Cloud Computing Security Assessment

Cloud Computing offers significant business benefits: practically unlimited scalability, the ability to provision new services on demand, and significant cost savings opportunities. However, organizations using Cloud Computing technologies need assurances that that corporate data is as secure as if hosted within their own infrastructure.

The Avaleris Cloud Computing Security Assessment Service provides a thorough security assessment of planned or deployed Cloud Computing services.

The Avaleris Cloud Computing Assessment Service provides the following:

• Assessment of the security risks associated with the proposed Cloud Service;
• Review of internal and external security controls utilized and provided by the Cloud Service;
• Analysis of the security implications of using the Cloud Service;
• Identification of the organization’s residual risk, should it proceed; and
• Recommendations on security risk mitigation to ensure that identified risks are controlled to the degree possible.

Depending on the nature of the Cloud Service, considerations for protective measures such as changes to application logic, identity management and account control, and security monitoring and intrusion detection will be made, as well as considerations for service level agreements and proper contracting safeguards.

The benefits of this service offering are as follows:

• Clear identification and articulation of the security risks of using a given Cloud Computing Service;
• Assurance that an independent third party has reviewed the planned security controls and due diligence that security has been assessed;
• Reasonable and practical recommendations to improve security, if required, for the given system.