|
|
Like this article? PLEASE +1 it! |
|
Is Your Cloud Provider Sidestepping Security?
|
| Guest post by: Dovell Bonnett |
Article Overview: When you accept that cloud provider’s contract to store or backup your company’s data on their servers, did you read the fine print? According to Gartner, 2012 may be the year that Cloud Services gets a big boost because companies are looking to decrease IT costs, have more access form remote users and offer more services to your customers. But, at what cost?
![]() |
Free Download - Zappos Data Breach - Customer Safety and Security By Dovell Bonnett |
Is Your Cloud Provider Sidestepping Security?
In the April 2011 “Security of Cloud Computing Providers Study” white paper
by the Ponemon Institute three very disturbing conclusions were made. One,
cloud providers do not view security as a competitive advantage. Two, they
don’t view security as an important responsibility. And three, cloud providers
believe it is their customer’s responsibility to secure the cloud and not
theirs. This is very evident when you look over the top leading cloud providers
(Amazon, Google, and Microsoft ) contracts.
- From Amazon: “Amazon has no liability for …. (D) any unauthorized access to, alteration of, or the deletion, destruction, damage, loss or failure to store any of your content or other data.”
- From Google: “Customer will indemnify, defend, and hold harmless Google from and against all liabilities, damages, and costs (including settlement costs and reasonable attorneys’ fees) arising out of a third-party claim: (i) regarding Customer Data…”
- From Microsoft: “Microsoft will not be liable for any loss that you may incur as a result of someone else using your password or account, either with or without your knowledge. However, you could be held liable for losses incurred by Microsoft or another party due to someone else using your account or password.”
Cloud computing is by all means not going away. There are many advantages to cloud computing to companies of all sizes that needs to be properly integrated into the company’s business plan. But what cannot happen is for companies to feel that they are no longer responsible or liable for the information they hold about their customers. So to think that you’re going to reduce your IT costs and staff by moving to a cloud-based architecture is foolish at best. If anything you’re going to need more IT resources to be able to pick out the leaders within the industry, what services will be implemented and how security is being maintained to protect the company.
In Conclusion
The best advice I can offer any company who is interested in adopting a cloud strategy is to 1) Don’t put sensitive information onto any third party cloud; 2) consider building a private cloud; and 3) higher IT specialists who will manage and monitor all the cloud activities.
Related Articles
Article Tags: cloud security, identity theft, internet security, password management, smart cards
|
About the Author: Dovell Bonnett RSS for Dovell's articles - Visit Dovell's website Founded in 2005 and headquartered in Ladera Ranch, California, Access Smart delivers Access-as-a-Service (AaaS) solutions by way of a password manager for Windows authentication to reduce the risk of cyber-attacks. Access Smart implements AaaS using contact or contactless smartcards, magnetic stripe or 125kHz Prox technologies. The value that Access Smart brings is to offer more security functions and affordability onto a single employee ID badge. Security does not have to be cumbersome to be affective. That is why our products are designed using state-of-the-art security technologies while focusing on ease-of-use and low cost-of -ownership. Previously, smartcard technology was only available to governments and Fortune 500 companies. Access Smart has turned that model upside down by matching the technology to the needs, no annual subscription fees and fully transferable licenses to keep security affordable to even high employee/student turnover businesses. The Access Smart team has over 50 combined years in the smartcard and security industry. By addressing the very real problems from a systems mindset, Access Smart delivers everything for a company to implement AaaS within hours and not months/years. Please contact Dovell Bonnett at Access Smart as to discuss how best to implement Authentication, Authorization and Non-Repudiation into your business. Access Smart - The Alternative to PKI. Click here to visit Dovell's website Microsofts Forefront Review Dont Wait for Windows 8 to Secure Your Passwords ISSAs SoCal Security Symposium Protecting Your Company From An Online Data Breach OBAMA ADMINISTRATION PLANS INTERNET ID |
Related Forum Posts
Share this article with your friends. Fund someone's dream.
Leave a comment below or share on the left and you'll help support entrepreneurs in Africa through our partnership with Kiva. Over $50,000 raised and counting - Please keep sharing! Learn more.
Get advice & tips from famous business
owners, new articles by entrepreneur
experts, my latest website updates, &
special sneak peaks at what's to come!
Google Panda and Your Search Engine Rankings
Leader's Success Secret: Celebration
Ten Reasons to take Notes during Sales Meetings
Email us your ideas on how to make our
website more valuable! Thank you Sharon
from Toronto Salsa Lessons / Classes for
your suggestions to make the newsletter
look like the website and profile younger
entrepreneurs like Jennifer Lopez.



