RSA president calls on security industry to adopt cloud technologies

March 2, 2010, 3:11pm PST | Length: 00:04:20
RSA President Art Coviello kicks off the annual security conference in San Francisco by addressing the importance of cloud computing in the next wave of IT. But he says that trust is a big hindrance to cloud-computing adoption and the industry isn't doing enough to improve its security.

Transcript

RSA president calls on security industry to adopt cloud technologies

>> We, in the security industry, need a more elevated and expansive vision connected to the huge wave of IT transformation that is underway right now, cloud computing. Think for a moment about why cloud computing is so powerful. It enables businesses to leave their aging, inflexible and costly IT infrastructures behind and move to a new payasyougo model characterized by choice and agility, and not a moment too soon. Because organizations are spending as much as two thirds of their IT budgets to just maintain their infrastructures and applications, keeping the lights on. Cloud computing can dramatically alter this two thirds/one third ratio so that much more energy and investment can be directed toward real innovation and competitive advantage. The trouble is, something's holding back the full realization of this vision. And that, in a word, is security. CIO Magazine recently published its State of the CIO study. And get this, 51% of CIOs surveyed, more than half cited security as their greatest concern surrounding the adoption of cloud computing. And if you're suffering from cloud fatigue or are tired of hearing about it, let me remind you of the then MIT media lab's visionary, Nicholas Negroponte, who said in 1997 that the internet was the most overhyped, but underestimated, phenomenon in history. Mark my words, the same will be true of cloud computing. Cloud computing will complete the transformation of IT infrastructures unleashed by the internet. Organizations will demand it because they must, absolutely must get faster and better returns on their IT investments. So we must play an essential role in making cloud computing a reality. So here's the scope of our challenge and our opportunity, as I see it. The challenge is to ensure that safety is designed and built into the cloud so that organizations of every size, from the smallest merchant or agency to the largest government or multinational, can make broad use of the cloud, fully confident that their information and transactions are secure. Our industry needs to deliver security solutions that ensure levels of protection in the cloud that surpass what physical environments offer today. In short, people must everywhere be able to trust the cloud, even if they literally and metaphorically can't see it. That's our challenge. What about our opportunity? The answer is that cloud computing is going to make your work more important and prominent than ever before. Cloud computing is our opportunity to change the way we deliver security inside out. I say that because the cloud will force organizations to pay serious attention to their security management processes, not just their end point, dead end point security technologies. We have the rare opportunity for a doover, to be present at the creation and rollout of this new wave of computing with security built in from the getgo.

==== Transcribed by Automatic Sync Technologies ====

RSA chief puts his trust in the cloud

RSA chief puts his trust in the cloud

At the RSA 2011 conference in San Francisco, RSA Chief Art Coviello talks about various cloud...

RSA Conference '09: Government's approach to network security

RSA Conference '09: Government's approach to network security

At RSA in San Francisco, Lt. General Keith Alexander talks about how the NSA is working on...

U.S. CTO: Better cybersecurity, better health care

U.S. CTO: Better cybersecurity, better health care

At a Churchill Club event held at the Computer History Museum in Menlo Park, Calif., the United...

U.S. CTO outlines nation's IT strategy

U.S. CTO outlines nation's IT strategy

At a Churchill Club event held at the Computer History Museum in Menlo Park, Calif., United...

RSA president urges for 'inventive collaboration'

RSA president urges for 'inventive collaboration'

At the RSA Conference in San Francisco, RSA President Arthur W. Coviello Jr. calls for...

RIM Launches Blackberry App World

RIM Launches Blackberry App World

At the CTIA Wireless 2009 Conference in Las Vegas, Research In Motion President and Co-CEO Mike...

Obama's Google Moderator stats

Obama's Google Moderator stats

The White House asked to use Google's moderator program for President Obama's town hall meeting,...

Defense Dept. targets Silicon Valley with new IT Exchange Program

Defense Dept. targets Silicon Valley with new IT Exchange Program

At the RSA 2011 Conference, Deputy Secretary of Defense William Lynn talks about a new pilot...

Talkback Most Recent of 5 Talkback(s)

  • Too funny!
    This is like the fox asking the farmer to please put more chickens in the hen house. Follow the money trail....
    ZDNet Gravatar
    david.stanfield@...
    3rd Mar 2010
  • Stunningly out of touch with reality!
    Still out of touch is too be expected with the "Suits".

    Last week they announce a hack for the keystone of encryption and this idiot wants to hand over everyones data to the bad guys...... what an out of touch loser.
    ZDNet Gravatar
    Reality Bites
    4th Mar 2010
  • RE: RSA president calls on security industry to adopt cloud technologies
    How is the general public to determine the truth of this revolutionary concept if the "insiders" in the industry seem to be polarized in postions of utter faith or utter distrust of Cloud Computing?
    ZDNet Gravatar
    victoria@...
    4th Mar 2010
  • Riiiigggghhhttt....
    First there was centralized computing, and if you were big, you owned the center, if not you rented access.

    Then everyone owned their center, and the centralized data center was king.

    Then along came PC's & networks, and everything became de-centralized.

    Then managing all those machines became expensive, and the thin client centralized system returned.

    Now along comes 'cloud' computing, where you rent the center---somewhere and purchase "only what you need to use."

    Right. And instead of having to maintain all that expensive equipment in the data center, you now only have to maintain all those slightly less expensive workstations--while hoping that whoever you are renting storage & processing from keeps their equipment up to date and your data safe.

    He is right about one thing:

    If 'cloud' computing is going to become a big business, it needs much better security.

    My clients are small law firms--some of their competitors actually bought computers 5 years ago. Some still haven't.

    All of their data is sensitive, and yet massive amounts of legal data flow un-encrypted via e-mail between firms and the courts.

    I'm happy when they finally figure out that it's faster to do research online...security is a hard sell, in large part because these firms all operate on the edge of profitability, and like all small businesses they have little spare capacity to spend learning new things.

    Different businesses need different data models. No data model fits everyone.

    Cloud seems a good fit if your needs radically vary over time in both directions, but if your needs are stable, then it may or may not make sense--you must remember that the guys selling cloud have to make a profit and support all of the equipment whether or not it gets used--and like everyone selling time, if it isn't sold, it's gone.

    The customer pays those bills.

    And you give up some control, and some security and what else...?
    ZDNet Gravatar
    wizoddg
    9th Mar 2010
  • RE: RSA president calls on security industry to adopt cloud technologies
    In addition to Security Concerns, what about the basic trust issues with who is "holding" your data.

    Are "Cloud" centers going go require a *real* search warrant like your own physical data center would.

    What about accessibility, redundancy of nodes, reliability issues.

    Sure, 99.9% availability sounds great until *you* need a piece of data desperately and someones cut the fiber...

    At least with your own data center you at least know where to drive to pick up a CD copy!

    But, yes Security, Trustworthiness, and Immunity from unwarranted searches and seizures... *Very* important!

    Mike Sr.
    ZDNet Gravatar
    madrucke@...
    10th Mar 2010

Talkback - Tell Us What You Think

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

White Papers, Webcasts, & Resources

Facebook Activity