Security and Governance

Security is considered from a holistic perspective: the user of cloud services, the provider, the applications hosted in the cloud and the devices used to access the cloud services. This analysis is made using the Parkerian Hexad (Confidentiality, Control, Integrity, Authenticity, Availability and Utility) and the CIA Triad (Confidentiality, Integrity and Availability). Enforcing such security regimes is then discussed using security containers and monitoring.Data integrity is considered in terms of encryption, checksums and data loss prevention. Also, data privacy is discussed with regard to Personally Identifiable Data (PID).Legal and compliance issues, especially with regard to the jurisdiction of laws in an international cloud environment, is considered. Finally, a glossary of common security terms is provided.