Cloudy Weather: How Secure Is the Cloud? Dan Technology Evangelist Microsoft Corporation

Cloudy Weather: How Secure Is the Cloud? More Jobs Owner - Bay State Integrated Technology, Inc. ( President - Boston User Groups ( Leader – Cub Scouts Pack 14, Lakeville, MA {LakevillePack14.com)LakevillePack14.com Founder/Chairman - Virtualization Group Boston

f in B Cloudy Weather: How Secure Is the Cloud? Dan Stolts, MCT, MCSA, MCITP, … CT, MA, ME, NH, VT, NY (upstate) IT Pro Technical Evangelist Microsoft Corporation Calendar: Lab Guides: Free Evaluation = Free Servers in the Cloud

Download 4 & Win Call-To-ACTION! Challenge Win Xbox or Surface Special Drawing for people that complete either event challenge will be registered to win a prize! xBox Console OR Surface RT device One entry per LiveID / per challenge. Limit one prize per event Screenshot must be received by 3pm Tuesday May 21 st. Winner will be contacted via for their prize choice and shipping address. Do it today or put on your calendar. Dont delay and miss out. Odds of winning are great!!!! 2) aka.ms/GetWin2012ISO 3) aka.ms/HyperV2012 1) aka.ms/SC2012Eval Build 1 & Win Start download of all of the above (System Center First) Pause Download and send a screenshot of download manager to (subject: Call To Action B-Sides) NOTE: Please do not FINISH download at event, do it at home if you want! Are you social? the message: Tweet I am ready for Windows Server Call-To-Action Step 1 Success. Activate a Free Azure Trial Create your first Free Cloud Virtual Machine Send a screenshot of Azure with VM created to (subject: Call To Action) Are you social? the message: I am ready for Windows Azure Call-To-Action Step 2 Success! NOTE : Requires Credit Card but you will NOT be billed if you do not manually change your account to a Pay Account Details: ITProGuru.com/Challenge OR 4) aka.ms/GetWin2012VHD ISO VHD OR B-Sides Boston

f in B Windows Server 2012 Early Experts Dan Stolts, MCT, MCSA, MCITP, … CT, MA, ME, NH, VT, NY (upstate) IT Pro Technical Evangelist Microsoft Corporation Cloud Virtualization System Center Management Infrastructure Free Training: Get Certified on Windows Server 2012

CLASSIFIED

confidentiality C integrity I availability A risk management compliance

moving to the cloud

LAWINDUSTRYSTANDARDS INTERNAL ISO

NOW Caveat LATER ISO/IEC 27001:2005 SSAE 16 (SOC 1 Type 2) EU-US Safe Harbour EU Model Clauses HIPAA BAA – App matters (contract addendum) Scope: Only the following Windows Azure features are covered by the current HIPAA BAA: Virtual Machines, Cloud Services, Storage (Tables, Blobs, Queues, Drives), and Networking.Virtual MachinesCloud Services StorageNetworking FISMA / FedRAMP…

NOW ISO/IEC 27001:2005 EU-US Safe Harbour EU Model Clauses HIPAA BAA DPA

physicalnetworkhost applicationdatauser

physical

network

host

application

data

dont put keys and data in the same place

Publisher NameSSN Smith, John NameSSN Smith, John pubadmin Subscriber NameSSN Smith, John sub Data PolicyAuthz ListCertKey SSNpub, subPub sub Pub pub

Publisher NameSSN Smith, John NameSSN Smith, John pub Subscriber NameSSN Smith, John sub Data PolicyAuthz ListCertKey SSNpub, subPub sub Pub pub

Publisher NameSSN Smith, John NameSSN Smith, John pub Subscriber NameSSN Smith, John sub Data PolicyAuthz ListCertKey SSNpub, subPub sub Pub pub

user

physicalnetworkhost applicationdatauser

Securing Services

Windows Azure Trust Center Find Me Later At The Windows Azure Booth

Connect. Share. Discuss. Learning Microsoft Certification & Training Resources TechNet Resources for IT Professionals Resources for Developers