Security: CSA guidance V4 (Report)

A collaborative effort on mitigating (security) risks brought together by the Cloud Security Alliance (CSA):
https://cloudsecurityalliance.org/guidance/#_overview

Quoting:
"This version [V4] incorporates advances in cloud, security, and supporting technologies, reflects on real-world cloud security practices, integrates the latest Cloud Security Alliance research projects, and offers guidance for related technologies.

The goal of the fourth version of Security Guidance for Critical Areas of Focus in Cloud Computing is to provide both guidance and inspiration to support business goals while managing and mitigating the risks associated with the adoption of cloud computing technology."

And the V3 PDF can be found here:
https://downloads.cloudsecurityalliance.org/assets/research/security-guidance/csaguide.v3.0.pdf&ved=0ahUKEwjk9NXbw5_XAhWIuRQKHUq1BfYQFggxMAI&usg=AOvVaw3OEGdJjEzR7a4T762_jjLm

SW Construction: Cobol in-house development for what?

COBOL still in the headlines (and still in indexes like the TIOBE index). Read to understand why (and how custom / bespoke software developed in-house, which typically is business-critical, is to be replaced):
https://www.fedscoop.com/va-looks-move-past-cobol-house-software-development/

Quoting:
"Thomas’ predecessor CIO LaVerne Council last year launched the idea of a VA digital health platform, which is slated to incorporate commercial cloud computing, open architecture and agile delivery to best keep pace with best-in-class digital health technologies.

That’s because today, VA is still running some systems based on COBOLprogramming, like its decades-old benefits delivery network, and it employs programmers who specialize in the maintenance of the outdated, legacy programming language — though “it’s dwindling, as you well know, they’re retiring,” the acting CIO said. The VA also enlists contractors to support the operations and maintenance of those systems, he added.

Modernizing those COBOL systems is at the top of Thomas and VA’s Office of Information and Technology’s list of priorities for 2017, he said.

“That’s a big risk to us,” Thomas said. “That’s something that’s job No. 1 for this year,” before things like continued development of enterprise cybersecurity strategy, modernizing VA’s health care scheduling program and consolidating financial management systems to be run as a shared service through the Agriculture Department."