NIST om molnet (och transparens)
NIST släppte för några dagar sedan rapporten NIST Cloud Computing Synopsis and Recommendations (pdf) som, namnet troget, ger rekommendationer för moln-leverantörer. Det glädjer mig att de nämner bristen på transparens, även om de viger utomordentligt lite utrymme för det:
8.4.1 Lack of Visibility
Subscribers may lack visibility into how clouds operate. If so, they will likely be unable to tell if their services are being undertaken and delivered in a secure manner. Different models of cloud service delivery add or remove different levels of control from the subscriber. However, the option for a subscriber to request that additional monitoring mechanisms are deployed at a provider’s site is plausible and currently used in a variety of non-cloud systems.
Som bekant så tror jag att transparens är viktigare än så.
--
Stefan Pettersson
8.4.1 Lack of Visibility
Subscribers may lack visibility into how clouds operate. If so, they will likely be unable to tell if their services are being undertaken and delivered in a secure manner. Different models of cloud service delivery add or remove different levels of control from the subscriber. However, the option for a subscriber to request that additional monitoring mechanisms are deployed at a provider’s site is plausible and currently used in a variety of non-cloud systems.
Som bekant så tror jag att transparens är viktigare än så.
--
Stefan Pettersson
Kommentarer
Trackback
