The Obama Administration announced last week that it is considering expediting cloud computing certification for federal agencies by relaxing some of the security requirements issued by the General Services Administration (GSA) in November of 2010. This apparently is a response to comments issued by, among others, the Software and Information Industry Association (SIIA), which argued that the one-size-fits-all approach to cloud security requirements issued by the GSA in November was impractical and outdated. “The SIIA’s point is that the nature of services offered by some cloud platforms is such that they do not require the highest level of security measures, and I tend to agree with them,” says Andrew Martin, technology and new media attorney with Scott & Scott, LLP. “Different sets of requirements for different categories of web-based solutions likely will help to avoid forcing vendors to integrate inefficient and unnecessary functionality into their products. Private-sector organizations should consider a similar service category-based technique when evaluating cloud vendors in order to promote efficiency during negotiations for the service.” For more information, please contact Mr. Martin at 800-596-6176 or amartin@scottandscottllp.com.