NIST’s Ron Ross sees cloud as a helpful tool in reducing the complexity of managing data and keeping it secure. But security expert Eugene Spafford of Purdue University has a different point of view. Ross: “Good security and risk management requires that you have an understanding of what your assets are, where they’re located and where the vulnerabilities are on your defenses” Both experts say moving data into the cloud could add, not reduce, risk organizations face. Ross says complexity is the biggest information risk to organizations and how moving data to the cloud can mitigate it.”]
Source: https://www.cuinfosecurity.com/cloud-computing-way-to-reduce-risk-a-5780