tues1440 protect datacloud-francoisvaille-ezc
TRANSCRIPT
© EZC Group S.A. 2012 EuroCloud congress - Oct 9th, 2012
WARNINGPolitically incorrect content
Friday, 5 October 2012
© EZC Group S.A. 2012 EuroCloud congress - Oct 9th, 2012
Do you have a bank account ?
Friday, 5 October 2012
© EZC Group S.A. 2012 EuroCloud congress - Oct 9th, 2012
Do you have friends ?
Friday, 5 October 2012
© EZC Group S.A. 2012 EuroCloud congress - Oct 9th, 2012
Do you have friends working at a bank ?
Friday, 5 October 2012
© EZC Group S.A. 2012 EuroCloud congress - Oct 9th, 2012
Do you trust your friends ?
?Friday, 5 October 2012
© EZC Group S.A. 2012 EuroCloud congress - Oct 9th, 2012
What’s the confidentiality of your account ?
Friday, 5 October 2012
© EZC Group S.A. 2012 EuroCloud congress - Oct 9th, 2012
OK. You trust your friends. What about friends or relations of a
friend, a neighbour, an ennemy ... ?
Friday, 5 October 2012
© EZC Group S.A. 2012 EuroCloud congress - Oct 9th, 2012
OF COURSE, THIS NEVER HAPPENS.
Friday, 5 October 2012
© EZC Group S.A. 2012 EuroCloud congress - Oct 9th, 2012
Let’s speak about data
Friday, 5 October 2012
© EZC Group S.A. 2012 EuroCloud congress - Oct 9th, 2012
How to make sure it’s kept confidential ?
During...
Storage
Archival
Sharing
Recording
...
Friday, 5 October 2012
© EZC Group S.A. 2012 EuroCloud congress - Oct 9th, 2012
By procedures?
Setup procedures and say you follow them (say it loud and clear)
Setup procedures and have them followed, educate good employees and fire rebels (might work?)
Get help from technology to restrict areas where safety relies on procedures
Friday, 5 October 2012
© EZC Group S.A. 2012 EuroCloud congress - Oct 9th, 2012
By technology?Encryption
Client encryption: not always possible (not client application transparent)
Server encryption (who holds the key?)
Mixed encryption (let the user open the door, then work transparently)
Technology needs to be supported by procedures
Friday, 5 October 2012
© EZC Group S.A. 2012 EuroCloud congress - Oct 9th, 2012
The right mix
A safe architecture isolating safety related operational procedures
A trusted data-center/operator hosting the safety critical items
Operating under a good legal framework...
Friday, 5 October 2012