CSA Guide to Cloud Computing

Raj Samani is an active member of the Information Security industry, through involvement with numerous initiatives to improve the awareness and application of security in business and society. He is currently working as the VP, Chief Technical Officer for McAfee EMEA, having previously worked as the Chief Information Security Officer for a large public sector organisation in the UK and was recently inducted into the Infosecurity Europe Hall of Fame (2012).He previously worked across numerous public sector organisations, in many cyber security and research orientated working groups across Europe. Examples include the midata Interoperability Board, as well as representing DIGITALEUROPE on the Smart Grids Reference Group established by the European Commission in support of the Smart Grid Mandate.In addition, Raj is currently the Cloud Security Alliance’s Strategic Advisor for EMEA having previously served as the Vice President for Communications in the ISSA UK Chapter where he presided over the award of Chapter Communications Programme of the Year 2008 and 2009, having previously established the UK mentoring programme. He is also on the advisory council for the Infosecurity Europe show, Infosecurity Magazine, and expert on both searchsecurity.co.uk, and Infosec portal, and regular columnist on Computer Weekly. He has had numerous security papers published, and appeared on television (ITV and More4) commenting on computer security issues. He has also provided assistance in the 2006 RSA Wireless Security Survey and part of the consultation committee for the RIPA Bill (Part 3). Brian Honan is recognized as an industry expert on information security, in particular the ISO27001 information security standard, and has addressed a number of major conferences relating to the management and securing of information technology. Brian was a founding member of the Irish Corporate Windows NT User Group and also established Ireland’s first ever national Computer Security Incident Response Team. He is a member of the Information Systems Security Association, Irish Information Security Forum, Information Systems Audit and Control Association, and a member of the Irish Computer Society and the Business Continuity Institute. Brian’s previous publications include The Cloud Security Rules, ISO27001 in a Windows Environment, and Implementing ISO27001 in a Windows Environment. Jim Reavis is the Executive Director of the CSA, and was recently named as one of the Top 10 cloud computing leaders by SearchCloudComputing.com. Jim is the President of Reavis Consulting Group, LLC, where he advises security companies, large enterprises and other organizations on the implications of new trends and how to take advantage of them. Jim has previously been an international board member of the ISSA and formerly served as the association’s Executive Director. Jim was a co-founder of the Alliance for Enterprise Security Risk Management, a partnership between the ISSA, ISACA and ASIS, formed to address the enterprise risk issues associated with the convergence of logical and traditional security. Jim currently serves in an advisory capacity for many of the industry’s most successful companies.

"...equips the reader with necessary knowledge on the cloud and cloud security, and will be a useful companion for readers, especially those who are short on time." --Computing Reviews, CSA Guide to Cloud Computing"The book provides useful information…" --Computing Reviews"For those looking for a solid introduction to the issue around the security and privacy of cloud computing, the CSA Guide to Cloud Computing: Implementing Cloud Privacy and Security is a solid guide in which to use." --RSAConference.com"...this book is one of the best ones I've ever read about migrating resources to the cloud. With the resources and knowledge of the Cloud Security Alliance as a basis, this should not come as a surprise." --Help Net Security, December 2014

• Cloud Computing: What Is it, and What's the Big Deal?Selecting and Engaging with a Cloud Service ProviderMobile Solutions and the Cloud Security ImperativeBig Data and the CloudCertification and StandardsReal-Time AssuranceThe Threat LandscapeSecurity Considerations for the CloudThe Privacy ImperativeCompliance and Regulatory IssuesDark Clouds: What to Do in the Event of a Security Incident