SECURING THE CLOUD IN A REGULATED WORLD 2012 Online Tech. All rights reserved. CONFIDENTIAL 734.213.2020 Detroit Data Connectors

SECURING THE CLOUD IN A REGULATED WORLD

www.onlinetech.com Copyright 2012 Online Tech. All rights reserved. CONFIDENTIAL 734.213.2020

Detroit Data ConnectorsThursday, April 24, 2014


WHO NEEDS CLOUD SECURITY?


CLOUD TIPPING POINT SURPASSED

http://itknowledgeexchange.techtarget.com/cloud-computing-enterprise/is-a-new-journey-needed-for-business-critical-applications/


2013 DATA BREACHES30% INCREASE IN THE NUMBER OF DATA BREACHES VS 2012

Identity Theft Research Center (http://www.idtheftcenter.org/)


AVG BREACH COST TO A COMPANY

Ponemon Institute: 2013 Cost of Data Breach Study



DATA BREACHES COSTS/INDUSTRY


• Continuous Compliance

• Defense-in-depth Security

• Enterprise-Class Data Protection

SECURE CLOUD STRATEGIES


CONTINUOUS COMPLIANCE

• Culture of continuous compliance

• Auditor partnership

• Super-Audit

• Transparency

• Goal: Easing compliance burden for ourselves

and clients in regulated spaces


POLL: WORST SECURITY THREAT?

• People

• Process

• Technology


POLL: WORST SECURITY THREAT?

• People

• Process

• Technology

• ALL OF THE ABOVE


HOLISTIC APPROACH TO SECURITY

people technology

process


SECURITY: PEOPLE

Train staff

Train business associates


SECURITY: PROCESS


SECURITY: TECHNOLOGY


HOLISTIC SECURITY


SECURITY SAVINGS PER RECORD



• Establish & document your priorities–Isolation–Uptime–Performance–Scalability–Price

THE RIGHT CLOUD FOR YOU#1. KNOW THYSELF


• Assess your tolerance for loss– What apps & data can you afford to lose?– How much $ does your business lose each

hour or day your cloud is down?– Does your backup plan match your risk

tolerance? Be honest!– Backing up your cloud onsite vs offsite – how

soon can you begin recovery efforts?

THE RIGHT CLOUD FOR YOU#2. WHAT ARE YOU WILLING TO LOSE?


–What critical business MUST be met? • Performance?• Encryption?• Backup?• Do they work together?• Test those dependencies!

THE RIGHT CLOUD FOR YOU#3. CAN YOUR CLOUD PLAY NICE?


SAMPLE CLOUD ARCHITECTURESMULTI-TENANT CLOUD

Use Cases• Designed for 99.999% uptime• Designed for live maintenance• Disaster recovery• Light to medium SaaS and E-

Commerce• Web servers• Application servers

– Including custom apps• Light to medium density Email

servers for SMB’s• Light to medium density

databases


DEDICATED CLOUD

SAMPLE CLOUD ARCHITECTURES

Use Cases• Mid performance solution

optimized for isolation• Isolation conscious businesses

looking to adopt cloud• Designed for 99.99 % uptime• Designed for near-live

maintenance• Application Servers• Web servers • File Servers• Light to medium density Email

servers for SMB’s• Light to medium density databases


VIRTUAL PRIVATE CLOUD


Use Cases• Idea for Performance/elastic

conscious businesses looking to cloud

• Designed for 99.999 % uptime• Designed for live maintenance• Medium to high density SaaS and

E-Commerce• Web servers• Application servers

– Including custom apps• Medium to high density Email

servers for SMB’s• Medium to high density databases


VIRTUAL DATA-CENTER-IN-A-BOX


Use Cases• High performance solution optimized

for flexibility• Designed for 99.999% uptime• Designed for live maintenance• Disaster recovery• Web servers• Application servers

– Including custom apps• High to extreme SaaS and E-

Commerce• High to extreme density Email servers

for Enterprise• High to extreme density databases

– Including Oracle


QUESTIONS?


Jason [email protected]

www.onlinetech.com 734-213-2020

CONTACT INFO:

mailto:[email protected]

http://www.onlinetech.com/

Documents

SECURING THE CLOUD IN A REGULATED WORLD 2012 Online Tech. All rights reserved. CONFIDENTIAL 734.213.2020 Detroit Data Connectors