Commentary Addressing Risks and Opportunities Through the Life Cycle of Data, Technology, Advertising and Innovation

Data Counsel

Home | Data Counsel

&nbsp;If you are considering cloud computing and need to address related data privacy concerns, the articles discussed below provide an explanation of how cloud computing actually works to help you with your analysis.&nbsp;
The National Institute of Standards and Technology (NIST) recently revised its <a href="http://csrc.nist.gov/publications/drafts/800-145/Draft-SP-800-145_cloud-definition.pdf">definition</a> of cloud computing:
<blockquote>
"Cloud computing is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction.&nbsp; This cloud model promotes availability and is composed of five essential characteristics, three service models, and four deployment models."
</blockquote>
Another recent background resource is the <a href="http://techpolicyinstitute.org/files/yoo%20architectural_and_policy_implications.pdf">&ldquo;Cloud Computing: Architectural and Policy Implications&rdquo;</a> paper released by the Technology Policy Institute, which was written by Professor Christopher S. Yoo.&nbsp; The paper discusses the technical resources used in cloud computing, starting with an explanation of &ldquo;Key Cloud Computing Concepts,&rdquo; including &ldquo;virtualization.&rdquo; [The NIST also just released the final version of its <a href="http://csrc.nist.gov/publications/nistpubs/800-125/SP800-125-final.pdf">Guide to Security for Full Virtualization Technologies</a>]&nbsp; Other topics include the economics of cloud computing, as well as architectural implications for access networking and data center interconnectivity.&nbsp; The paper concludes with a discussion of industry impact and regulatory implications.&nbsp;
On the same day the NIST released its newly revised definition of cloud computing, it also released its first <a href="http://csrc.nist.gov/publications/drafts/800-144/Draft-SP-800-144_cloud-computing.pdf">privacy and security guidelines</a>.&nbsp; &ldquo;The key guidelines recommended to federal departments and agencies, and applicable to the private sector, include:
<ul>
<li>Carefully plan the security and privacy aspects of cloud computing solutions before engaging them.</li>
<li>Understand the public cloud computing environment offered by the cloud provider and ensure that a cloud computing solution satisfies organizational security and privacy requirements.</li>
<li>Ensure that the client-side computing environment meets organization security and privacy requirements for cloud computing.</li>
<li>Maintain accountability over the privacy and security of data and applications implemented and deployed in public cloud computing environments." </li>
</ul>

Catching Up on Cloud Computing