Cloud Computing Essay

Organizations use the Cloud in a variety of different service models (SaaS, PaaS, IaaS) and deployment models (Private, Public, Hybrid). There are a number of security issues/concerns associated with cloud computing but these issues fall into two broad categories: Security issues faced by cloud providers (organizations providing software-, platform-, or infrastructure-as-a-service via the cloud) and security issues faced by their customers.In most cases, the provider must ensure that their infrastructure is secure and that their clients’ data and applications are protected while the customer must ensure that the provider has taken the proper security measures to protect their information.

Federal organizations are moving their services to the cloud to minimize their software and infrastructure footprint and to save money, time, and resources. As cloud service providers (CSPs) are becoming prevalent, we must analyze the security of these services to ensure compliance with standards and laws that protect customers, citizens, and information. Therefore, this paper analyzes a new federal cloud compliance program called the Federal Risk and Authorization Management Program (FedRAMP). This paper also establishes that FedRAMP can indirectly aid federal government organizations to be compliant with the following laws: Health Insurance Portability and Accountability Act of 1996 (HIPAA); the Family Educational Rights and Privacy Act (FERPA); the International Traffic in Arms Regulations (ITAR); and the Payment Card Industry Data Security Standard (PCI DSS). This paper will briefly explain these four laws and cloud computing discussions regarding these laws. This paper will also explain FedRAMP and the way it can help federal organizations to be complaint with these laws.

The majority of us have been found out about the most cloud security disappointments in which all the cloud innovation organizations are kept on developing, despite everything they endure a similar kind of issues in-house infrastructure's. Distributed computing has turned into a greatest market in the present innovation. In a report of 2016, experts at Gartner anticipated that exchanging to cloud will influence $1 Trillion in Information innovation in the following five years. Cloud administrations showcase has developed to a degree level that it was not a striking level of aggregate it is spending, which was creating new innovations and new businesses which are conceived in the cloud. At the point when cloud administrations are going

The first scenario that will be examined is looking at Cloud Computing from the perspective of security. Many small and medium sized businesses utilize the internet and Cloud Computing to conduct business and transfer money from system to system as well as report on financial accounting data. With that being the case, it is crucial that whatever system the business is working with pays very close attention to security needs to ensure that this data is protected from unauthorized sources viewing or manipulating it.

To understand the public cloud computing environment that is being offered by the cloud providers. The responsibilities of an organization and the cloud providers vary depending on the service model. Any organization should understand and organize the process of consuming the cloud services and also keep an eye on the delineation responsibilities over the computing environment and implicate security and privacy. Assurances or certification and compliance review entity paid by the cloud providers to support security or privacy should be well verified time to time by organization through independent

In this burgeoning world of cyber criminals, it is imperative that companies address cloud computing security with their providers as they entrust their data to them. One of the biggest concerns with using cloud computing is the threat of a data breach or data loss. How do businesses combat that threat? According to Modis.com. (n.d), “Reputable cloud providers will offer security solutions like firewalls, secure login and data transfer” (p. 7). Though some companies will be worried about the cost of paying for enhanced security, it is imperative that this issue is incorporated into the cloud computing agreements. By addressing this issue upfront, the costs can be mitigated to a certain extent. A simple way to provide another layer of security is to require stronger password protocol of all users.

To understand the public cloud computing environment that is being offered by the cloud providers. The responsibilities of an organization and the cloud providers vary depending on the service model. Any organization should understand and organize the process of consuming the cloud services and also keep an eye on the delineation responsibilities over the computing environment and implicate security and privacy. Assurances or certification and compliance review entity paid by the cloud providers to support security or privacy should be well verified time to time by organization through independent assessment.

This journal reviews state-of-the-art services such as Security as a Service (SecaaS) that are emerging in the cloud community. The authors explore different methods using a systematic literature review to measure cost, security, and trust to ensure the most reliable metrics for both users and providers. Analyzing the results the article presents the benefits and agility that the software service can provide in a cloud computing environment, as well as the future growth potential in the industry. Using

Cloud computing is the service in the internet which can be accessible with web browser. The most of the business nowadays shifted toward the cloud computing which will decreased the overload data store problem and increased the security. Cloud computing cut the cost of the business and will increase the efficiencies. In the recent years there is the significant transitions in the business by the use of the cloud computing from desktop based to the software as a service (SaaS). There are many benefits from using the cloud computing in the business but there is always serval question arise regarding the legal practitioners and security when we compared it with the traditional way.

Representatives of most IT companies, particularly call centers, use cloud computing software to allow connectivity and sharing of resources in company data centers (Beverakis, Dick, & Cecez-Kecmanovic, 2009). Cloud computing software is an advanced tool used in outsourcing, particularly for communications, because of the capacity to collect and access massive amounts of data. This software is commonly operated in a data center, which allows access to associated data in a variety of ways (Anthes, 2010). Because most call centers operate using cloud computing, third-party IT contracting security is a primary concern (Anthes, 2010; Gatewood, 2009).

Therefore, while moving to any kind of cloud solution, it is imperative to work with experienced SaaS vendors, who can set up the authentication processes and the security firewalls. All clouds should provide data encryption. Even public clouds should provide certain levels of data

When approaching a cloud agreement, the customer’s mindset should be to protect oneself, but it is more easily

The public cloud is a deployment model where cloud services are provided over a public network, such as the internet, by a third-party provider. Examples of public cloud services include Dropbox, Gmail and Twitter. By definition, most SaaS applications operate under the public cloud deployment model. One of the primary advantages of public cloud is its attractive pricing model. The organisation is typically charged a subscription fee for access to the cloud services, paying only for the number of users required, this removes the need for business to manage software licences (Savvas [Online], 2014). However, security conscious organisations requiring a SaaS solution may opt for a private cloud segregated from public networks. There are obvious security concerns involved in exposing a SaaS application to a public network. However, there are concrete steps an organisation can take to reduce the risk incurred with public cloud deployments. Many public cloud SaaS providers offer two-factor authentication, requiring an additional level of verification before the user’s credentials are accepted. This is typically achieved using an authentication code in the form of a text message sent to the user’s registered mobile number. Furthermore, organisations should develop and maintain a culture of cyber security, enforce best practices such as creating strong passwords and training staff in phishing awareness.

The public cloud is a deployment model where cloud services are provided over a public network, such as the internet, by a third-party provider. Examples of public cloud services include Dropbox, Gmail and Twitter. By definition, most SaaS applications operate under the public cloud deployment model. One of the primary advantages of public cloud is its attractive pricing model. The organisation is typically charged a subscription fee for access to the cloud services, paying only for the number of users required, this removes the need for business to manage software licences (Savvas [Online], 2014). However, security conscious organisations requiring a SaaS solution may opt for a private cloud segregated from public networks. There are obvious security concerns involved in exposing a SaaS application to a public network. However, there are concrete steps an organisation can take to reduce the risk incurred with public cloud deployments. Many public cloud SaaS providers offer two-factor authentication, requiring an additional level of verification before the user’s credentials are accepted. This is typically achieved using an authentication code in the form of a text message sent to the user’s registered mobile number. Furthermore, organisations should develop and maintain a culture of cyber security, enforce best practices such as creating strong passwords and training staff in phishing awareness.

Usage of remote servers via internet to store, manage and process data instead of using a personal computer is known as Cloud computing. It’s a set of Information Technology services with the ability to scale up or down their service requirements. Most of the cloud services are provided by a third party service provider. In cloud computing, organizations can utilize IT services without in advance investment. Despite its benefits obtained from the cloud computing, the organizations are slow in accepting it due to security issues and challenges. Security is one of the major problems which hinder the growth of cloud. It’s not wise to handing over the important data to another company; such that clients need to be vigilant in understanding the risks of data infringement in this new environment. This paper discusses a detailed analysis of the cloud computing security issues and challenges. (Ayoleke)