As the cloud computing market matures, consumers of cloud services are beginning to realise that successful use of the cloud means more than just getting a cheap and convenient service. Two new documents from the European Union and New Zealand highlight the importance of covering off other factors when buying or using cloud services. The European Network and Information Security Agency (ENISA) has released a document – Procure Secure – which sets out guidelines on how to measure and monitor security of cloud computing services on an ongoing basis. The New Zealand Computer Society is facilitating a Cloud Computing Code of Practice, and has just released a draft for public consultation.
I bet that in the wake of Tuesday’s devastating earthquake in Christchurch many organisations are reviewing their Disaster Recovery (DR) and Business Continuity Planning (BCP) situations.
My experience is that most organisations – especially private enterprises – do not give disaster recovery and business continuity enough attention. What underlies this lack of attention are a number of attitudes towards disaster recovery and business continuity planning which hopefully will be challenged by our experiences of the Christchurch earthquake.