The cloud pragmatist will have to weigh the relative security of a cloud as compared to alternatives such as hosting, co-location or his own data center. The cloud is a platform shift that forces us to re-focus on the tried-and-true approaches that we have been discussing for at least a decade: data-centric and identity-centric security, the perimeter-of-one model, the need for audit and assurance.
On the topic of audit and assurance, one of the more interesting elements of the Cloud Security Alliance Summit was the A6 workgroup, which aims to "to provide a common interface that allows providers to automate the audit, assertion, assessment and assurance of their environments and allow authorized consumers of their services to do likewise via an open, extensible and secure API across SaaS, [platform-as-a-service] and IaaS offerings." Pay attention to A6 -- it could be a very useful standard.
RSA 2010 is a promising indicator for the year: palpable enthusiasm, excitement and activity, and real users actually interested in buying stuff. A big change from 2009.
Read more about wide area network in Network World's Wide Area Network section.