An Architectural View of Security for Cloud

A White Paper by the Security for the Cloud and SOA project of The Open Group Cloud Computing Work Group led by Omkhar Arasaratnam (Cloud Security Lead Architect, IBM, Cloud Work Group Steering Committee and Project Co-Chair) and Stuart Boardman (Senior Business Consultant, Getronics Consulting, Cloud Work Group Steering Committee and Project Co-Chair).

This White Paper is the first in a series regarding Security in Cloud Computing. This series provides methods for enterprise architects to develop risk-based approaches to securing Cloud Computing. It introduces a scenario-based approach to understanding the relationship between consumer and provider security policy, the possible discrepancies which may arise, and the options available for addressing those discrepancies. It focuses on Identity Entitlement and Access Management (IAM) as an example of policy-driven security concerns and uses this to illustrate an approach that can be applied to other aspects of Security in the Cloud.