Delivering Value, Achieving Results

Cloud Security

eGlobalTech, has developed a suite of methodology and tools specifi-cally for the Federal Government to mitigate the security risks while taking advantages of the business benefits Cloud Computing offers.

CLOUD SECURITY CHALLENGES	CLOUD SECURITY OPPORTUNITIES
• Data Privacy / Security • E-Discovery / Forensics • Identity Assurance and Management • Regulatory Compliance • Incident Response Planning • Loss of Control and Management	• Automated software updates/patches • Integrated security controls • Dynamic scaling of security resources • Secure testing capabilities

Cloud Security

ASSESS PROVIDER’S SECURITY CAPABILITIES	NEGOTIATE SLA AND CONTRACTUAL SECURITY	SECURITY ASSESSMENT AND MONITORING
• Understand and assess the Security Model/Architecture of Cloud Provider (Application, Network, Hypervisor, end-point and Data Security capabilities) • Ask the right questions and evaluate answers to assess the efficiency of their security control implementation • Assess the risk of adopting cloud services	• Negotiate service availability, reliability and performance SLA’s • Assist with contractual security language: -Liability conditions, consequences & recourse for negotiated SLA -Exit Strategies, Data Recovery & mitigating vendor lock-in -Intellectual property agreements for negotiated SLA -Data Location requirements -Regulatory Compliance requirements • Review terms of contract and cloud provider’s standard contract clauses	• New and Updated cloud specific security policies and procedures • Leveraging Govt-wide security requirements (tailoring of NIST SP 800-53 controls for cloud systems) and further tailoring it for any Agency specific needs • Reviewing vendor’s security assessment packages • Performing continuous monitoring of vendor’s security posture/controls

Examples of our Cloud Computing Projects include:

Leading strategic planning, market research, acquisition planning, technical and security design efforts for the Government-wide Cloud Computing Initiative for the Office of Management and Budget (OMB)
Development and implementation of the Department of Energy’s Cloud Computing Vision
Cloud Computing Market Research at the Department of Education
Deploying Software as a Service (SaaS) case management solution at the Federal Labor Relations Authority
Training sessions throughout the Federal Government.

Our approach to Cloud Computing has been recognized by the GTRA Best Solution Award.