1. Cloudy Weather: How Secure Is the Cloud? Dan Stolts @ITProGuru Technology Evangelist Microsoft Corporation

2. Cloudy Weather: How Secure Is the Cloud? More Jobs Owner - Bay State Integrated Technology, Inc. (www.BayStateTechnology.com)www.BayStateTechnology.com President - Boston User Groups (www.BostonUserGroups.org)www.BostonUserGroups.org Leader – Cub Scouts Pack 14, Lakeville, MA {LakevillePack14.com)LakevillePack14.com Founder/Chairman - Virtualization Group Boston (www.VirtG.com)www.VirtG.com @ITProGuru

3. f in B Cloudy Weather: How Secure Is the Cloud? Dan Stolts, MCT, MCSA, MCITP, … CT, MA, ME, NH, VT, NY (upstate) IT Pro Technical Evangelist Microsoft Corporation Calendar: http://NEITPro.com Lab Guides: http://ITProGuru.com/HOL Free Evaluation http://aka.ms/iaas = Free Servers in the Cloud

4. Download 4 & Win Call-To-ACTION! Challenge Win Xbox or Surface Special Drawing for people that complete either event challenge will be registered to win a prize! xBox Console OR Surface RT device One entry per LiveID / per challenge. Limit one prize per event Screenshot must be received by 3pm Tuesday May 21 st. Winner will be contacted via email for their prize choice and shipping address. Do it today or put on your calendar. Dont delay and miss out. Odds of winning are great!!!! 2) http:// aka.ms/GetWin2012ISO 3) http:// aka.ms/HyperV2012 1) http:// aka.ms/SC2012Eval Build 1 & Win Start download of all of the above (System Center First) Pause Download and send a screenshot of download manager to itproguru@Microsoft.com (subject: Call To Action B-Sides) NOTE: Please do not FINISH download at event, do it at home if you want! Are you social? Tweet @ITProGuru the message: Tweet : @ITProGuru I am ready for Windows Server 2012 http://aka.ms/GetWin2012; Call-To-Action http://aka.ms/cta Step 1 Success. Activate a Free Azure Trial http://aka.ms/iaas Create your first Free Cloud Virtual Machine Send a screenshot of Azure with VM created to itproguru@microsoft.com (subject: Call To Action) Are you social? tweet @ITProGuru the message: Tweet: @ITProGuru I am ready for Windows Azure http://aka.ms/IaaS Call-To-Action http://aka.ms/cta Step 2 Success! NOTE : Requires Credit Card but you will NOT be billed if you do not manually change your account to a Pay Account Details: ITProGuru.com/Challenge OR 4) http:// aka.ms/GetWin2012VHD ISO VHD OR B-Sides Boston

5. f in B Windows Server 2012 Early Experts http://EarlyExperts.net Dan Stolts, MCT, MCSA, MCITP, … CT, MA, ME, NH, VT, NY (upstate) IT Pro Technical Evangelist Microsoft Corporation Cloud Virtualization System Center Management Infrastructure Free Training: Get Certified on Windows Server 2012

6. CLASSIFIED

8. confidentiality C integrity I availability A risk management compliance

9. moving to the cloud

10. LAWINDUSTRYSTANDARDS INTERNAL ISO

11. NOW Caveat LATER ISO/IEC 27001:2005 SSAE 16 (SOC 1 Type 2) EU-US Safe Harbour EU Model Clauses HIPAA BAA – App matters (contract addendum) Scope: Only the following Windows Azure features are covered by the current HIPAA BAA: Virtual Machines, Cloud Services, Storage (Tables, Blobs, Queues, Drives), and Networking.Virtual MachinesCloud Services StorageNetworking FISMA / FedRAMP…

12. http://www.windowsazure.com/en-us/support/trust-center/

13. NOW ISO/IEC 27001:2005 EU-US Safe Harbour EU Model Clauses HIPAA BAA DPA

14. http://www.microsoft.com/en-us/office365/trust-center.aspx

15. physicalnetworkhost applicationdatauser

16. physical

17. network

18. host

19. application

20. data

21. dont put keys and data in the same place

22. Publisher NameSSN Smith, John123-45-6789 NameSSN Smith, John123-45-6789 pubadmin Subscriber NameSSN Smith, John123-45-6789 sub Data PolicyAuthz ListCertKey SSNpub, subPub sub Pub pub

23. Publisher NameSSN Smith, John123-45-6789 NameSSN Smith, John123-45-6789 pub Subscriber NameSSN Smith, John123-45-6789 sub Data PolicyAuthz ListCertKey SSNpub, subPub sub Pub pub

24. Publisher NameSSN Smith, John123-45-6789 NameSSN Smith, John123-45-6789 pub Subscriber NameSSN Smith, John123-45-6789 sub Data PolicyAuthz ListCertKey SSNpub, subPub sub Pub pub

25. user

26. physicalnetworkhost applicationdatauser

28. Securing Services

35. Windows Azure Trust Center Find Me Later At The Windows Azure Booth

36. Connect. Share. Discuss. http://northamerica.msteched.com Learning Microsoft Certification & Training Resources www.microsoft.com/learning TechNet Resources for IT Professionals http://microsoft.com/technet Resources for Developers http://microsoft.com/msdn