Cloud and Data Protection – what you need to know

From Consultancies and Resellers/Integrators are only technical peoples allowed to take part. Vendors and people with a Sales/Marketing role are not authorized as participants.

(there are a lot of free park spaces available)

Data Compliance – Relevant Factor for the Cloud Service Business Case
Main topics of the presentation:

• Definition of data compliance – scope on legal and regulatory compliance and not on standards compliance
• General critical data categories and Industry-specific critical data categories – scope on personal data and export controlled data
• Data compliance requirements for cloud services
• Data compliance complexity for different types of cloud services
• Data compliance aspects to be considered in the cloud services business case
• Expectations towards cloud services provider & lessons learned

Financial Institutions – Ready for the Cloud?
No doubt, cloud computing can offer substantial benefits to corporate customers, also to financial institutions. However, financial institutions have generally proved slow to adopt cloud computing. Why so?

Financial market regulators worldwide seek to force financial institutions to maintain full control and responsibility over their business operations, also if outsourced, or “processed in clouds”.

While there are no “blanket bans” or similarly broad prohibitions or restrictions that should prevent financial institutions from adopting (and, therefore, benefiting from) cloud computing, financial market regulators have a key role to play in banks decision to enter into cloud computing engagements, or not. What are these regulators’ main concerns? And how can cloud service providers assist financial institutions to address those concerns? Key topics where financial institutions need to rely on the cloud service providers to meet regulators’ expectations will be discussed, including security, limits on data use, responsibilities for subcontractors, data locations, rights to audit, and exit provisions. In order to gain financial institutions as customers, cloud services providers are encouraged to develop an appropriate understanding of financial market regulations. An understanding that will prove useful latest when engaged in contract negotiations with financial institutions.

The policy model is a strategic, application oriented approach, how the deployment of the network service is separated from the configuration of the network infrastructure. Additional security concepts enable unified security policy lifecycle management with the capability to enforce policies anywhere in the data center across physical and virtual workloads. This offers complete automation of Layer 4 through 7 security policies and supports a defense-in-depth strategy while enabling deep visibility, automated policy compliance, and accelerated threat detection and mitigation.

This session explains all the building blocks of a typical cloud infrastructure and how security plays in to align with new governance and compliance models.

Shadow Cloud Control and Approved Cloud Enablement
Your users are using many more cloud services than you think; the average enterprise is using over 900. Many of these are risking your data, breaking regulations and do not conform to data regulations. Skyhigh Networks shares its latest Cloud Adoption and Risk Report for Europe and shows how you can discover the cloud services in use, analyse your risks and enforce security.

On the other hand, most organisations are now starting to embrace approved cloud services – see how you can do this securely while also saving money on unused cloud licenses, such as extending DLP controls to the cloud, encrypting traffic and monitoring approved cloud use.

However, there are answers. Because it’s your data, you should decide who has access, and you should decide where it is located. This session highlights how Microsoft safeguards your data, what for security technologies are in place, what for cryptography is used and shows independently audited compliance. In addition, it also discusses how legal demands for customer data are handled and the security of the code is ensured.

Learn more about how Microsoft provides a secure and private cloud and get a preview about future development.

We Are Making Things Difficult for Ourselves
Understanding the complexity of current Swiss and European data protection laws and regulations is already difficult enough. In combination with the often small but nevertheless significant differences between various Switzerland and EU member states, however, it can become an almost insurmountable challenge without proper juristic accompaniment from the very start.

The Methodology of the Cloud Privacy Check
This means there is need for immediate relief. The Cloud Privacy Check (CPC) is intended to provide that relief by employing three methodical approaches:

1. Simplification
2. Structuring
3. Separation

I will show you an overview of general information on Data Protection, core rules of the Data Protection Law and Data Protection considerations in regards to Cloud Services. You will learn how the Cloud Privacy Check can help you to solve a perception problem.