Privacy and technology

Uit de inleiding:

“In opdracht van ABN AMRO heeft Heliview Research & Consultancy onderzoek gedaan naar de impact van Cloud Computing op de Nederlandse ICT-sector (dienstverleners en softwarebedrijven). Dit rapport bevat een analyse van de vraag- en aanbodzijde van de zakelijke ICT-markt. Zit er een gat tussen vraag en aanbod? Op basis van de conclusies uit de analyse presenteren wij onze belangrijkste aanbevelingen voor de ICT-sector.”

(Source: advotheek.nl)

From the executive summary:

“This document is a practical guide aimed at the procurement and governance of cloud services. The main focus is on the public sector, but much of the guide is also applicable to private sector procurement. This guide provides advice on questions to ask about the monitoring of security (including service availability and continuity). The goal is to improve public sector customer understanding of the security of cloud services and the potential indicators and methods which can be used to provide appropriate transparency during service delivery.”

From the main page:

“The Cloud Security Alliance (CSA) announces the launch of a new initiative to encourage transparency of security practices within cloud providers. The CSA Security, Trust & Assurance Registry (STAR) is a free, publicly accessible registry that documents the security controls provided by various cloud computing offerings, thereby helping users assess the security of cloud providers they currently use or are considering contracting with. CSA STAR is open to all cloud providers, and allows them to submit self assessment reports that document compliance to CSA published best practices.”

(Source: darkreading.com)

From 1. Introduction:

“The goal of this white paper is to highlight the capabilities and requirements that need to be standardized in a cloud environment to ensure interoperability, ease of integration and portability. It must be possible to implement all of the use cases described in this paper without using closed, proprietary technologies. Cloud computing must evolve as an open environment, minimizing vendor lock-in and increasing customer choice.”

(Source: computerworld.nl)

Uit de management samenvatting:

“Het ministerie van Economische Zaken, Landbouw en Innovatie (EL&I) onderzoekt hoe zij kan bijdragen aan het wegnemen van belemmeringen en het stimuleren van het (veilig) toepassen van Cloud Computing. Ter ondersteuning van dit onderzoek schreef Verdonck, Klooster & Associates, in samenwerking met Van Doorne en RAND, het voorliggende rapport ‘Cloud Computing; fundament op orde’. Vanuit bestaande onderzoeken en een beperkt aantal aanvullende gesprekken met diverse stakeholders, verschaft het rapport inzicht in effecten, belemmeringen en randvoorwaarden van Cloud Computing, worden conclusies getrokken en aanbevelingen aan EL&I gedaan.”

(Source: accountant.nl)

Abstract:

“Cloud computing can and does mean different things to different people. The common characteristics most share are on-demand scalability of highly available and reliable pooled computing resources, secure access to metered services from nearly anywhere, and dislocation of data and services from inside to outside the organization. While aspects of these characteristics have been realized to a certain extent, cloud computing remains a work in progress. This publication provides an overview of the security and privacy challenges pertinent to public cloud computing and points out considerations organizations should take when outsourcing data, applications, and infrastructure to a public cloud environment.”

(Source: insideprivacy.com)

From the Executive Summary:

“The NIST Cloud Computing Standards Roadmap Working Group has surveyed the existing standards landscape for security, portability, and interoperability standards/models/studies/use cases, etc., relevant to cloud computing. Using this available information, current standards, standards gaps, and standardization priorities are identified in this document.”

(Source: insideprivacy.com)

From the ‘About us’ page:

“The Centre for Commercial Law Studies (CCLS) at Queen Mary, University of London has embarked on a three year project to undertake academic research in relation to cloud computing and to disseminate the key findings of that research. […] The purpose of this project is to reduce that uncertainty via the production and dissemination of a series of scholarly yet practical research papers to address various legal and regulatory issues that will be fundamental to the successful development of cloud computing.”

(Source: dataprotector.blogspot.com)

Guidance for cloud computing use, from the German data protection authorities.

(Source: hldataprotection.com)