Microsoft Corporation has added its Azure cloud platform to
the Cloud based Security Alliance's STAR (Security, Trust, and Assurance
Registry) security registry, which is a listing where cloud service providers
post information about their security features. The STAR began last year but
almost six months after its launch only 3 companies had filled out the 170 question
form that makes up STAR. Microsoft Corporation was one of the early adopters
when it submitted security information for Microsoft Office 365, with cloud
service providers Mimecast and Solutionary being the others. In the last month,
though, there have been two additions, including Microsoft Azure and Information
Technology and cloud manager SHI International. [ In the data center today, the
action is in the private cloud. InfoWorld's experts take you through what you need
to know to do it right in our "Private Cloud Deep Dive" PDF special
report. | Also check out our "Cloud Security Deep Dive," our
"Cloud Storage Deep Dive," and our "Cloud Services Deep
Dive." ]
In the registry listing, Microsoft Corporation officials say
that Azure's "core services" are ISO 27001 certified and "this
work is planned for the remaining features of the platform." The
"core" services, it says, refer to compute, storage, and virtual
network features. Meanwhile, the company's global foundation services, which
are the systems that run much of Microsoft's Corporation online services,
undergo annual American Institute of Certified Public Accountants Statement of
Auditing Standards No. 70 audits. The SAS 70 audits will be replaced with
Standards for Attestation Engagements No. 16 audits and International Standards
for Assurance Engagements No. 3402 audits. Some cloud watchers have expressed
optimism for STAR to be a place where customers can easily compare and contrast
security features from providers they may consider working with. But, to fully
realize that potential, Kyle Hilgendorf, a Gartner analyst, says more companies
need to sign on. CSA officials say that some big name companies, such as
Google, McAfee, Verizon, and Intel companies, have said they will contribute to
STAR, but they haven't yet. "Our customers are able to go to the STAR
registry and they're able to pick up our specific security controls, they're
able to dive into what we do at the data center level, all the way up through
the platform level," says Kellie Ann Chainier, a cloud business manager
for Microsoft Corporation, in a video posting the company released about the
news.
Source: Info World
No comments:
Post a Comment