Premium Resources

Security in Cloud

A defence in depth security policy should be applied to cloud architecture in order to secure it.

At the application level proper SDLC should be followed, using a web application firewall is a good option. At the information level using encryption, Key management and access control list will protect the data. At the management level, proper patch management, configuration management and monitoring have to be done. Deploying multiple defences at various layers of the cloud will provide us with a secure cloud.

security in cloud
Image Source: http://dasmu.us/introduction-to-cloud-computing-architecture/introduction-to-cloud-computing-architecture-contemporary-on-architecture-for-introduction-cloud-security-from-a-15/

Other useful security improvements could be:

  • Proper Load balancing.

  • Configuration management

  • Disaster recovery plan

  • Quality of Service and service level agreements with providers.

  • Implementing strong key encryption.

  • Logging and auditing

  • Strong authentication and Authorization.

  • Strong security policies for users.

  • Vulnerability and risk assessment

  • Establish incident detection and response system.

Disclaimer

PMI®, PMBOK®, PMP® and PMI-ACP® are registered marks of the Project Management Institute, Inc.

The Swirl logo™ is a trade mark of AXELOS Limited.

ITIL® is a registered trade mark of AXELOS Limited, used under permission of AXELOS Limited. All rights reserved.

PRINCE2® is a registered trade mark of AXELOS Limited, used under permission of AXELOS Limited. All rights reserved.

IASSC® is a registered trade mark of International Association for Six Sigma Certification.

Certified ScrumMaster® (CSM) is a registered trade mark of SCRUM ALLIANCE®

CISSP® is a registered mark of The International Information Systems Security Certification Consortium (ISC)2.

CCNA® is a trademark of Cisco.

Microsoft and MS Project are the registered trademarks of the Microsoft Corporation.

SAP Trademark(s) is/are the trademark(s) or registered trademark(s) of SAP SE in Germany.