1. Cloudy Weather: How Secure Is the Cloud? David Aiken Windows Azure Microsoft Corporation

2. CLASSIFIED

4. confidentiality C integrity I availability A risk management compliance

5. moving to the cloud

6. LAWINDUSTRYSTANDARDS INTERNAL ISO

7. FISMA ISO 27001 SSAE 16 SAS 70 EU PII PCI DSS HIPAA SOX GLBA CFR Title 21 Part 11

8. NOW NEXT LATER ISO/IEC 27001:2005 SSAE 16 (SOC 1 Type 2) EU-US Safe Harbour EU Model Clauses HIPAA BAA FISMA / FedRAMP…

9. http://www.windowsazure.com/en-us/support/trust-center/

10. NOW ISO/IEC 27001:2005 EU-US Safe Harbour EU Model Clauses HIPAA BAA DPA

11. http://www.microsoft.com/en-us/office365/trust-center.aspx

12. physicalnetworkhost applicationdatauser

13. physical

14. network

15. host

16. application

17. data

18. don’t put keys and data in the same place

19. Publisher NameSSN Smith, John123-45-6789 NameSSN Smith, John123-45-6789 pubadmin Subscriber NameSSN Smith, John123-45-6789 sub Data PolicyAuthz ListCertKey SSNpub, subPub sub Pub pub

20. Publisher NameSSN Smith, John123-45-6789 NameSSN Smith, John123-45-6789 pub Subscriber NameSSN Smith, John123-45-6789 sub Data PolicyAuthz ListCertKey SSNpub, subPub sub Pub pub

21. Publisher NameSSN Smith, John123-45-6789 NameSSN Smith, John123-45-6789 pub Subscriber NameSSN Smith, John123-45-6789 sub Data PolicyAuthz ListCertKey SSNpub, subPub sub Pub pub

22. user

23. physicalnetworkhost applicationdatauser

25. Securing Services

32. Windows Azure Trust Center Find Me Later At The Windows Azure Booth

33. Talk to our Experts at the TLC #TE(sessioncode) DOWNLOAD Windows Server 2012 Release Candidate microsoft.com/windowsserver Hands-On Labs DOWNLOAD Windows Azure Windowsazure.com/ teched

34. Connect. Share. Discuss. http://northamerica.msteched.com Learning Microsoft Certification & Training Resources www.microsoft.com/learning TechNet Resources for IT Professionals http://microsoft.com/technet Resources for Developers http://microsoft.com/msdn

35. Required Slide Complete an evaluation on CommNet and enter to win!

36. Scan the Tag to evaluate this session now on myTechEd Mobile