Embed Size (px)
DESCRIPTION
COBIT is a management discipline for controlling information technology assets. Cloud computing does cannot be controlled by users and their IT organizations in the same way they control internal data centers. For cloud computing confidence objectives must be achieved through enabling trust rather than implementing controls.
Citation preview
Control Confidence & The CloudToronto CobiT User Group
Panel Discussion
Tuesday, April 14, 2009
Alex Todd
Can’t control a cloud.
Trust
Unknown
Control
Control possessions. Trust aspirations.
Bob Fabian
What do you want?
What do you have?
I want to use an IT cloud.
I have a data centre.
Two paths to confidence.
Confidence
Control Trust
COBIT → Confidence OBjectives for Information and related Technology
Trust
Leadership
Bob Fabian Alex Todd2010
?CobiT5
IT Outsourcing → Cloud Computing
Outsourcing Cloud Computing
Eqentia is a powerful Software-as-a-Service platform delivering tailored, semantic-based knowledge portals.
Eqentia is a powerful Software-as-a-Service platform delivering tailored, semantic-based knowledge portals.
What’s to trust/control in a cloud?
Access
ConfidentialityReliability
Availability
Privacy Manageability
Ownership
Building Confidence
What Can Control Need to Trust
Data Service Yes No Monitors Authorities
Ownership ? √
Manageability ? √
Access ? √
Confidentiality ? √
Reliability ? √
Availability Availability ? √
Privacy ? √
Bottom Line
“Trust is extremely subjective – people felt the same way about eCommerce and online banking - that trust level seems to
have increased over time through mainstream adoption; the same will happen
with Cloud Computing”
