Rank the worst of the cloud’s 7 deadly sins

Cloud computing is not the devil, but apparently temptations abound.

 

My colleague Anthony Savvis at Computerworld U.K. recently wrote about a report from the Information Security Forum (ISF), which has identified the “seven deadly sins” of cloud computing implementations in a new report, and has offered guidance on how to tackle them.

The 'Securing cloud computing: addressing the seven deadly sins' report aims to help organisations move quickly to developing business-oriented systems to securing cloud services.

The seven deadly sins outlined in the ISF report are:

-Ignorance – cloud services have little or no management knowledge or approval
-Ambiguity – contracts are agreed without authorisation, review or security requirements
-Doubt – there is little or no assurance regarding providers' security arrangements
-Trespass – failure to consider the legality of placing data in the cloud
-Disorder – failure to implement proper management of the classification, storage and destruction of data
-Conceit – belief that enterprise infrastructure is ready for the cloud when it's not
-Complacency – assuming 24/7 service availability

Some of these so-called sins could cause problems on a cloud project, but which would actually cripple an organization's ability to suceed with this approach to IT? Choose your top sin and explain in the comments below any recommendations to deal with it. Best comment gets a movie pass from Cineplex Odeon.