Roger Grimes wrote on InfoWorld that one thing every company should be doing is preparing for the unknown regarding cloud security. With the benefits of adopting the cloud comes some risks as well, with the first being shared access to clouds.
"One of the key tenets of public cloud computing is multitenancy, meaning that multiple, usually unrelated customers share the same computing resources: CPU, storage, memory, namespace, and physical building," Grimes wrote. "Multitenancy is a huge known unknown for most of us. It's not just the risk of our private data accidentally leaking to other tenants, but the additional risks of sharing resources. Multitenancy exploits are very worrisome because one flaw could allow another tenant or attacker to see all other data or to assume the identity of other clients."
Another risk that needs to prepared for is that of the malicious software that has taken over much of the Internet. Every company will have to deal with bugs at some point, so they should be looking to fortify their network with as much data security and protection as possible sooner rather than later in an effort to avoid any unpleasant run-ins with the dregs of the web.
Other things to keep in mind when preparing for a cloud move include:
- Have clear rules for access, authentication and authorization to significantly reduce the risk for data loss
- Make sure that the company knows where it stands with the provider as far as ownership of information is concerned, as this can be an important piece of knowledge if any legal action takes place
- Ask questions of the provider to ensure the cloud will be available when the company needs it, being sure they are upfront and transparent about any downtime that may take place
A recent report by the Information Systems Audit and Control Association spoke with 4,500 IT professionals, with 69 percent of those in North America believing that the risks of cloud computing are greater than the benefits. There are worries about privacy, security and other risks that they believe could harm what the company does. However, with the proper planning and preparation, companies should have a great amount of safety and security in their cloud computing deployment.
Cloud Security News from SimplySecurity.com by Trend Micro.