CloudAudit: Security and Regulation for an Open Model*
The goal of CloudAudit is to provide a common interface and namespace that allows enterprises who are interested in streamlining their audit processes (cloud or otherwise) as well as cloud computing providers to automate the Audit, Assertion, Assessment, and Assurance of their infrastructure (IaaS), platform (PaaS), and application (SaaS) environments and allow authorized consumers of their services to do likewise via an open, extensible and secure interface and methodology.
CloudAudit is an open standard developed by a Cloud Security Alliance working group that provides an open, extensible namespace and interface to enable cloud computing providers and their authorized customers to automate audits, assertions, assessments and assurance for their cloud infrastructure, platform or application environments.
With an ever-increasing regulation of consumer and corporate data in response to the growing push by governments, enterprise, and small business into cloud service offerings there’s a growing demand for a standard way to assess the true security of cloud service providers. Service providers would also be able to evaluate what assurance and compliance tools suit their customers best. The session will detail the CloudAudit API, share implementation examples, and introduce the implementation of the NIST 800-53 glossary and control items.
Christopher has spoken at the Boston OpenStack Conference and Geek.net Cloud VTS on the subject of “Securing the Cloud: From the Data Center to the Network & Beyond”. Christopher will be giving this talk at Cloud Expo East 2012.
Co-Founder and CTO of Piston Cloud
Prior to co-founding Piston Cloud Computing, Christopher was an early employee of Slicehost before its acquisition by Rackspace in 2008. From there he became a team lead in the development of Cloud Servers Windows. Christopher is an originating member of OpenStack’s Nova-core development team. Recent projects include serving as senior engineer on the Global Earthquake Model project, driving the development of a highly scalable earthquake modeling engine. In his spare time Christopher enjoys playing the ukulele, drawing and reading 16th and 17th century philosophy.