There are some topics that seem to be shrouded with uncertainty and confusion and the “Cloud” is one of those topics. I was talking with a fellow CISO of a Federal Agency a few weeks back and the topic of “cloud migration” came up. Not unexpectedly, my CISO friend expressed that the biggest obstacles to overcome are the usual suspects of Data Ownership and Protection, User Identity Management and Federation, Regulatory Compliance, Business Continuity and Resiliency, User Privacy and Secondary Uses of Data, Service and Data Integration, Multi-tenancy, Incident Response and Forensic Analysis, and Infrastructure and Application Security.
Then . . .