The Register concluded:
The ongoing rash of data leaks caused by misconfigured clouds is the result of companies having virtually no visibility into how their cloud instances are configured, and very little ability to audit and manage them.
That’s really scary. But it supports my concerns that moving workload to the cloud doesn’t eliminate work/effort, i.e. manpower, but rather changes the skills required.
An organization should thoroughly understand the skills change that moving to the cloud brings.
These changes may be addressed with training but may require changing personnel to acquire the appropriate skills. These changes and the change management time and effort should be incorporated in the project timeline and budget for cloud implementation.
It’s possible the speed of cloud adoption is putting some practitioners behind.
The number 1 cause of cloud security issues noted by McAfee was “Lack of staff with the skills to secure cloud infrastructure.”
That entire list is a good reference when considering moving workload to the cloud.
Originally published at https://blog.benmoore.info.