Weaving Enterprise Security & Compliance into the Cloud

Keywords: SaaS, Cloud Computing, Security
Authors: Niall Browne, CISA, CISSP, CCSP, CCSI, CISO of LiveOps.
Niall is the CISO of LiveOps, the leading virtual contact center company, where he is responsible for defining and managing the Enterprise Security, Audit, Risk and IT Regulatory Compliance programs. LiveOps has an on-demand contact center platform that is used by Fortune 500 and major brand name companies. Additionally the company operates one of the largest virtual contact centers with more than 20,000 independent agents in the cloud. He has a proven track record of leading industry security initiatives including his long standing role as Co-Chair of the BITS Shared Assessments development committee. This program was created by the Financial Services Roundtable BITS, The Big 4 Accounting firms, and the leading Financial Institutions to evaluate the security controls of Service Providers in the US and internationally. As a Service Provider he has also led PCI-DSS, ISO 27001, SAS-70 Type II, BITS AUP and FFIEC audits, amongst others.
Abstract:
For Cloud and SaaS to truly succeed it must be embraced by Enterprise businesses. One of the key concerns from the Enterprise is Security: What are the Cloud Security Controls? How do these compare to Enterprise Security Controls? How can these be effectively Measured?

A successful Cloud Provider not only builds a robust security model, but also clearly demonstrates that they can meet both Enterprise Security requirements, and industry security standards up to and including PCI-DSS and ISO 27001 certifications. This presentation outlines the steps and the potential pitfalls along the way.