DATA SECURITY IN THE CLOUD

DATA SECURITY IN THE CLOUD

2802
59
SHARE

By Rahul Kumar, Country Manager, WinMagic

It has not yet reached epic proportions, but the number of organizations adopting cloud-based technologies is growing dramatically. Organizations of all sizes across industries are turning towards cloud-based infrastructure and cloud computing for better scalability, accessibility and a collaborative work environment. However, after moving to the cloud, many organizations mistakenly assume that it is the role of the cloud service provider (CSP) to secure data and ensure compliance.

Even though the CSP may provide services for protecting data, organizations must understand the fact that virtual environments are not always fully secure and that they—organizations—too have a role in protecting the security and privacy of their data. Remember, the liability to notify those affected and remediate damages is on you should your company suffer a data breach!

Knowing the levels of responsibility does matter

When it comes to choosing between cloud infrastructure and cloud computing, companies must make the decision backed by a plan to implement the right security solution. The solution should effectively address issues such as securing data, managing risk related to unauthorized access, and meeting compliance and regulatory requirements. Remember, the cloud is subject to the same threats as a data center. Whether cloud or on-premise, organizations have to deal with human error, malicious breaches from internal and external sources, as well as system glitches. The massive amounts of data located on shared cloud servers always entice criminals. Things get a lot more complicated when a multitude of mobile devices are used in organizations.

With increased sophistication of threats, cloud security is becoming even more dynamic as it evolves. Organizations continue to be responsible for security, privacy and compliance even when under different cloud service models. The need for consistent policies, password rules and specialized data encryption methods has never been greater. Both the organization and the CSP have roles that vary in scope, but then both also have different levels of responsibility that encompass the entire gamut of operations—from data classification, endpoint protection, identity and access management, application and network level controls, to host and physical security.

Who is responsible for a breach?

There is no question about who is responsible when a breach occurs. For businesses, the vital consideration in securing the infrastructure and data relates to where the CSP’s responsibility ends and the organization’s begins so that a breach does not occur in the first place. This means that while the provider is responsible for protecting the hardware, software, physical facilities and other aspects involved with running the cloud services provided, businesses maintain control over a number of key security measures.

Making life simple with encryption

There is abundant evidence to show the difference that encryption makes in containing the volume of loss and associated costs when a breach occurs. In fact, according to a study, extensive use of encryption is the second most impactful factor that can limit the costs of a data breach.[i] Despite all pointers that emphasize its advantages, usage of encryption is limited in many businesses across industries. Although the adoption of encryption has increased over the last decade, only a mere 37 percent of businesses employ it as a cloud security strategy.[ii]

Remember, encryption is the important first step for businesses that wish to take control of the ownership of data; better encryption key management follows next.

While encryption renders data into a format that can only be read by authorized users, it does not make a powerful strategic tool if not combined with effective key management. Far too often, companies follow a laissez-faire approach to key management, which makes its utilization needlessly complex and cumbersome. Problems do get out of hand when there is no clear ownership of keys within the organization, when no skilled personnel is in charge of the keys, or when a siloed approach is followed for key management.

Having an effective encryption and key management solution is vital to the success of any security strategy. Data encryption, when executed properly, ensures the protection of sensitive information. Although there are many myths surrounding data encryption (too expensive, too difficult to manage, etc), the surprising truth is that it is indispensable. In fact, encryption provides the foundational framework to any data security protection strategy.

Whether data is stored in public, private, or hybrid cloud environments, organizations need a robust solution to ensure full control of encryption and its keys. Much of the encryption related problems can be alleviated with the adoption of file encryption software such as WinMagic SecureDoc CloudSync, an application that encrypts data even before it leaves the network, and SecureDoc CloudVM, an intelligent key management system that encrypts virtual machines and removes encryption keys at the conclusion of each virtual instance.

By using a single platform, such as SecureDoc Enterprise, an organization can ensure the implementation of a unified encryption strategy across any endpoint, provide a virtualized or cloud environment with increased enterprise security, ensure encryption compliance, and reduce complexities of risk management and audits.

59 COMMENTS

  1. It is appropriate time to make a few plans for the longer term and it’s time to be happy.
    I have learn this publish and if I may I want to suggest you some attention-grabbing issues or tips.
    Maybe you can write subsequent articles regarding this article.
    I desire to read more things approximately it!

    Also visit my site wiki.cloudcabinet.co.za

  2. Hey I am so happy I found your blog, I really found you by mistake, while
    I was searching on Digg for something else, Anyways I am here now
    and would just like to say many thanks for a marvelous post and a all round interesting blog (I also love the theme/design),
    I don?t have time to read through it all at the minute but I
    have saved it and also added your RSS feeds, so when I have time I will be back to read much more, Please do keep up the excellent b.

    My homepage: Napoleon

  3. Attractive section of content. I simply stumbled upon your site and
    in accession capital to say that I get actually enjoyed account your weblog posts.
    Any way I will be subscribing on your feeds or
    even I fulfillment you get admission to persistently fast.

  4. Hi, I do believe this is an excellent website. I stumbledupon it 😉 I am going
    to come back yet again since i have saved as a favorite it.
    Money and freedom is the greatest way to change, may you be rich and continue to guide others.

    Here is my site :: IceBox Air Cooler

  5. Hello there I am so grateful I found your blog page,
    I really found you by accident, while I was looking on Aol for something else, Regardless I am here now
    and would just like to say thank you for a incredible post and a all round interesting blog (I also love the
    theme/design), I don’t have time to read through it all at the
    minute but I have book-marked it and also included your
    RSS feeds, so when I have time I will be back to read much more, Please do keep up the fantastic work.

  6. I truly love your site.. Very nice colors & theme. Did you make this web site yourself?

    Please reply back as I’m wanting to create my own blog and want to
    learn where you got this from or exactly what the theme is named.
    Many thanks!

    Look at my page :: marchegabonais.com

  7. Hmm it seems like your website ate my first comment (it was super long) so I guess I’ll just sum it up what I had written and say, I’m thoroughly
    enjoying your blog. I as well am an aspiring blog blogger
    but I’m still new to everything. Do you have any tips and hints for beginner
    blog writers? I’d certainly appreciate it.

    Also visit my blog download slot game playboy2 – xe88Sg.com

  8. Hi would you mind stating which blog platform you’re working with?

    I’m going to start my own blog in the near future but I’m having a difficult time choosing between BlogEngine/Wordpress/B2evolution and Drupal.
    The reason I ask is because your design seems different
    then most blogs and I’m looking for something unique.
    P.S My apologies for getting off-topic but I had to ask!

    My web site :: joker123 bonus

  9. Pretty nice post. I simply stumbled upon your weblog and wanted to say
    that I’ve really loved surfing around your weblog posts.

    After all I will be subscribing to your rss feed and I’m hoping you
    write again very soon!

    Feel free to surf to my web site greatwall99 download
    (mega888sg.com)

  10. Hi there! This article couldn?t be written much better!
    Reading through this post reminds me of my previous roommate!
    He always kept preaching about this. I am going to
    send this information to him. Pretty sure he’ll have a great read.
    Thank you for sharing!

    My website; tanhua666.com

  11. Ahaa, its nice conversation regarding this paragraph here at this weblog, I have read
    all that, so at this time me also commenting at this place.

    Also visit my blog post; Delphia

  12. Aw, this was an exceptionally nice post. Taking
    a few minutes and actual effort to make a good article?

    but what can I say? I put things off a lot and never manage to get nearly anything
    done.

    my web blog: Vital Maxx XL

  13. I’m really enjoying the design and layout of your site. It’s a very easy on the
    eyes which makes it much more pleasant for me to come here
    and visit more often. Did you hire out a designer to create your theme?
    Outstanding work!

    Also visit my page – BodyCore Keto

  14. I’m so happy to read this. This is the kind of manual that needs to be given and not
    the accidental misinformation that is at the other blogs.
    Appreciate your sharing this greatest doc.

    Feel free to surf to my website: VikingXL

  15. Good day! This is my first visit to your blog! We are a team of volunteers and starting a new initiative in a community in the same
    niche. Your blog provided us useful information to work on. You
    have done a marvellous job!

  16. Hello, i feel that i noticed you visited my website so i came to ?return the desire?.I’m trying to find things
    to improve my site!I suppose its adequate to make use of some of your
    ideas!!

    My web site TechPro Wifi

  17. We would like to thank you all over again for the
    stunning ideas you gave Jesse when preparing her
    own post-graduate research in addition to, most importantly, for providing many of
    the ideas in one blog post. Provided that we had been aware of your web
    page a year ago, we would have been rescued from the pointless measures we were participating in. Thanks to
    you.

    Here is my homepage: Divine Dynamic Keto Pills

  18. I have been browsing online more than 3 hours today, yet I never found
    any interesting article like yours. It is pretty worth enough for me.

    In my view, if all site owners and bloggers made good content as you
    did, the web will be much more useful than ever before.

    Look at my web page: Naked CBD Gummies

  19. Howdy! I know this is kinda off topic however , I’d
    figured I’d ask. Would you be interested in exchanging links or maybe guest authoring a blog article
    or vice-versa? My blog discusses a lot of the same topics as yours and I believe we could greatly benefit from each other.
    If you happen to be interested feel free to send me an e-mail.

    I look forward to hearing from you! Terrific blog by the way!

    Here is my blog: mpc-install.com

  20. whoah this blog is great i really like reading your articles.

    Keep up the good work! You already know, many persons
    are hunting around for this info, you can help them greatly.

LEAVE A REPLY