Standards body sets out cloud guidelines

NIST looks to make recommendations on security and privacy

The US government is setting out to address concerns about security in the cloud. The US National Institute of Standards and Technology has issued a draft document looking at issues such as privacy and security within cloud environments.

The institute has also sought to tackle the uncertainty and confusion that surrounds the technology by introducing a document that sets out a series of definitions of cloud computing.

The Guidelines on Security and Privacy in Public Cloud (registration required) examines some of the security issues facing cloud providers and customers and offers a series of recommendations for organisations to consider when outsourcing data, applications and infrastructure to a public cloud environment.

The report, written by NIST computer scientists Tim Grance and Wayne Jansen, stressed the importance of building in security from the outset. "To maximise effectiveness and minimize costs, security and privacy must be considered from the initial planning stage at the start of the systems development life cycle. Attempting to address security after implementation and deployment is not only much more difficult and expensive, but also more risky."

The report goes on to point out the importance of recognising that the cloud provider has little or no understanding of its customers' individual security requirements. "Organisations should require that any selected public cloud computing solution is configured, deployed, and managed to meet their security, privacy, and other requirements," warns the document.

Other issues for customers include ensuring that client-side computing environment meets the organisation's security and privacy requirements for cloud computing and that the organisation retains accountability for its data and applications deployed in the cloud.

The new cloud definition document,The NIST Definition of Cloud Computing, is NIST's contribution to the debate on cloud services. In its introduction, it points out that l"Cloud computing is still an evolving paradigm. Its definition, use cases, underlying technologies, issues, risks, and benefits will be refined and better understood with a spirited debate by the public and private sectors."

The NIST is looking for public comments on the documents, which must be submitted by 28 February.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection

Tags National Institute of Standards and TechnologyConfiguration / maintenancesecurityhardware systemsData Centre

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Maxwell Cooter

Techworld
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?