Yeji Kim

IST 205 Introduction to Information Systems Executive Summary Assignment #1

An article that I read, “What is Cloud Security?”, mainly addressed about the definition of

Cloud Security, four categorizations of Cloud Computing, responsibilities that each segment of

cloud securities have, and both challenges and solutions for cloud security. In short, Cloud

computing is to deliver an services of information technology via internet. In this point, cloud

security is related with the threats from outside and inside of cybersecurity against cloud

computing environments. Since cloud computing has become an integral part to be successful in

business, cloud security management has also been one of the issues.

There are mainly four categories of cloud computing – Public cloud services with a public

cloud provider (SaaS, IaaS, PaaS), Private cloud services with a public cloud provider, Private

cloud services with an internal staff, and Hybrid cloud services. Understandably, cloud providers

try their best to secure cloud. Not only cloud providers, but cloud customer have distinguished

responsibility from them. For instance, SaaS customers have accountability of their data and user

access.

Based on this article, there are some several disadvantages for cloud computing. Foremost, IT

department in the customer company has less control over of cloud data. It is because if the data

is stored in the public cloud, that means a third party is the one that stores it. Therefore, this led

IT members to confines of total accessibility to cloud data. Also, because of some employee total

company can be in risk – “Insider threats”.

However, training employees and making compliance practices more restrictive could solve

insider threat challenge. Moreover, encryption of cloud data and data classification will alleviate

the problem related to control. Then, there will be more advantages which is lowering cost of

company and lead to business transformation and success easier.