" title=\"Kick It on DotNetKicks.com\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/dotnetshoutout.com\/Submit?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fcloud-computing-security-it-leaders-too-hands-off-when-it-comes-to-cloud-security%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetshoutout.png\" alt=\"Shout it\" title=\"Shout it\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fcloud-computing-security-it-leaders-too-hands-off-when-it-comes-to-cloud-security%2F&amp;title=&amp;summary=&amp;source=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/linkedin.png\" alt=\"Share on LinkedIn\" title=\"Share on LinkedIn\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.technorati.com\/faves?add=https%3A%2F%2Fformtek.com%2Fblog%2Fcloud-computing-security-it-leaders-too-hands-off-when-it-comes-to-cloud-security%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/technorati.png\" alt=\"Bookmark this on Technorati\" title=\"Bookmark this on Technorati\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/twitter.com\/home?status=Reading+https%3A%2F%2Fformtek.com%2Fblog%2Fcloud-computing-security-it-leaders-too-hands-off-when-it-comes-to-cloud-security%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/twitter.png\" alt=\"Post on Twitter\" title=\"Post on Twitter\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.google.com\/buzz\/post?url=https%3A%2F%2Fformtek.com%2Fblog%2Fcloud-computing-security-it-leaders-too-hands-off-when-it-comes-to-cloud-security%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/google_buzz.png\" alt=\"Google Buzz (aka. Google Reader)\" title=\"Google Buzz (aka. Google Reader)\" \/><\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>About half of organizations have policies in place that for vetting cloud computing applications for possible security risks before deploying them, according to a report from the Ponemon Institute on the state of Cloud User Security in 2013. \u00a0The group<span class=\"ellipsis\">&hellip;<\/span><\/p>\n<div class=\"read-more\"><a href=\"https:\/\/formtek.com\/blog\/cloud-computing-security-it-leaders-too-hands-off-when-it-comes-to-cloud-security\/\">Read more &#8250;<\/a><\/div>\n<p><!-- end of .read-more --><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,31],"tags":[],"class_list":["post-3682","post","type-post","status-publish","format-standard","hentry","category-cloud-computing","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/3682","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=3682"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/3682\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=3682"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=3682"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=3682"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}