Multi-Cloud Key Management: Selection and Migration (Third in a Series)

This blog first appeared on Securosis (https://securosis.com/blog/multi-cloud-key-management-selection-and-migration) Cloud services are typically described as sharing responsibility for security, but the reality is that you don’t working shoulder to shoulder with the vendor. Instead you implement security with the building blocks they provide you, possibly filling in gaps where they don’t provide solutions. One of the central goals of this research project was to show that it is possible to take control of data security, supplanting embedded encryption and key management services, […]

The post Multi-Cloud Key Management: Selection and Migration (Third in a Series) appeared first on Data Security Blog | Vormetric.

from Multi-Cloud Key Management: Selection and Migration (Third in a Series)

Multi-Cloud Key Management: Service and Deployment Options

By Adrian Lane, (guest author) This blog first appeared on Securosis (https://securosis.com/blog/multi-cloud-key-management-deployment-options) This post will discuss how to deploy encryption keys into a third-party cloud service. We illustrate the deployment options, along with the components of a solution. We will then walk through the process of getting a key from your on-premise Hardware Security Module (HSM) into a cloud HSM. We will discuss variations on using cloud-based HSM for all encryption operations, as well as cases where you instead delegate […]

The post Multi-Cloud Key Management: Service and Deployment Options appeared first on Data Security Blog | Vormetric.

from Multi-Cloud Key Management: Service and Deployment Options