Feds won't go all in on cloud. And that's a security problem.

Federal Times: Moving applications to the cloud requires agencies to refocus their security away from the network and onto users and data, according to experts who spoke at the American Council for Technology and Industry Advisory Council (ACT-IAC) Executive Leadership Conference on Oct. 30.

“The network defense has already been stretched to the breaking point, and having these big internally soft, externally hard shell networks just does not work in this day and age,” said U.S. Digital Service engineer Andy Brody. “The boundaries are less physical and more logical.”

Brody explained that agencies don’t yet have the “budget or the appetite” to move everything to the cloud in one fell swoop, resulting in a network of applications that is split between new and old infrastructure. This split makes network perimeter-based defenses particularly hard.

Read article