InformationWeek Reports, a service provider for peer-based IT research and analysis, has announced the release of its latest research report - Compliance in the Cloud Era. The report comprises analysis of results from InformationWeek's 2012 Regulatory Compliance Survey and offers strategies for addressing regulations in an era where it is increasingly common to grant third parties access to sensitive and critical data. Over 400 business technology professionals responded to this survey.
InformationWeek's survey of 422 respondents subject to regulatory compliance finds that organisations are not just defining security policies, but doing the challenging work of implementing controls to support them. When asked the top three security controls they would choose to fund, 43 percent selected endpoint protection (a regulatory requirement under Payment Card Industry and HIPAA regulations as well as multiple other mandates), 38 percent said application firewalling (a PCI requirement), and 31 percent selected identity management (supports numerous access-control requirements across a broad swath of regulations).
The report was written by co-authors, Diana Kelley, a 20-year veteran of the IT industry and Ed Moyle, a security strategist with Savvis' information security practice.
Members may visit http://reports.informationweek.com/abstract/14/8935/Regulatory-Compliance/research-compliance-in-the-cloud-era.html?cid=rpt_press_rls to gain full access to the research data.