Connecting with CloudConnecting with Cloud pot

Connecting with Cloud This is trial version www.adultpdf.com Connecting with Cloud This is trial version www.adultpdf.com Connecting with Cloud Issues relating to Cloud Computing: • Key Issues: Security (Source: Trustworthy Computing: Privacy in the Cloud Computing Era – November 2009, Microsoft) • Are hosted data and applications within the cloud protected by suitably robust privacy policies? • Are cloud computing provider’s technical infrastructure, applications and processes secure? • Are processes in place to support appropriate action in the event of an incident that affects privacy or security? This is trial version www.adultpdf.com Connecting with Cloud This is trial version www.adultpdf.com Connecting with Cloud Public Sector Perspective • Government Instruction Manual No. 8 (IM8) has been in force • Policy on Infocomm Technology (ICT) Security • Recent update (vide MICA ICT Circular No. 2/2011 on 2 June 2011): Policy now applies to ICT security of systems used to store, process or access Government Data • Previously related to, “Systems owned by government agencies” • Covers new situations where data resides in commercial vendor’s systems and not systems owned by government agencies e.g. where cloud is involved This is trial version www.adultpdf.com Connecting with Cloud NP Experience • Education sector – drive towards cloud adoption • Student Email serivces: • From Lotus Notes  MS Connectmail • Cost savings in infrastructure, security and administration • Mobile Student Assessment for Clinical Attachment • Health Sciences (Nursing) students • Practicums and clinical attachments to hospital big part of course curriculum • Assessment using traditional written examination enhanced • Using assessment application developed by 3 rd party vendor for iPod Touch • iPod Touch  Application  Database of student assessment records for practicum on Cloud This is trial version www.adultpdf.com Connecting with Cloud NP Experience • Internal Audit’s response • IT security control objectives do not change • Refer to compliance model (figure 6 – Mapping the Cloud Model to the Security Control & Compliance model) to help understand gaps • However, cloud deployment of applications and hosting of data re-raises some of the outsourcing risks where vendors are managing your information assets • Assess risks and sensitivity of data • In accordance to IM8 requirements? This is trial version www.adultpdf.com Questions & Answers This is trial version www.adultpdf.com THANK YOU Yoong Ee Chuan CPA CIA CISA CISM Email: yekker@gmail.com This is trial version www.adultpdf.com . Connecting with Cloud This is trial version www.adultpdf.com Connecting with Cloud This is trial version www.adultpdf.com Connecting with Cloud Issues relating to Cloud Computing:. or security? This is trial version www.adultpdf.com Connecting with Cloud This is trial version www.adultpdf.com Connecting with Cloud Public Sector Perspective • Government Instruction. government agencies e.g. where cloud is involved This is trial version www.adultpdf.com Connecting with Cloud NP Experience • Education sector – drive towards cloud adoption • Student