Does Cloud adoption outstrip security?

[Caute_cautim]

How many believe this is true? 

https://www.darkreading.com/cloud/security-pros-agree-cloud-adoption-outpaces-security/d/d-id/133401...

Is it a believable report?  Or do we need a good shake up and realisation?

Regards

Caute_cautim

[Chuxing]

Can’t say that I’m surprised of the article title, but I believe that certain people are drawing conclusions too soon.

I remember distinctly that not too long ago people were afraid of interconnected networks that would make security too difficult, and that interconnected networks was called “Internet”.

We are still at the infancy of cloud computing, so relax, but work diligently to solve the problems, and not to be an alarmist.

Just my quick thoughts...

[Caute_cautim]

I think it is rushing faster than you think, certainly the associated complexity associated with Kubernetes, Microservices and API's is certainly rushing head long - and packaged up, but the associated implications are certainly not being considered i.e. from an architectural perspective, which runs the issue of increased risk management just in time.
Regards
Caute_cautim

[rslade]

> Caute_cautim (Advocate I) posted a new topic in Industry News on 03-03-2019

> Subject: Does Cloud adoption outstrip security?

Short answer: yes.

>     Or do we need a good shake
> up and realisation?

Well, we'll get one, eventually.

Remember that CLOUD is actually an acronym. It stands for "Could Lose Our
Under Drawers."

The thing with "cloud" is that it simply means "somebody else's computer." It's
not new: we've had it for years. Under the names timesharing, distributed
computing, thin client, and loads of others.

Like many "advances" in computing, people think it means what they think it
means, while vendors think it means what is easiest to do and will make them the
most money. "Cloud" *could* mean resilience, automatic backup, distributed
computing, and lots of other things that mean you have extra security (of certain
types), but it doesn't have to.

Unfortunately, as with new fads such as cyberinsurance, many people think it
means you don't have to do a risk analysis, when it actually means you have to do
*more* risk analysis.

Future projections look nebulous ...

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
I'll tell you what it's like to be No. 1. I compare it to
climbing Mount Everest. It's very difficult. Lives are lost along
the way. You struggle and struggle and finally you get up there.
And guess what there is once you get up there? Snow and ice.
- David Merrick
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB