NIST’s Ron Ross sees cloud as a helpful tool in reducing the complexity of managing data and keeping it secure. But security expert Eugene Spafford says moving data into the cloud could add, not reduce, risk organizations face. Ross: “Good security and risk management requires that you have an understanding of what your assets are, where they’re located and where the vulnerabilities are on your defenses” Both experts strive to identify areas of agreement between them in two-part joint interview with Information Security Media Group.”]
Source: https://www.careersinfosecurity.com/cloud-computing-way-to-reduce-risk-a-5780