A brand new presentation I gave for an online webcast for ISACA India. All comments are

1. Trust & Value from Cloud Computing Why you should go for it. ISACA Cloud Computing Task Force Marc Vael, Chairman 5 August 2011 – Virtual Seminar and Tradeshow

2. Whostartedallthis? “What's interesting [now] is that there is an emergent new model, and you all are here because you are part of that new model. I don't think people have really understood how big this opportunity really is. It starts with the premise that the data services and architecture should be on servers. We call it cloud computing – they should be in a "cloud" somewhere. And that if you have the right kind of browser or the right kind of access, it doesn't matter whether you have a PC or a Mac or a mobile phone or a BlackBerry or what have you – or new devices still to be developed – you can get access to the cloud.” Mr. Eric Schmidt, Chairman & CEO Google Search Engine Strategies Conference,9th of August 2006 http://www.google.com/press/podium/ses2006.html 5 August 2011 – Virtual Seminar and Tradeshow

3. We live in a world today that is quiteradically different from the world that existed just five yearsago. Cloud Computing Task Force Marc Vael, Chairman 5 August 2011 – Virtual Seminar and Tradeshow

4. 5 essentialcharacteristics 5 August 2011 – Virtual Seminar and Tradeshow

5. 5 essentialcharacteristics 5 August 2011 – Virtual Seminar and Tradeshow

6. 5 essentialcharacteristics 5 August 2011 – Virtual Seminar and Tradeshow

7. 5 essentialcharacteristics 5 August 2011 – Virtual Seminar and Tradeshow

8. 5 essentialcharacteristics 5 August 2011 – Virtual Seminar and Tradeshow

9. 3 service models 5 August 2011 – Virtual Seminar and Tradeshow

10. 4 deployment models 5 August 2011 – Virtual Seminar and Tradeshow

11. Cloud computing advantages 5 August 2011 – Virtual Seminar and Tradeshow

12. T R U S T V A L U E Cloud computing advantages Cloud Computing Trust & Value elements Confidentiality Privacy Integrity Availability Compliance Licensing Reliability Monitoring Integration Network centric Lower upfront investments More OPEX than CAPEX On demand Convenience Scalability Better resource pooling/usage Flexibility Business control over IT solutions Centralized data (sort of) Faster implementation Logging & Monitoring Green IT Trust creates the opportunity for Value Value is based on an expectation of Trust 5 August 2011 – Virtual Seminar and Tradeshow

13. 53%

16. Cloud computing attention topics Keep 15 basic IT outsourcing lessonslearned in mind: Psychological impact IT governance model Integration withinternal IT systems Network connectivity / bandwidth Data location Shared tenancy Lock in withvendor Cloud Service Provider stability, reliabilityandviability Service portability Legal & regulatory compliance aspects (includingLicensing, Contractual arrangements) Information security management (including IAM) Incident response & crisis management Business Continuity Management & Disaster Recovery Planning Data archiving & removal (Right to) Audit (pentest, screening, monitoring,…) 5 August 2011 – Virtual Seminar and Tradeshow

17. Cloud computing ready? 5 August 2011 – Virtual Seminar and Tradeshow

20. PO8 Manage quality

21. PO9 Assess & manage IT risks

22. AI4 Enableoperation & use

23. AI5 Procure IT resources

24. AI6 Manage change

25. AI7 Install & accredit solutions & changes

26. DS1 Design & manage service levels

27. DS2 Manage third-party services

28. DS4 Ensure continuous service

29. DS5 Ensure systems security

30. ME2 Monitor & evaluateinternal control

31. ME3 Ensure compliance withexternalrequirements 5 August 2011 – Virtual Seminar and Tradeshow

34. Your cloud computing solution is as strong … … as its weakest link

35. Contact information Marc VaelCISA, CISM, CISSP, CGEIT, ITIL Service Manager, Prince2 Chairman ISACA Cloud Computing Task Force ISACA 3701 Algonquin Road, Suite 1010 Rolling Meadows IL 60008 USA http://www.isaca.org/cloud marc@vael.net http://www.linkedin.com/in/marcvael http://twitter.com/marcvael 5 August 2011 – Virtual Seminar and Tradeshow

36. THANK YOU FOR YOUR ATTENTION

37. Cloud computing websites www.cloudsecurityalliance.org/ www.enisa.europa.eu/act/rm/files/deliverables/cloud-computing-risk-assessment csrc.nist.gov/groups/SNS/cloud-computing/ opencloudconsortium.org/ www.opencloudmanifesto.org/ www.cloud-standards.org/wiki/ en.wikipedia.org/wiki/Cloud_computing searchcloudcomputing.techtarget.com/ cloudcomputing.sys-con.com/ cloudsecurity.org/ www.cloudaudit.org/ www.isaca.org/cloudcomputingresources 5 August 2011 – Virtual Seminar and Tradeshow

38. Cloud computing publications Executive’s Guide to Cloud Computing,Eric Marks-Bob Lozano, 304 pages, May 2010 Enterprise Cloud Computing: A Strategy Guide for Business and Technology Leaders, Andy Mulholland-Jon Pyke-Peter Fingar, 260 pages, April 2010 Cloud Computing: technologies & strategies of the ubiquitous data center, Curtis Franklin & Brian Chee, 288 pages, February 2010 Above the Clouds: managing risk in the world of cloud computing, Kevin Mcdonald, February 2010 Cloud Computing for dummies, Judith Hurwitz-Robin Bloor-Marcia Kaufman, 310 pages, November 2009 Cloud Security,Ronald Krutz Russell Dean Vines, 384 pages, July 2010 Management strategies for the Cloud Revolution,Charles Babcock, 272 pages, June 2010 5 August 2011 – Virtual Seminar and Tradeshow