Related Future Workshops

    No related items at present. Contact us on +44 (0)1442 866634 or email Events@corporateITforum.com for details of Activities in preparation.

Service Areas

This content belongs to:
  • Information Security Service
  • The Forum
Filtering Off

(Past Event)

Secure in the Cloud

Workshop

When:
13 Jul 2010
(Past)
Ref:
W832

Event output

  1. Secure in the Cloud (Executive Summary)
  2. Secure in the Cloud (Presentation)
  3. Secure in the Cloud (Report)
  4. Secure in the Cloud (Top Tips)

During the discussions at the Forum's Cloud Conference particular issues were highlighted as a barrier to the implementation of Cloud services. One of the main concerns, at a top level, is security - which in itself is complicated and multi faceted. With the increase of Corporate Cloud implementation, all of these challenges will need addressing to ensure safe, business-ready adoption.

Summary:

When it comes to Cloud services organisations vary widely in their adoption maturity - whether you are assessing, implementing or are already using a service in some shape or form the questions over security have to be discussed.

Data security and protection, location of the data, reliability of DR solutions and a lack of standard security for hosted services are only a few of the challenges members are seeking answers to from service providers

Speakers:

Greg Day, Director of Security Strategy, EMEA
Greg Day is director of EMEA security strategy for McAfee, driving the enablement of business solutions for strategic customer accounts, channel partners and sales teams.  He is also the primary analyst of security trends and McAfee strategy in the region.  As an active spokesperson for the company, he is a frequent contributor to journals, has had numerous papers published and is a keynote speaker on all aspects of information security at conferences and events across EMEA.  Day has taken an active role in promoting awareness of today's broader security challenges and has played a key role in a range of initiatives designed to highlight and address these issues, both today and in the future. 

 Day has worked in the information security industry since 1991, having started his career with Dr Solomon's, where he built and led a consultancy team.  Dr Solomon's was subsequently acquired by McAfee and Day has since held a number of different roles within the company.  He was instrumental in founding the company's best practices team and has also worked as a global solutions architect, providing senior consultancy to McAfee's blue chip customers and high-security government offices and remains an active member of McAfee Labs, the company's global threat analysis and response team. 

 Day is the EMEA lead for McAfee's cybercrime fighting initiative, working closely with law enforcement agencies, government and private sector groups to tackle and educate on this growing threat.  

 Day has a BSc (Hons) in Information Systems from the University of Portsmouth and wrote his own TSR memory resident virus interceptor in assembler language as part of his dissertation on computer viruses.

Objectives:

No matter what stage of adoption, delegates will leave the workshop with increased awareness and knowledge of what Corporate IT is doing in this area. Discuss areas of concern, discover how other organisations have addressed issues or mitigated risk and debate the best practice for Corporate Cloud Computing services.

Who should attend:

Architects, Service Managers and Security Managers and those involved in assessing the security risks associated with the use of Cloud technologies

Agenda:

09.45 Delegate registration

10.00 Welcome by the Forum and delegate introductions

10.15 Presentation from Greg Day, Director of Security Strategy, EMEA, McAffee covering:

  • Understanding the business value of cloud computing
  • What are the risks and rewards?
  • What does this mean to my security?  For many managing data protection is the core concern.
  • Does the cloud computing offer new security opportunities
  • Are all clouds the same?

11.00 Mid-morning break

11.15 Round-table discussions to cover:

1. Understanding the variety of services that 'cloud' might cover

2. Understanding the security issues:

  • Ensuring data security is at an acceptable level
  • Vendors
  • Standards and Security Models

13.00 Lunch

13.45 Round-table discussions to cover:

  • Understanding the security issues:
  • Risk models, monitoring & impact assessment
  • Location of hosted data and associated legalities

15.00 Mid-afternoon break

15.15 Round-table discussions to cover:

  • Understanding the security issues: Compliance to mandatory regulations

15.50 Summary of discussions & identification of actions

16.00 Close