This document discusses the security implications of virtualization. It notes that while virtualization provides benefits like availability, isolation, and easier recovery from incidents, it also introduces new risks that are not present in traditional physical systems. Specifically, virtualization can compromise the separation of duties and introduce questions around confidentiality, integrity, and compliance. However, if implemented carefully while considering these new risks, virtualization can enhance security when used appropriately. The document encourages thoughtful implementation of virtualization to take advantage of its benefits while mitigating its risks.
Related topics:
