Key ITIL Processes For Cloud Computing: Customer Perspective - Security Management

ITIL and Cloud Computing Series - Part 3

One of the key concern for any organization that wants to move their services to cloud is how secure their data and services would be. This is even more true if one wants to move their services to a Public cloud. This makes Security Management as one of the key processes that customers are concerned with.

It needs to be ensured that the IT security is integrated with the business security. Thus, a organization seeking cloud services has to ensure that their overall corporate and IT security governance framework is not compromised upon while moving their IT services to a cloud environment.

Initially moving the services, which has a high  security risk, to cloud should be avoided. These services should only be moved when all the concerned security risks are adequately addressed.

If the private cloud is set up internally then Security Management will not be of any concern as the services are still hosted internally. But the above discussion holds true if private cloud is provided by any vendor (in this case services are not hosted within the organizations own premises) or for a public cloud.