Yeji Kim
IST 205 Introduction to Information Systems Executive Summary Assignment #1
An article that I read, “What is Cloud Security?”, mainly addressed about the definition of
Cloud Security, four categorizations of Cloud Computing, responsibilities that each segment of
cloud securities have, and both challenges and solutions for cloud security. In short, Cloud
computing is to deliver an services of information technology via internet. In this point, cloud
security is related with the threats from outside and inside of cybersecurity against cloud
computing environments. Since cloud computing has become an integral part to be successful in
business, cloud security management has also been one of the issues.
There are mainly four categories of cloud computing – Public cloud services with a public
cloud provider (SaaS, IaaS, PaaS), Private cloud services with a public cloud provider, Private
cloud services with an internal staff, and Hybrid cloud services. Understandably, cloud providers
try their best to secure cloud. Not only cloud providers, but cloud customer have distinguished
responsibility from them. For instance, SaaS customers have accountability of their data and user
access.
Based on this article, there are some several disadvantages for cloud computing. Foremost, IT
department in the customer company has less control over of cloud data. It is because if the data
is stored in the public cloud, that means a third party is the one that stores it. Therefore, this led
IT members to confines of total accessibility to cloud data. Also, because of some employee total
company can be in risk – “Insider threats”.
However, training employees and making compliance practices more restrictive could solve
insider threat challenge. Moreover, encryption of cloud data and data classification will alleviate
the problem related to control. Then, there will be more advantages which is lowering cost of
company and lead to business transformation and success easier.