Threat Modeling the Cloud Computing, Mobile Device Toting, Consumerized Enterprise - an overview of considerations

A megatrend triad comprised of cloud computing, converged mobile devices, and consumerization presents complex challenges to organizations trying to identify, assess, and mitigate risk. Cloud computing offers elastic just-in-time services without infrastructure overhead. However, visibility and control are compromised. Converged mobile devices offer integrated computing power and connectivity. However, end point control and security are compromised. Consumerization offers productivity gains and reduction in support costs. However, end point control and the organization’s perimeter are compromised. This paper presents an overview of considerations for organizations impacted by the megatrend triad and, subsequently, shows how threat modeling techniques can be used to identify, assess, and mitigate the attendant risks.