CSA on Cloud secSLA @ Forbes

imagesDr. Jesus Luna’s (CSA) presentation during the previous CloudScape VII event has been quoted by Forbes on their article “With Cloud Computing, Managing Expectations Is Everything“. From the article:

Cloud security is still a great unknown, and typically does not get adequately addressed in most SLAs established today, said Jesus Luna Garcia, research director of the Cloud Security Alliance. “Historically speaking, most SLAs were based on performance metrics,” he explained. “There are a lot of performance related metrics on SLAs. But what about security?”   The difficulty is there are no standards or common practices for measuring security at this time, he states. “Not all the security properties, or metrics, can be automated. Some of these we need human intervention, which is different from performance indicators.”