Watch Tim Rains and Laura Posey talking standards for cloud computing security

Jan 27, 2012 14:38 GMT  ·  By

The latest installment of the Cloud Fundamentals Video Series – which has Laura Posey as guest - focuses on one of the most important topics related to cloud computing: benchmarking and evaluation.

When it comes to choosing a specific product in this segment, companies need to assess the pros and cons for the various offerings they encounter.

Tim Rains, director, Trustworthy Computing, notes that most companies benefit from standard evaluation criteria for the providers of cloud services.

“Benchmarks and evaluation standards for cloud computing security is a topic that is top of mind for many organizations that are evaluating the potential uses of this new computing paradigm,” he explains.

“Many of the customers I have talked to say they would benefit from standard evaluation criteria for cloud service providers.”

Customers are also interested in finding a manner in which they can communicate potential risks to both internal and external auditors, Tim Rains also explains.

For example, some of them are planning the use of the European Network and Information Security Agency’s (ENISA’s) set of evaluation criteria designed for cloud services providers.

Other customers are rather interested in ISO 27001 or another future ISO standard aimed specifically at cloud computing technology.

Moreover, there are also those who would go for the Cloud Security Alliance’s Security Trust and Assurance Registry (STAR).

“As I mentioned in my last article, Microsoft is collaborating very closely with the industry on drafting standards and baselines for cloud service providers,” Tim Rains notes.

One of the Microsoft employees involved in the process was Laura Posey, a senior security strategist in trustworthy computing at Microsoft.

In the new video included in the Trustworthy Computing Cloud Fundamentals Video Series, you can see Laura and Tim talking about the standards for cloud computing security.

This video series is destined to cover some of the most important topics related to cloud computing, all from a Microsoft perspective, just as we mentioned in our previous posts on the matter.