Doug on Cloud

Blog archive

Identity Management as a Service

The last thing IT thinks they would ever outsource to the cloud is identity management. It didn't make sense to me either. But three years ago I didn't think the cloud was secure and I had to give this a bit of a rethink.

Here's how that one went. In the early days of the cloud, the providers were just getting their feet wet and their networks weren't that secure. But cloud providers are dedicated to the business of providing clouds. That means they have people and technology dedicated to securing those clouds. That is their business. A big provider like Amazon might have hundreds of security experts on staff.

Your business, I would argue, is more complicated. You do just as much as, say, Amazon does, but how many dedicated security experts do you have? How many layers of defense do you have?

Identity management follows much the same logic. These providers are dedicated to this mission far more than you are. Think just any schmuck can crack their encryption? Doubt it.

Is IDaaS a no brainer? Certainly not. But it may be worth a look and a lot of tough questions.

Posted by Doug Barney on 09/11/2012 at 12:47 PM


Subscribe on YouTube