1. The Organization Is Ultimately Responsible for the Security of the Data and Transactions
Cloud vendors know they must do their cyber-security part, but in the end, if a customer’s data is compromised, it is the organization that will have to answer to that customer or pay the fine. Similarly, if an organization falls victim to a ransomware attack, it is the organization that must pay the hacker. This means that just because you’re using cloud computing, you can’t let your guard down. According to one source, two common
causes of data breaches in the cloud are misconfigured access restrictions on storage resources and forgotten or improperly secured systems, both of which are the responsibility of the organization, not the cloud vendor. You must still make cybersecurity one of your highest priorities, ensuring you have trained staff and that your team stays current on the latest threats and predictions.
2. Cloud Vendors Are Working to Increase Security and Make It Easier for Businesses
Cloud vendors have already invested enormous resources in their own products’ security. When the major players include Amazon (Amazon Web Services), Microsoft (Azure), and Google (Google Cloud Platform), you can be sure security has been one of the highest priorities and some of the most talented minds have been tasked with it—for self-serving reasons if for no other. And now they have turned their attention to helping their customers improve security as well. For example, as summarized in an article at
Forbes , Google offers a Cloud Security Command Center that acts as a scanner to look for vulnerabilities, and both Amazon and Microsoft have built applications and infrastructures to help. If you’re in doubt about how well you’re securing access and data on your end, turn to your vendor for help.
3. Cloud Computing Could Improve Security
Sometimes cloud computing offers a security solution. Small to medium-size businesses are particularly vulnerable to cyberattacks such as ransomware because they don’t have or haven’t spent the resources on improving their cybersecurity. Moving to the cloud could improve their
overall security because the cloud vendors—as described above—have some of the most robust security in the IT space. In fact, some argue that moving data to the
cloud is more secure than keeping it on-site, although that can be hard for some IT managers to accept, given their natural inclination to keep data where they have the most perceived control over it.
4. Cloud Security Is an Even Bigger Issue with GDPR
In May of 2018, the General Data Protection Regulation (GDPR) became enforceable. Although it applies to residents of the European Union (EU) and European Economic Area (EEA), it has far-reaching effects for organizations all over the world because the citizens of these areas often do business with entities outside of these areas. Post-GDPR, those entities, and organizations must make sure their data practices comply. Although the best way to ensure compliance is through legal counsel, in general, this means both the cloud vendor and the cloud customer must be in accordance with data protection practices. For businesses that use a multi-cloud solution, with more than one vendor, each solution must also comply. This could get a little tricky, so it’s something to strive to stay on top of.
5. Cloud Security Is Already Affected by the Internet of Things (IoT)
Despite all of the progress made in securing cloud solutions, data centers, and network infrastructures, however, we are on the verge of undoing a lot of that progress due to the Internet of Things (IoT). With the explosion of IoT devices comes an explosion of security vulnerabilities, because these devices often don’t have the level of security they should (yet). As a result, they offer a “way in” to your data and even cloud solutions, undermining other cyber-security efforts. One expert predicts it will be so bad that the next couple of years will look like a game of Whack-a-Mole as businesses deal with these one-off security breaches.
