Trend Cloud Security Blog – Cloud Computing Experts

STILL Got Cloud Confusion? Check out these resources…

A year ago we posted a compendium of Cloud and Cloud Security resources. This posting has been consistently among the top hits to the Cloud Security Blog proving that, when it comes to Cloud the one thing we all need is clarity! Two of the most useful resources for Cloud 101 make up the common body of knowledge for the CCSK certification: Cloud Security Alliance: Security Guidance for Critical Areas of Focus in Cloud Computing European Network and Information Security Agency: Cloud Computing Risk Assessment Once you have the basics down, there are several industry organizations and groups which... read more

Cloud Security Alliance Congress 2010 Summary – Part 4 of 4

Cloud Security Alliance Congress 2010 Summary – Part 4 of 4   The Cloud Security Alliance kicked off its first major event November 16-17, 2010 in Orlando, Florida. The CSA Congress 2010 successfully hosted 370 people with talks covering all aspects of cloud security over two days. For those who were not in attendance at Congress, this four-part series summarizes some of the most popular sessions at the event. This is the final part of a four-part series summarizing popular sessions at the Cloud Security Alliance Congress. Top Threats and Risks to Cloud Computing Michael Sutton from Zscaler... read more

Is the Federal Government’s Shiny New Cloud Secure?

On December 5, 2010 the Washington Post printed this article: “Federal government moves forward with ‘cloud-first’ plan for new technology.” Trend Micro asked our VP of Cloud Security, Dave Asprey, to provide his thoughts and opinions about this government plan.  Here is what Dave wrote: It’s exciting to see that the GSA is leading the way to modernize the federal government’s IT by moving to “the cloud.”   However, in the rush to save money, the GSA may be repeating some mistakes that company IT departments have already made. To go to the cloud, the GSA had to... read more

Cloud Security Alliance Congress 2010 Summary: Part 2 of 4

INTRODUCTION Cloud Security Alliance Congress 2010 Summary – Part 2 of 4 parts The Cloud Security Alliance kicked off its first major event November 16-17, 2010 in Orlando, Florida. The CSA Congress 2010 successfully hosted 370 people with talks covering all aspects of cloud security over two days. For those who were not in attendance at congress, this four-part series will summarize some of the most popular sessions at the event. Cloud Security Alliance Congress 2010 Summary – Part 2 This is part two in a series of posts summarizing popular sessions at the Cloud Security Alliance Congress... read more

Mitigating Cloud Security Risks

In March the Cloud Security Alliance published “Top Threats to Cloud Computing V 1.0” to help organizations better understand the risks of cloud computing and to consequently make more informed risk management decisions when adopting cloud strategies.  In that document the CSA outlined seven threats and suggested steps for remediation.  At Trend we have traditionally embraced a layered approach to security, and cloud security is no different.  Each layer alone is valuable but not impenetrable; together the layers form effective protection.  Mimicking this traditional layered approach for... read more

New CSA Guidance

The Cloud Security Alliance (known affectionately as CSA) today published the second version of its “Guidance for Critical Areas of Focus in Cloud Computing” which you can download from the CSA website.  As full disclosure, I am co-chair of the Solution Provider group within the CSA along with my esteemed colleague Tim Matthews from PGP . An excerpt from the CSA press release concisely describes the document’s value: The Cloud Security Alliance is a not-for-profit organization with a mission to promote the use of best practices for providing security assurance within Cloud Computing, and... read more

Security experts roundtable from InfoWeek 500 conference

Trend Micro CEO Eva Chen took part in a Security Experts Roundtable at the InformationWeek 500 Conference in September. She was joined by Pacific Northwest Labs’ Jerry Johnson, RSA’s Mischel Kwon, and Time Warner’s Renee Guttman who shared their thoughts with Alex Wolfe about the changing nature of threats and the challenge of securing the cloud. The panel had some interesting thoughts about about where to invest security dollars and how to securely realize the benefits of cloud computing. Share/Bookmark read more