Since the July 24th entry, Cloud Concerns Over Los Angeles, I have continued
to monitor closely LA City’s decision to migrate to a cloud computing
environment. As myriad organizations (e.g., Cloud Security Alliance, NIST,
etc.) race to understand cloud computing risks, I continue to be baffled by
LA City’s “Damn the torpedoes!” approach.
Throughout LA’s decision making process, various stakeholders have raised
concerns about cloud security and privacy risks. As the City Council sought
to address these concerns, I had hoped to see LA transparently address how
its cloud service providers would secure LA citizens’ sensitive
information.
So far, it’s been a major disappointment.
To its credit, the City held an August 11th hearing to answer a number of
pressing security questions. In this regard, the City’s Information
Technology Agency (ITA) General Manager, Randi L... (more)