Cloud HSMs – The Risks and Opportunities (I11a)
This talk will discuss the challenges and opportunities faced by the move to cloud based HSMs. The current standardization landscape will be discussed, including a dive into the new PCI HSM v4 requirements covering Cloud HSMs. The threat environment of Cloud HSMs will be outlined, along with how these can or should be mitigated by emerging standards. Unique risks covering key ownership and remote management in these environments will be covered, including how these impact on both implementation and operational security.
The talk will also cover the benefits if we get Cloud HSMs right, from completely elastic processing through to the ability to provide entire ‘banks in the cloud’ as as SAAS service.