Trust in the Cloud
In September, TCG hosted a half-day at the TSCP Cyber Collaboration Workshop (more info and presentations at TCG 2016 Events). Among the topics covered: trust in the cloud, and how standards enable the trusted cloud.
Michael Donovan, TCG’s co-chair for the Trusted Multi-tenant Infrastructure Work Group, updated attendees on that group’s efforts to drive standards-based security into cloud computing.
He noted that multi-tenant security “…is an end-to-end configuration” but most products and standards address individual devices or functionality, and currently there is no comprehensive framework that encompasses business requirements. He also said that “…there is a need for solutions that address trust and security across solutions derived from combining dedicated and shared infrastructures.”
Donovan reminded attendees that at the same time, the IT environment is changing - consolidation, reduction in staffing, changes in budgets and growing use of shared infrastructures.
So what role does TCG have in cloud computing? TCG has been developing a standards-based framework for shared infrastructures as well as multi-provider infrastructures. The group also is creating reference models and implementation guidelines and has been working to identify and address gaps with existing standards. At its core, the TCG reference model will establish a level of trust between parties for information exchange and provide enforcement of policies with integrity measurements, assertions and attestations exchanged between parties. This is very similar to how TCG has driven trust into clients and into networks with its TPM and TNC architectures, now deployed widely.
Ultimately, this approach will allow businesses to assess trustworthiness of supplier systems, enable assessment of compliance during provisioning, implement best practices for trustworthy infrastructures and enforce policy, among other benefits.
Learn more by reviewing Donovan’s presentation, available here.
Additional info on TCG’s efforts for trust in the cloud also are available here: https://trustedcomputinggroup.org/solutions/cloud_security
Explore other blogs
Nov 2, 2026
How do hardware standards protect the aerospace sector?
Specifications like the TPM, CyRes and remote attestation secure satellites and aerospace systems end‑to‑end, ensuring trusted operations.
Oct 20, 2026
Ensuring device integrity with PRCR
Expanding supply chains increase tampering risks; PRCR helps manufacturers verify device integrity and ensure hardware stays trusted end‑to‑end.
Oct 15, 2026
Building the next generation of trusted computing experts
As the cybersecurity workforce faces a growing mismatch between available talent and the practical skills organizations need, education around trusted…
Explore other blogs
Nov 2, 2026
How do hardware standards protect the aerospace sector?
Specifications like the TPM, CyRes and remote attestation secure satellites and aerospace systems end‑to‑end, ensuring trusted operations.
Oct 20, 2026
Ensuring device integrity with PRCR
Expanding supply chains increase tampering risks; PRCR helps manufacturers verify device integrity and ensure hardware stays trusted end‑to‑end.
Oct 15, 2026
Building the next generation of trusted computing experts
As the cybersecurity workforce faces a growing mismatch between available talent and the practical skills organizations need, education around trusted…
Become part of TCG
Membership is open to corporations, start‑ups, government, academia, and non‑profits. Join to influence specs in Work Groups, access drafts, network with experts, and submit products for TCG Certification.