{"id":577,"date":"2016-03-15T12:24:09","date_gmt":"2016-03-15T16:24:09","guid":{"rendered":"https:\/\/solutionsreview.com\/cloud-platforms\/?p=577"},"modified":"2016-10-19T08:51:57","modified_gmt":"2016-10-19T12:51:57","slug":"three-best-practices-for-evaluating-cloud-security","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/","title":{"rendered":"Three Best Practices for Evaluating Cloud Security"},"content":{"rendered":"

\"paulblart_Cloud_Cop2\"<\/a>In 2016, security concerns continue to be one of the largest barriers to large scale cloud adoption in the enterprise. Whether their concerns are misguided<\/a> or not<\/a>, many CIOs and CISOs simply aren’t comfortable<\/a> with putting their data in the cloud.<\/p>\n

I can sympathize\u2014despite the convenience of cloud computing<\/a>, it can be a bit scary to think of all your corporate data floating around somewhere you can’t see. But cloud computing is one of the fastest growing segments in IT, and it’s here to stay. Dragging your feet isn’t going to help you or your enterprise keep up with the increasing demand for automation and agility in modern IT.<\/p>\n

For years, the cloud computing industry has been working hard to assuage customer security concerns, and today most cloud solutions are as secure as (or more secure than) on-premise infrastructure<\/a>\u2014especially when considering ‘complete’ offerings such as a managed cloud<\/a> or a platform as a service<\/a> (PaaS) solution.<\/p>\n

With an on-premise infrastructure, it can be a full-time job maintaining security compliance, updates, and patches. Your business may not have the time or human resources to cover all your bases, and every patch and update missed is a new security risk.\u00a0With PaaS, or IaaS<\/a> (infrastructure as a service) running third-party security solutions, managing your risks can become a whole lot easier.<\/p>\n

But not all cloud solutions are created equal<\/a>\u2014 especially when it comes to security. With that in mind, here are three considerations you need to take when evaluating cloud security.<\/p>\n

Does this solution have logging and reporting capabilities?\u00a0<\/strong><\/p>\n

Proper cloud security requires extensive logging. A secure cloud solution has the capability to provided detailed logging of management actions performed through the platform control interface or through APIs<\/a>. Users should be able to access log data in \u00a0the user interface as a reporting function, and should have the ability to view logging data in real time. If you are using a cloud solutions without logging and reporting capabilities, I strongly suggest integrating a third party solution.<\/p>\n

What kind of Identity and Access Management capabilities will I have?\u00a0<\/strong><\/p>\n

Identity and Access Management (IAM) is a critical aspect of cloud security. A secure cloud should have firewall rules based on user identity that allow specific users to access specific sets of compute resources.<\/p>\n

A solid cloud IAM solutions\u2014native or third party\u2014 should include granular role-based access controls and single sign-on capabilities.<\/p>\n

To learn more about IAM solutions, check out Solutions Review’s Identity and Access Management page<\/a> for news, best practices, and buyer’s guides<\/a>.<\/p>\n

How is API Messaging secured?\u00a0<\/strong><\/p>\n

An application programming interface (API) is an interface\u00a0that allows the user to access information from another service and integrate this service into their own application. allowing you to integrate your cloud-based application with various other systems.<\/p>\n

In a public IaaS cloud, APIs are an essential tool of the trade, but like any IT component, APIs are vulnerable to attack and must be secured. APIs in the cloud need to be resistant to\u00a0playback and man-in-the-middle attacks. To achieve this, a CSP<\/a> or third party can provide an authentication mechanism that limits issuing of API commands to authenticated endpoints only.<\/p>\n


Widget not in any sidebars
<\/p>\n","protected":false},"excerpt":{"rendered":"

In 2016, security concerns continue to be one of the largest barriers to large scale cloud adoption in the enterprise. Whether their concerns are misguided or not, many CIOs and CISOs simply aren’t comfortable with putting their data in the cloud. I can sympathize\u2014despite the convenience of cloud computing, it can be a bit scary […]<\/p>\n","protected":false},"author":24,"featured_media":579,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[2],"tags":[130,22,129,79],"acf":[],"yoast_head":"\nThree Best Practices for Evaluating Cloud Security<\/title>\n<meta name=\"description\" content=\"Three capabilities that every cloud needs to maximize information security. Secure APIs, IAM, and logging and reporting.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jeff Edwards\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/\",\"url\":\"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/\",\"name\":\"Three Best Practices for Evaluating Cloud Security\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2015\/06\/paulblart_Cloud_Cop2.jpg\",\"datePublished\":\"2016-03-15T16:24:09+00:00\",\"dateModified\":\"2016-10-19T12:51:57+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6\"},\"description\":\"Three capabilities that every cloud needs to maximize information security. Secure APIs, IAM, and logging and reporting.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2015\/06\/paulblart_Cloud_Cop2.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2015\/06\/paulblart_Cloud_Cop2.jpg\",\"width\":600,\"height\":300},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/cloud-platforms\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Three Best Practices for Evaluating Cloud Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/#website\",\"url\":\"https:\/\/solutionsreview.com\/cloud-platforms\/\",\"name\":\"Cloud Platforms & Infrastructure Services | Solutions Review\",\"description\":\"Evaluating Hyperscale Cloud Providers, Hybrid IaaS, PaaS & Cloud Management Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/cloud-platforms\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6\",\"name\":\"Jeff Edwards\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=blank&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=blank&r=g\",\"caption\":\"Jeff Edwards\"},\"description\":\"Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.\",\"sameAs\":[\"https:\/\/solutionsreview.com\",\"https:\/\/x.com\/InfoSec_Review\"],\"url\":\"https:\/\/solutionsreview.com\/cloud-platforms\/author\/jedwards\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Three Best Practices for Evaluating Cloud Security","description":"Three capabilities that every cloud needs to maximize information security. Secure APIs, IAM, and logging and reporting.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/","twitter_misc":{"Written by":"Jeff Edwards","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/","url":"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/","name":"Three Best Practices for Evaluating Cloud Security","isPartOf":{"@id":"https:\/\/solutionsreview.com\/cloud-platforms\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2015\/06\/paulblart_Cloud_Cop2.jpg","datePublished":"2016-03-15T16:24:09+00:00","dateModified":"2016-10-19T12:51:57+00:00","author":{"@id":"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6"},"description":"Three capabilities that every cloud needs to maximize information security. Secure APIs, IAM, and logging and reporting.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/#primaryimage","url":"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2015\/06\/paulblart_Cloud_Cop2.jpg","contentUrl":"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2015\/06\/paulblart_Cloud_Cop2.jpg","width":600,"height":300},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/three-best-practices-for-evaluating-cloud-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/cloud-platforms\/"},{"@type":"ListItem","position":2,"name":"Three Best Practices for Evaluating Cloud Security"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/#website","url":"https:\/\/solutionsreview.com\/cloud-platforms\/","name":"Cloud Platforms & Infrastructure Services | Solutions Review","description":"Evaluating Hyperscale Cloud Providers, Hybrid IaaS, PaaS & Cloud Management Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/cloud-platforms\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6","name":"Jeff Edwards","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=blank&r=g","caption":"Jeff Edwards"},"description":"Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.","sameAs":["https:\/\/solutionsreview.com","https:\/\/x.com\/InfoSec_Review"],"url":"https:\/\/solutionsreview.com\/cloud-platforms\/author\/jedwards\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/posts\/577"}],"collection":[{"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/users\/24"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/comments?post=577"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/posts\/577\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/media\/579"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/media?parent=577"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/categories?post=577"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/tags?post=577"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}