Saturday, September 29, 2012

ESADE Law School professor warns of cloud computing security ...

ESADE Law School professor warns of cloud computing security risks at IP&IT Forum

Experts say the benefits of "getting on the cloud" include reduced costs for businesses, simplifying ICT use and environmental efficiency

Visualizar imágen en alta resolución

Despite the uncertainties surrounding the subject, Professor Ramon Miralles had the following to say, "Cloud computing is both the present and the future; we have to get out there, but not at any price". Professor Miralles is Co-ordinator of Auditing and Computer Security with the Catalan Data Protection Authority, Board member of the Spanish Chapter of the Cloud Security Alliance and Lecturer on ESADE's IP&IT Master Programme. Along similar lines, Daniel Gabarre, Attorney at the J. Isern Patent and Trademark Office added: "The cloud is the new computing paradigm; it's usually explained from the standpoint of the risks involved, but without taking into account that it can also represent a great opportunity for companies." Specific aspects of how this new storage system will be put into practice for businesses were detailed in the first session of the fourth edition of the IP&IT Forum (Intellectual Property and Information Society) held at ESADE Law School.

Loss of control
One issue that has caused most debate and concern among users is related to the security and storage of confidential data. In Professor Miralles' opinion, although the cloud is inherently "neither safe nor unsafe," the same cannot be said of how it is managed. "Cloud computing is synonymous with loss of control." This is how the professor defines the problem regarding security. The problem, as such, stems from the fact that the client contracting the service hands over data storage and management to a third party while remaining responsible for the information.

According to Professor Miralles, this problem is compounded by the lack of information provided by cloud computing suppliers: "We don't have enough information to carry out proper risk analysis so that the person responsible for this data can be sure of its proper management," he explained. This loss of control is amplified by a "lack of transparency from cloud computing service providers in terms of explaining to us the legal conditions under which these services are to be provided".

Responsibility for data
The security risks involved in cloud computing are highly related to the contractual relationship between the client and supplier providing these storage services. That is, the person responsible for handling the data is responsible for its safekeeping, regardless of whether it is in the hands of a third party. In addition, they should also verify that the provider complies with the legislative aspects regarding the protection of personal data. Therefore, Professor Miralles advised, "look for a provider who is will to sit down with you and negotiate the service terms."

Benefits of cloud computing
Despite the important aspects to consider when it comes to "getting on the cloud", there are also great potential benefits. According to Professor Miralles, it will bring greater economic efficiency and simplify the use of ICT, but it will also provide more possibilities in terms of using applications and creating new ways of accessing information. Furthermore, cloud computing is more environmentally friendly given that it "uses shared data processing centres that are more energy efficient," explained the expert.

Source: http://www.esade.edu/web/eng/about-esade/today/news/viewelement/247921/1/esade-law-school-professor-warns-of-cloud-computing-security-risks-at-ipit-forum

giants ok go peyton manning super bowl nsx chad ochocinco roman numerals new england patriots

No comments:

Post a Comment