Information security challenges in cloud computing environments

Security

Information security is a primary concern for consumers and businesses. In "IT security fails to keep pace with the rise of cloud computing," the author claims that in spite of the advancements in cloud technology, information security has not kept pace. This assessment is rooted firmly in fact and best practices in the information security industry. Although their analysis is thorough, the authors would do well to point out the potential legal problems that arise due to the situation of poor security measures. As the Bureau of Consumer Protection points out, "Having a sound security plan in place to collect only what you need, keep it safe, and dispose of it securely can help you meet your legal obligations to protect that sensitive data." Companies and individuals who take advantage of cloud computing need to be aware of how the data being stored are also being protected against loss, manipulation, or theft. As many as "one in five global organisations cited hybrid cloud (public and private) in current use," ("IT security fails to keep pace with the rise of cloud computing,"). Therefore, the need for improved security in the cloud is becoming pressing.

The authors assert that organizations are starting to budget more for information security, though. This is consistent with recent data from the United States Department of Commerce and econometric data (Dhillon & Backhouse, 2000; Kaufman, Perlman & Speciner, 2002; Kissel Stine, Scholl, Rossman, Fahlsing, & Gulick 2008). The author of "IT security fails to keep pace with the rise of cloud computing," (2012) also mentions two of the most important methods of safeguarding information: "stronger oversight on the contract management process for cloud providers or the use of encryption techniques." These two methods are substantiated by recent IEEE forum proceedings. In addition to encryption and managerial oversight, access control policies, firewall improvement, better methods of detecting intrusions, and better tools for system evaluation are also integral to information security upgrades ("Why information security is hard - an economic perspective," 2001). The same report points out some of the limitations and burdens that can constrain the implementation of effective information security within cloud computing. The following microeconomic issues have been identified: "network externalities, asymmetric information, moral hazard, adverse selection, liability dumping and the tragedy of the commons," ("Why information security is hard - an economic perspective," 2001). Unfortunately, many organizations are failing to fathom the need for information security management. "Many organisations lack the formal risk assessment mechanism provided by the risk function," ("IT security fails to keep pace with the rise of cloud computing," 2012).