Juicar bietet deutschlandweit Elektroautos an, im monatlichen Preis sind Auto, Versicherung und Wartung enthalten. Die gefahrenen Kilometer werden einzeln abgerechnet, den Strom muss der Kunde selbst zahlen. (Elektroauto, Technologie)
Quelle: Golem
Der Paketdienstleister UPS hat 10.000 Fahrzeuge des Elektroautoherstellers Arrival bestellt, die individuell für das Unternehmen gebaut werden. Zudem beteiligt sich UPS finanziell an Arrival. (Startup, Technologie)
Quelle: Golem
Tesla hat den zweiten Quartalsgewinn in Folge erwirtschaftet. Beim Umsatz hat das Unternehmen einen Rekord aufgestellt. Der Aktienkurs ist im nachbörslichen Handel stark gestiegen. (Tesla, Börse)
Quelle: Golem
Facebook steigert Gewinn und Umsatz stark. Doch auch die Ausgaben nehmen zu, was die Aktie nach dem Quartalsbericht fallen ließ. (Quartalsbericht, Instant Messenger)
Quelle: Golem
Konzernchef Satya Nadella sieht Microsoft in wichtigen Bereichen als führend an. Seine Führung mit Konzentration auf Azure und Office 365-Tools ist sehr erfolgreich. (Quartalsbericht, Microsoft)
Quelle: Golem
Die linke Medienplattform linksunten.indymedia.org bleibt verboten. Das Bundesverwaltungsgericht hat eine entsprechende Klage gegen das Verbot als unbegründet abgewiesen. (Internet, Bundesregierung)
Quelle: Golem
Today we’re pleased to publish Data Protection and Privacy Compliance in the Cloud: Privacy Concerns Are Not Slowing the Adoption of Cloud Services, but Challenges Remain, original research sponsored by Microsoft and independently conducted by the Ponemon Institute. The report concludes with a list of 10 recommended steps that organizations can take to address cloud privacy and security concerns, and in this blog, we have provided information about Azure services such as Azure Active Directory and Azure Key Vault that help address all 10 recommendations.
The research was undertaken to better understand how organizations undergo digital transformation while wrestling with the organizational impact of complying with such significant privacy regulations as the European Union’s General Data Protection Regulation (GDPR). The research explored the reasons organizations are migrating to the cloud, the security and privacy challenges they encounter in the cloud, and the steps they have taken to protect sensitive data and achieve compliance.
The survey of over 1,000 IT professionals in the US and EU found that privacy concerns are not slowing cloud adoption and that most privacy-related activities are easier in the cloud, while at the same time, most organizations don’t feel they have control and visibility they need to manage online privacy. The report lists ten steps organizations can take to improve security and privacy.
Key takeaways from the research include:
Privacy concerns are not slowing the adoption of cloud services, as only one-third of US respondents and 38 percent of EU respondents say privacy issues have stopped or slowed their adoption of cloud services. The importance of the cloud in reducing costs and speeding time to market seem to override privacy concerns.
Most privacy-related activities are easier to deploy in the cloud. These include governance practices such as conducting privacy impact assessments, classifying or tagging personal data for sensitivity or confidentiality, and meeting legal obligations, such as those of the GDPR. However, other items such as managing incident response are considered easier to deploy on premises than in the cloud.
53 percent of US and 60 percent of EU respondents are not confident that their organization currently meets their privacy and data protection requirements. This lack of confidence may be because most organizations are not vetting cloud-based software for privacy and data security requirements prior to deployment.
Organizations are reactive and not proactive in protecting sensitive data in the cloud. Specifically, just 44 percent of respondents are vetting cloud-based software or platforms for privacy and data security risks, and only 39 percent are identifying information that is too sensitive to be stored in the cloud.
Just 29 percent of respondents say their organizations have the necessary 360-degree visibility into the sensitive or confidential data collected, processed, or stored in the cloud. Organizations also lack confidence that they know all the cloud applications and platforms that they have deployed.
The Ponemon report closes with a list of recommended steps that organizations can take to address cloud privacy and security concerns, annotated below with relevant Azure services that can help you implement each of the recommendations:
Improve visibility into the organization’s sensitive or confidential data collected, processed, or stored in the cloud environment.
Azure service: Azure Information Protection helps discover, classify, and control sensitive data. Learn more.
Educate themselves about all the cloud applications and platforms already in use in the organization.
Azure service: Microsoft Cloud App Security helps discover and control the use of shadow IT by identifying cloud apps, infrastructure as a service (IaaS), and platform as a service (PaaS) services. Learn more.
Simplify the authentication of users in both on-premises and cloud environments.
Azure service: Azure Active Directory provides tools to manage and deploy single sign-on authentication for both cloud and on-prem services. Learn more.
Ensure the cloud provider offers event monitoring of suspicious and anomalous traffic in the cloud environment.
Azure service: Azure Monitor enables customers to collect, analyze, and act on telemetry data from both Azure and on-premises environments. Learn more.
Implement the capability to encrypt sensitive and confidential data in motion and at rest.
Azure service: Azure offers a variety of options for encrypting both data at rest and in transit. Learn more.
Make sure that the organization uses and manages its own encryption keys (BYOK).
Azure service: Azure Key Vault allow you to import or generate keys in hardware security modules (HSMs) that never leave the HSM boundary. Learn more.
Implement multifactor authentication before allowing access to the organization’s data and applications in the cloud environment.
Azure service: Azure Active Directory offers multiple options for deploying multifactor authentication for both cloud and on-prem services. Learn more.
Assign responsibility for ensuring compliance with privacy and data protection regulations and security safeguards in the cloud to those most knowledgeable: the compliance and IT security teams. Privacy and data protection teams should also be involved in evaluating any cloud applications or platforms under consideration.
Azure service: Role-based access control (RBAC) helps manage who has access to Azure resources, what they can do with those resources, and what areas they have access to. Learn more.
Identify information that is too sensitive to be stored in the cloud and assess the impact that cloud services may have on the ability to protect and secure confidential or sensitive information.
Azure service: Azure Information Protection helps discover, classify, and control sensitive data. Learn more.
Thoroughly evaluate cloud-based software and platforms for privacy and security risks.
Azure service: Microsoft Cloud App Security Assess the risk levels and business readiness of over 16,000 apps. Learn more.
Read the full report to learn more.
Quelle: Azure
Seit Dezember soll es ein geheimes Papier des Auswärtigen Amts geben, das mit US-Quellen eine Zusammenarbeit Huaweis mit dem chinesischen Staatsapparat belegt. Doch das passt nicht zu den Aussagen britischer Geheimdienste und der Bundesregierung. (5G, Huawei)
Quelle: Golem
In einem ausführlichen Bericht blickt der ehemalige Windows-Chef Steven Sinofsky auf das erste iPad zurück. Die Medien und die Branche selbst ahnten vor zehn Jahren nicht, was für ein Produkt es letztlich sein sollte und dass es überhaupt nicht den damaligen Vorstellungen entsprach. (iPad, Apple)
Quelle: Golem
Alyx ist schuld: Nach der Ankündigung des nächsten Half-Life waren (und sind) mutmaßlich besonders dafür geeignete Headsets nicht lieferbar. Im wichtigsten Weihnachtsquartal war wohl auch deshalb Playstation VR der Bestseller. (VR, Steam)
Quelle: Golem
