Data security in the cloud
Our featured IT blogger this week, Andrew Hay, recently discussed the notion that it really depends on the situation when deciding which is more secure: physical premises or the cloud. He mentions that many want to be able to walk down the aisles of their data center and physically see the locale, while others opt for the cost savings of the cloud.
In your opinion, is apprehension about cloud security a main barrier to entry into mass cloud data storage? Are there other reasons that you think are keeping organizations (or yourself) from relying on cloud storage?
Software/Hardware used:
Software/Hardware used:
ASKED:
June 18, 2009 8:59 PM
UPDATED:
June 29, 2009 2:24 PM
RELATED QUESTIONS
- Securing the cloud: Is IDS passe?
- What are your questions for software testing expert James Christie? 100 Point Bounty!
- Free IT Book: Computer Incident Response and Product Security
- How is your company handling its storage needs?
- Are you surprised by the switch from second to third platform technologies?
Answer Wiki:
My organization has briefly entertained the idea of cloud storage, hosting, applications, etc...but we have determined that keeping our information on the physical premises is the way to go about it. Our outfit is at a size where the cost savings (if any) for cloud implementation would not be enough to justify moving away from what we currently have.
Another main concern is that if a cloud company's security is breached or compromised, that means our data potentially is too. If a company gets in a law suit, or has a poor employee exposing things, their insecurities make us insecure.
Apprehension about cloud security is a major factor in my organizations decision to stay with the physical implementation we have.
-Schmidtw
To see all answers submitted to the Answer Wiki: View Answer History.
I think physical premises vs. the cloud is more about logistics and politics than anything else. There’s certainly a lot of security issues that people don’t think about when moving to the cloud. In the end, this is a business decision that needs to involve a LOT of people – not just IT, security, and the CIO/CTO.