EU warns governments on cloud computing

Public clouds should be used only for non-critical apps, says security agency Enisa

Private cloud computing environments are much more suited to the needs of government bodies than their public cloud equivalents, despite the latter offering higher service availability and improved cost benefits, according to the latest report from the European Network and Information Security Agency (Enisa).

The Security and Resilience in Governmental Clouds report presents senior management with a decision-making model with which to appraise the cloud solution which provides the best fit with their organisation.

Enisa concluded that, although cloud computing could theoretically offer better value, improved availability and stronger security than traditional environments, there are many weaknesses and threats "mainly linked to the lack of governance and control over IT operations and the potential lack of compliance with laws and regulations".

Public clouds are said to be the most risky from this standpoint because they can be owned by non-EU companies, and provide inadequate transparency about security and resilience measures and potential breaches.

The report also warns that internet connectivity may not be adequate in several member states to support such models.

To Continue Reading: Click Here
-------------------------------------------------
Source: v3.co.uk
By: Phil Muncaster