CIA endorses cloud computing, but only internally
While it can improve security, the agency won't be outsourcing data to Google or Amazon
Computerworld - WASHINGTON -- One of the U.S. government's strongest advocates of cloud computing is also one of its most secretive operations: the Central Intelligence Agency. The CIA has adopted cloud computing in a big way, and the agency believes that the cloud approach makes IT environments more flexible and secure.
Jill Tummler Singer, the CIA's deputy CIO, said that she sees enormous benefits to a cloud approach. And while the CIA has been moving steadily to build a cloud-friendly infrastructure -- it has adopted virtualization, among other things -- cloud computing is still a relatively new idea among federal agencies.
"Cloud computing as a term really didn't hit our vocabulary until a year ago," said Singer.
But now that the CIA is building an internal cloud, Singer sees numerous benefits. For example, a cloud approach could bolster security, in part, because it entails the use of a standards-based environment that reduces complexity and allows faster deployment of patches.
"By keeping the cloud inside your firewalls, you can focus your strongest intrusion-detection and -prevention sensors on your perimeter, thus gaining significant advantage over the most common attack vector, the Internet," said Singer.
Moreover, everything in a cloud environment is built on common approaches. That includes security, meaning there's a "consistent approach to assuring the identity, the access and the audit of individuals and systems," said Singer. But there are limits. The agency isn't using a Google model and "striking" data across all its servers; instead, data is kept in private enclaves protected by encryption, security and audits.
The CIA uses mostly Web-based applications and thin clients, reducing the need to administer and secure individual workstations. And it has virtualized storage, protecting itself "against a physical intruder that might be intent on taking your server or your equipment out of the data center," said Singer.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Five Myths of Cloud Computing
- This white paper separates fact from fiction, reality from myth, and, in doing so, will aid senior IT executives as they make decisions...
- IBM Synchronizes its Commerce 2.0 Strategy with 'Smarter Commerce' Initiative
- On March 14, IBM announced "Smarter Commerce", a strategic initiative that addresses the surging market for Commerce 2.0 solutions that take advantage of...
- TechRepublic: Cloud Computing - Potential Value for Your Company?
- Content provided by Google
Imagine a world without the hassle of licenses and hardware management - cloud computing makes this possible. Learn more about... - Forbes: Enterprises Set Their Strategies for Cloud Computing
- Content provided by Google
This Forbes Insights paper shares how enterprise companies are still crafting their strategies and testing their options to determine if... - HBR: What Every CEO Needs to Know About the Cloud
- Content provided by Google
This Harvard Business Review article explains the Cloud and its benefits, highlights the implications of various concerns, and makes recommendations...
All Cloud Computing White Papers
- Live Webcast
Integrated IT Operations Management in the Cloud - Join award-winning technology editor Stan Gibson and Andrew White, CMO at Numara Software, to learn how asset management and service management are converging...
- Optimizing Networks for the Cloud
- Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
- De-risk Deploying Business Critical Apps in Your Private Cloud
- Architect your private clouds to ensure that application requirements for performance & availability are achieved with minimal risk to the business.
- Navigating the Public Cloud
- InfoWorld contributing editor and consultant David Linthicum offers expert advice about choosing services to outsource to the public cloud providers, cloud data security...
- Integrated IT Operations Management in the Cloud
- Join award-winning technology editor Stan Gibson and Andrew White, CMO at Numara Software, to learn how asset management and service management are converging...
- Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
- Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as... All Cloud Computing Webcasts
By Chris Poelker
Instead of bulk capital expenditures for large servers and storage arrays, you can purchase computer time based on actual usage of CPU cycles and storage by the number of gigabytes or terabytes used. But here are ten things to consider before you jump into the cloud. Insider (registration required) more