Cloud Security Journal

Terry Woloszyn, Founder of PerspecSys Inc., emphasized security and compliance in his general session at the 4^th International Cloud Computing Conference & Expo, held at the Santa Clara Convention Center, Nov. 2 - 4.

In his session - "Addressing Data Privacy, Residency, and Security when Adopting Cloud Applications" - he focused on new technologies and techniques that allow sensitive data to appear to be in the cloud, but really remain behind the enterprise firewall. Woloszyn emphasized that "there should be a segregation of the data and the functionality. All the business sensitive date should be behind the firewall."

He then outlined the approaches to addressing Data Privacy, Residency, and Security (PRS) when adopting the cloud. "A PRS solution should ensure the business sensitive data never leaves your database," he noted.

You need to ensure compliance and give control for future use of sensitive information across a plurality of SAAS. "If I can keep the data behind the firewall than I can keep it as secure as I want," Woloszyn continued. Even if cloud solution is somehow released, the hacker only gets replacement documents. "Next time you are looking to adopt Software as a Service, you will have to go through a security audit."

He then continued to review some of the more pressing public cloud adoption challenges that face organizations today regarding security, regulatory and standards compliance. "You have to be more encompassing in your adoption of the enterprise space," he noted.

At the end, Woloszyn noted, "You can have the best of both worlds - leveraging public cloud application functionality, while sensitive data remains at home."