I often hear how Cloud is insecure from people who claim that unauthorized access is a real and significant risk for users of Cloud Computing. It always kind of frustrates me as, in my (admittedly somewhat biased) view, Cloud is as secure, if not more so, than traditional IT.
In our Cloud security whitepaper on CloudU, we spent a bunch of time talking about why Cloud Computing is in fact potentially significantly more secure than traditional models of IT delivery while at the same time pointing out the fact that there’s still stuff that organizations need to think about when using Cloud.
At the same time however we were totally realistic about the fact that there are still some things that end customers need to think about in terms of security. Sometimes the most useful thing for folks making a change is a simple checklist of things to think about and so, to that end, here’s our picks of things to think about when moving your organization to the Cloud;
Ensure these six points are dealt with, and you’re all set to enjoy a safe and rewarding Cloud experience.
We’re covering all things Cloud at CloudU, our Cloud Computing educational series. We’d love you to sign up to receive whitepapers and webinar invitations.
Agreed. Just because it’s easy and comes up fast doesn’t mean that it absolves the customer from doing due diligence. There are a lot of Saas companies who will help you with hardening your servers so if your team lacks the knowledge there is help available. But it’s not free and you still have to understand what the risks are if your data is compromised.
Having your stuff on an internal network is not a guarantee anymore of security because may organizations have external devices ( smartphones, tablets, laptops ) that they don’t have as much oversight on. And if your team is small with each person wearing a lot of hats, a managed cloud solution can be more secure because you’re dealing with trained security professionals rather than Joe Programmer who is really great with code but doesn’t understand Linux kernel config.
No matter your environment though, the greatest weakness is always the people. If you lock your machines down like Fort Knox and your CEO thinks having a secure password is too hard, well….good luck with that.