Showing posts with label cloud security. Show all posts
Showing posts with label cloud security. Show all posts

Thursday, February 6, 2014

I can't spell?

When our security review asked if we were multi-tenant, why did you answer, "That would be a paradox"?
The important lesson to learn here is not all the faces of the Doctor.  Not that multitenancy can be a concern for your FEDRAMP analysis.  But that the ? goes outside the quotes and no period goes inside the quotes because the most important piece of punctuation wins.  You can show that off in your next work email.


Snarky: When our security review asked if we were multi-tenant, why did you answer, "That would be a paradox"?
Title: I can't spell?

Thursday, October 17, 2013

I would but my credentials aren't strong enough.

 Although it's rather absurd to ask "is the cloud secure?", there seems to be no shortage of opinions on the matter. Leaving the discussion of what "the cloud" is out of the equation, I am of the opinion that my data is probably more "secure" living on servers in some corporate datacenter that it would be on my own computer because I get redundancy and reliability for "free", plus there's a good chance that the servers on which my data lives are far more difficult to physically steal than say a laptop in my bag.   Obviously there is a very broad spectrum when it comes to providers and "buyer beware" definitely applies.

To me the concern with putting your data in the cloud has much more to do with the motivation/intent of the provider with whom it is entrusted.  If said provider plans to make money through acquiring the data of you and millions of other people it seems rather pointless to fret about some nefarious hacker gaining unauthorized access to the data when the provider is basically giving it away in some form or another.

Title: Did you see the new job posting? They're looking for a Cloud Security Officer. You should apply! 
Snarky: I would but my credentials aren't strong enough.