How to Mitigate the Risks of Cloud Computing Implementation
With cloud computing on the rise and more IT consulting companies entering the fray, even the most conscientious organizations have found it difficult to mitigate risks when considering cloud computing implementation.
From our experiences, concerns of data security and privacy have been most prevalent for organizations considering Houston cloud computing vendors.
This article is written by Steven J.J. Weisman, Esq. and is the first in a series of cloud computing and IT security experts who share their experiences and expertise on how to overcome common security concerns of cloud computing. Mr. Weisman is a lawyer, college professor, nationally recognized expert in high-tech computer scams, and author of the book "The Truth About Avoiding Scams."
The perception that there are security concerns regarding cloud services is valid. In a time when businesses are regularly hacked, in large part because of lack security, the use of relatively new technology without adequate security in place presents just another opportunity for computer savvy criminals to wreak havoc.
However, the good news is that no new security is required to provide a secure environment in the cloud. What is necessary is to properly utilize security systems already in existence.
Read the ‘fine print’ when engaging with cloud providers
Although there is rarely anything "fine" in fine print, it is important to read the terms of the service contract with a cloud provider to make sure that proper security measures are utilized.
First and most important is that the data is encrypted. However, merely being encrypted is not enough; in most instances, it is only encrypted in transferal. It must also be encrypted in storage, as well.
You also want to make sure that the terms of your contract limit access to the data, so a strong confidentiality clause is important in any cloud contract. The more people that may have access to the data, the more you are at risk. Their security problems become your security problems.
Location of datacenter is key
It is also important to know ultimately where the computers that are storing your information are located because even if the company with which you are dealing is an American company, it may be utilizing off shore companies for actual storage of the data which means that you may be subject to the laws of a country with less stringent security laws.
Looking into moving to the cloud, but not sure where to start? Register for a free webinar on the Five Steps to Understanding and Implementing Cloud Computing.
