It is one thing to have security policies for a cloud service environment, or a panoply of tools and operational practices in place. In the end, however, one of the key security issues is to know that they work. So testing security is an important step.
This is the role Security Aware, a UK-based data security and compliance specialist, has set for itself with its Penetration Testing Services. The idea is straight forward: if it can penetrate a cloud environment and harvest some data, then it is quite likely some `bad guys’ can do so as well, with far more malicious intent.
This is the type of service that is not just valuable for end users but also Cloud Service Providers, both for their own purposes and as a service it can make available for its customers. It is with this in mind that CSP, Interoute, has partnered with Security Aware to provide its Penetration Testing Services as components of its IaaS Virtual Data Centre. This will allow Interoute to offer the ability to conduct proactive testing to enterprises across Europe. The aim will be to help them identify and prevent security breaches and satisfy compliance requirements.
This is a process that is carried out with the client's explicit knowledge. Security Aware put significant effort goes into making sure that systems operate efficiently, and that the necessary security controls are in place to protect your valuable assets.
It can identify weaknesses such as unencrypted data transmission, poor system configuration and security controls, and unused services or open ports. Any of these can lead to problems such as Distributed Denial of Service attacks, loss of data, manipulation of data, spoofing of customer-facing websites and damage to the immediate business operations and the company brand.
Interoute CloudStore is an online retail marketplace where enterprises can buy applications tested and approved to work on Interoute VDC, as well as professional services that can help facilitate the move to the cloud. Interoute VDC gives enterprises the ability to provision and control computing and storage infrastructure, on demand, online, using a pay-as-you-go model. Uniquely, users can select the data centre and city they want their data to be hosted and stored in (ensuring compliance with stringent European data protection regulations) and can even transfer data and appliances between Virtual Data Centres in five different countries, for free using Interoute’s network.
According to CEO,Clinton Walker, Security Aware chose to partner with Interoute because the Interoute CloudStore delivery model aligns with the company’s strategy and value proposition. “ Interoute’s Virtual Data Centre platform is built on a secure, scalable, and future-proof system, which will no doubt bring tremendous benefits to our clients as a one-stop-shop to fulfill their requirements,” he said.