RSA Addresses Cloud Security

EMC today unveiled the RSA Solution for Cloud Security and Compliance to address security, risk and regulatory compliance of cloud infrastructures. EMC says the new solution is aimed at increasing customer confidence when it comes to running business-critical applications on top of virtual infrastructure in the cloud.

Featuring a dashboard based on the RSA Archer eGRC platform, the solution is designed to provide an assessment of security and compliance posture across an organization's VMware virtual infrastructure. This is intended to allow customers to centrally manage security across both virtual and physical infrastructures using RSA Archer software.

The dashboard integrates with a library of more than 100 VMware-specific controls, such as administrative authentication, that map to the most current global regulations such as PCI-DSS and HIPAA, helping ensure best practices for deployment. The solution also integrates with the RSA enVision security information and event-management platform.

The RSA Solution for Cloud Security and Compliance also uses automated workflow and notification processes in RSA Archer to simplify the tasks of remediating security issues.

Furthemore, RSA is contributing actively in the Cloud Security Alliance (CSA) Consensus Assessments Project for developing an open question-set, based on the CSA Cloud Controls Matrix for security assessment of cloud services. When this work is complete, the RSA solution will be enhanced to offer tenants a way to assess the security of cloud service-provider environments and their internal data centers using RSA Archer.

By centralizing cloud infrastructure security with physical infrastructure security, EMC is taking a step toward making cloud computing more mainstream. Users and enterprises with less expereince in virtual computing need reassurance their mission-critical data and tools are safe in the cloud, and adoption will not truly become widespread in this segment until reassurance is concretely offered.

The RSA Solution for Cloud Security and Compliance will be available in the fourth quarter of 2010.