Security professional must look at big picture for cloud success

Industry body laments focus on accumulating detailed technical knowledge

Information security professionals should be focusing on gaining operational knowledge rather than technical know-how to equip them for the move to cloud computing, according to a respected industry body.

The International Information Systems Security Certification Consortium, aka (ISC)2, has commissioned industry analyst firm Frost & Sullivan to produce a report regarding security professionals' wish-list for cloud computing training. The report, snappily entitled the 2011 Global Information Security Workforce Study, isn't due to be published until 17 February.

Early results show that nearly three-quarters (73 per cent) of the 7,500 security specialists polled, agree that they will need new skills to cope with any large-scale move to cloud computing.

However, top of security geeks' wish list (chosen by 93 per cent of respondents) is the desire to develop a detailed understanding of cloud computing. Next on their agenda is greater technical knowledge (81 per cent).

Operational skills, such as contract negotiation - which the (ISC)2 reckons is more important - was selected by only half of participants.

"It is surprising to see such an emphasis on technology and detail when we are looking at a trend involving outsourcing the management of it," said Robert Ayoub, Frost & Sullivan's lead analyst on the study.

"Professionals, the majority of whom have a technical background, appear to be focusing on the familiar. The instinct to develop skills for the new operational dynamic introduced by cloud computing may still be elusive for many," he added.

Modern uses of data require security professionals to look at a bigger picture than that encompassed by the technology alone, said John Colley, European managing director of the (ISC)2.