Challenging Security Requirements for US Government Cloud Computing Adoption PDF Download

Author: National Institute National Institute of Standards and Technology
Publisher:
ISBN: 9781548140496
Category :
Languages : en
Pages : 64

Get Book

Book Description
November 2012 The NIST Cloud Computing Security Working group was created to achieve broad collaboration between federal and private stakeholders in efforts to review the security-related issues expressed by federal managers. Through its research, the working group identified a list of challenging security requirements that are perceived by federal managers as impediments to the adoption of cloud computing. This document focuses on the description of these challenging security requirements and identifies mitigations for each challenging issue when they exist. Where no mitigations are identified, the document provides either a description of activities that will serve to mitigate the risk created by the identified issue to an acceptable level, or makes recommendations for mitigations. This document is not intended to be a comprehensive or exhaustive list of the highest risks to federal data in a cloud environment. It is instead a practical look at the concerns expressed by federal managers and documented by a number of sources within government and private industry. Some of the challenging security requirements listed may have technical mitigations, but may require guidance or standards to ensure effective application. Others may have policies or mandates requiring implementation but lack the technical application in the cloud computing environment. The challenging security requirements discussed in this document are not listed by priority or importance. The priority and/or risks can vary widely based on the nature of the service moved to the cloud, the data associated with the service, and the cloud computing ecosystem (service model, deployment model, accountability, outsourcing, etc.). Why buy a book you can download for free? First you gotta find it and make sure it's the latest version, not always easy. Then you gotta print it using a network printer you share with 100 other people - and its outta paper - and the toner is low (take out the toner cartridge, shake it, then put it back). If it's just 10 pages, no problem, but if it's a 250-page book, you will need to punch 3 holes in all those pages and put it in a 3-ring binder. Takes at least an hour. An engineer that's paid $75 an hour has to do this himself (who has assistant's anymore?). If you are paid more than $10 an hour and use an ink jet printer, buying this book will save you money. It's much more cost-effective to just order the latest version from Amazon.com This public domain material is published by 4th Watch Books. We publish tightly-bound, full-size books at 8 � by 11 inches, with glossy covers. 4th Watch Books is a Service Disabled Veteran Owned Small Business (SDVOSB) and is not affiliated with the National Institute of Standards and Technology. For more titles published by 4th Watch, please visit: cybah.webplus.net GSA P-100 Facilities Standards for the Public Buildings Service GSA P-120 Cost and Schedule Management Policy Requirements GSA P-140 Child Care Center Design Guide GSA Standard Level Features and Finishes for U.S. Courts Facilities GSA Courtroom Technology Manual NIST SP 500-299 NIST Cloud Computing Security Reference Architecture NIST SP 500-291 NIST Cloud Computing Standards Roadmap Version 2 NIST SP 500-293 US Government Cloud Computing Technology Roadmap Volume 1 & 2 NIST SP 500-293 US Government Cloud Computing Technology Roadmap Volume 3 DRAFT NIST SP 1800-8 Securing Wireless Infusion Pumps NISTIR 7497 Security Architecture Design Process for Health Information Exchanges (HIEs) NIST SP 1800-1 Securing Electronic Health Records on Mobile Devices NIST SP 800-177 Trustworthy Email