Guidelines for Secure Transition into a Private Cloud

Cloud computing brings forth numerous advantages that have a potential to significantly improve the efficiency of ICT business processes. But it also opens a whole new chapter of information security, since it has to deal with ensuring safety of the data that gets stored and processed as a part of services of cloud computing. This diploma thesis summarizes safety risk research conducted by the CSA, and focuses on building a private cloud as the safest form of cloud computing services. The aim of this diploma thesis is to provide guidelines that can contribute to a successful and secure transition into a private cloud. To this end, we prepared a list of measures for individual building blocks of the infrastructure of the private cloud that need to be taken in order to reduce or even nullify certain security risks. We composed this list by examining security best practices, recommendations of individual software and hardware vendor, and security standards and legislation