Cloud Computing Security

Kunjal Trivedi, (CISSP, CCIE) has architected, designed, and helped to operate some of Cisco's largest enterprise and service provider customer networks. He is now helping to shape Cisco's Managed Services vision and strategy for data centers, VPNs, and security. A widely respected expert, he presents at Cisco Live, APRICOT, and NIST, and authored [Read Me First]: Building or Buying VPNs. Keith Pasley, CISSP, CISA, ITIL, GIAC Systems Network Auditor, helps companies clarify compliance-related security requirements and map them to IT strategy. He has designed security architectures and implemented security strategies in both government and commercial sectors.

PART I: The Change and the Challenge 1. The Change: Fundamentals of Business IT Services are Changing 2. The Challenge: Old Security Thinking Needs to Change 3. Risk Management: Where Does the Buck Stop in Cloud? 4. Compliance Issues and Guidance 5. Legal Issues and Challenges PART II: Cloud Computing Security - Business IT Architecture, Design, Deployment and Operations 6. Security Driven Cloud Computing Architecture 7. Emerging Frameworks for Cloud Computing and Security 8. Designing and Deploying Cloud Computing Security 9. Cloud Computing Operational Security PART III: Demand-side Driving the Cloud Computing Security Mandate 10. On-Boarding the Cloud Train: Stewardship of Cloud-based IT Services 11. Case Study: Cisco IT Deploying Secure Virtual Desktop Infrastructure APPENDICES Appendix A: Security Control Matrix Appendix B: Open Security Architecture