Securing the Cloud

Government wide pressure to reduce IT costs and optimize operations has led many agencies to embrace cloud computing. Despite the potential savings and improved efficiencies, securing the cloud remains a major concern. Cloud Computing Security can be defined as defending the confidentiality, integrity, and availability of agency assets (data, applications, infrastructure) using cloud services from both outside and insider threats. Securing the Cloud can be a daunting issue considering each cloud provider tends to have their own security products/services. Security policies need to be applied to both internal agency and third-party management cloud environments. This virtual workshop will review the fundamentals of Cloud Computing Security to include review and updating of existing IT guidelines, controls, and processes with the specific goal of protecting data and systems to include meeting regulatory obligations.