you’ve been following our Cloud Fundamentals series, you’ve heard me discuss why transparency is important for both cloud service providers and their customers. Another important aspect of this theme that customers have discussed with me is how to get insight into the security controls used to manage cloud service offerings.
Many of the security professionals I have talked to are looking for assurances about the security practices and security controls that are used by the cloud service provider(s) that they are evaluating services from. Information on security controls used to operate a service can then be clearly communicated to audit and enterprise risk management groups.
Today it can be challenging getting information on the security practices used by cloud providers. Additionally it can be challenging to use such information to compare and contrast the different services offered by these providers. There are at least a couple of factors making this type of comparison harder than it should be..
...(read more)