toute l'actualité "International"

L'emploi du cloud-computing ouvre la voie à de nombreux cauchemars quant à la sécurité du SI, malgré les discours rassurants des fournisseurs. Le Jericho Forum vient de publier un document explosif.

Businesses installing cloud computing environments risk opening a "Pandora's Box of security nightmares", according to independent security group the Jericho Forum. The Forum has Friday launched a document aimed at educating businesses about the security risks associated with moving to a cloud computing model. It described the paper as a "work in progress" and has called on key stakeholders, including end users and vendors, to work with them to establish best practices for securing collaboration in the cloud. The paper details a Cloud Cube Model that describes various types of cloud computing environments, and the associated security issues. According to Jericho, security, identity and access management are currently immature in the cloud computing setting, especially when it comes to collaboration between enterprises. "The cloud approach to organising business can be both more secure and more efficient than the old-style silo structure," said Adrian Seccombe, chief information security officer at pharmaceuticals firm Eli Lilly and Jericho Forum board member. "On the one hand cloud computing offers a compelling opportunity to achieve a more effective solution, do more with less, and deliver cost savings coupled with extreme flexibility and scalability. Viewed from a different perspective it opens a potential Pandora's Box of security nightmares, not least of which is loss of data confidentiality and integrity." But the Forum said cloud computing could become more secure than traditional environments if the right controls are put in place. "In fact, a pure cloud model really can make the user king, providing him with ultimate flexibility. But reaching that pure level is not easy. It's essential to get the foundations right and for each business to develop a cloud model that enables consumerisation, drives down cost and reduces risk," said Seccombe. The model defines four criteria by which to measure types of clouds: whether it is internal or external; proprietary or open; insourced or outsourced; and whether it has a security perimeter or not. Companies are advised to first classify their data according to sensitivity and regulatory or compliance restrictions, before deciding which data and processes to move to the cloud and which cloud models to adopt. In addition to the video produced for Computerworld UK, Jericho Forum has provided a video on YouTube that explains key parameters for secure collaboration. Siobhan Chapman - (c) ComputerWorld / IDG 2009

ACTUALITES A LA UNE Juridique Le rapport annuel de la Cour des Comptes souligne les déficiences informatiques de l'Etat 09/02/2012 - La Cour des Comptes a publié ce 8 février 2012 son rapport annuel. Elle y fustige entre autres choses les manquements de (...) Carrière Les centres de contacts bousculés par l'arrivée du social CRM 10/02/2012 - CIO : Comment passe-t-on des responsabilités de DSI à la création de société ? (...) Chiffres-clés Baromètre HiTechPros/CIO : le marché de la prestation informatique reste stable Biblio La révolution sociétale des réseaux sociaux Juridique La Cour des Comptes fustige l'informatisation du dossier patient à Marseille Projets Steria bascule la bureautique de 20 000 utilisateurs internes en SaaS Biblio Le Cigref et l'Ademe publient un guide du Green-IT >> Toute l'actualité
CONFERENCES LE CLOUD COMPUTING A L'EPREUVE DE LA REALITE : Bâtir le système d'information de l'entreprise numérique 16/02/2012 De 8h30 à 14h00 au Pavillon Dauphine - Paris 16e Programme   Inscrivez-vous Toutes les conférences		AGENDA L'intranet 2.0 et les Réseaux Sociaux d'Entreprise au service du travail collaboratif et de la communication interne Du mardi 13 mars 2012 au jeudi 15 mars 2012 Porte de Versailles - Pavillon 4 - Paris en savoir plus Tout l'agenda
		CONTRIBUTIONS Combiner informatique et marketing pour réussir Nigel Fenwick - Parole d'expert Principal Analyst de Forrester Research Les directeurs des systèmes d'information doivent combiner informatique et marketing pour réussir dans (...) La communication de la DSI Laurent Dherbecourt - Parole d'expert Partner chez Sopra Consulting Le jour où les informaticiens arrêteront de parler et commenceront à communiquer, leur sort sera meilleur... (...) Toutes les expertises

. Web-profils.com, la place de marché du conseil et de l'ingénierie