Anything new about cloud security?

[BurntOrange]

Hello everyone! I'm thinking about this. I believe about protecting our most sensitive files. But, we always want the reliable cloud services. Recently, a friend told me about this security alliance. Others are affiliated to that. Is this really beneficial to provide assurances with regards to managing our cloud security? I'm asking about it because our family is planning to engage in a call center business with a family friend as our partner. I hope someone here could explain it to me further. Anything new about cloud security?

[abaxas]

The cloud is and will always be insecure.

[peterb]

The cloud is and will always be insecure.

This^

Too often security is taken to be synonymous with privacy or confidentiality. It isn't.

Confidentiality/privacy is an element of a secure system, but security also includes reliability/ availability, authenticity/integrity and depending on circumstances, non-repudiability. (which is holding a user accountable for actions, so if I send an e mail, I cannot plausibly deny I sent sent at a later date)

You can make you data private by offline encryption, and encryption techniques can assure authenticity.

But you cannot guarantee availability with a cloud service although you can minimise the risk by mirroring cloud services, and having redundant systems in place.

And security may also need to look at procedures, policies and physical security, integrity of power systems and so on. Those last two are also the concern of a cloud storage system, but you might want to ask the question of a cloud service provider. You might also want to look at the financial background of a cloud service provider to see if they are still likely to be around in a years time.

You will also need to review your security position regularly.

But this is nothing new really. As with all secure systems, you need to asses the threat, the vulnerabilities, and therefore the risk. Then look at the potential impact of various security breaches and the steps to take to mitigate the risk to an acceptable level with the budget at your disposal - and keep your security policy up to date!

[Zak33]

Ref Cloud Security

Since we stopped using Harriers....our cloud security diminished immensely.

I.know the tornado and typhoon go faster....but that harrier can be airborne and intercepting 150 miles away before the others have got in the air.

Lots of naughty people fly around our clouds every day. You can't see them and the authorities might not tell you....but someone somewhere can fly straight through the cloud you thought was secure.

If the item or info is in your own physical control...it's easier to see its safety.

It might be a pain to carry it across the world to use it....but still....you then control it

[peterb]

Ref Cloud Security

Since we stopped using Harriers....our cloud security diminished immensely.

I.know the tornado and typhoon go faster....but that harrier can be airborne and intercepting 150 miles away before the others have got in the air.

Lots of naughty people fly around our clouds every day. You can't see them and the authorities might not tell you....but someone somewhere can fly straight through the cloud you thought was secure.

If the item or info is in your own physical control...it's easier to see its safety.

It might be a pain to carry it across the world to use it....but still....you then control it

You little tinker!

[badass]

The cloud is and will always be insecure.

True, but then again so is everything else connected to the internet, making that statement pretty meaningless.

There are many, many different cloud services, some of which treat security as an afterthought and therefore their security is severely lacking. Others implement security into every stage of the design of the service and are therefore much more secure.

[Saracen]

True, but then again so is everything else connected to the internet, making that statement pretty meaningless.

There are many, many different cloud services, some of which treat security as an afterthought and therefore their security is severely lacking. Others implement security into every stage of the design of the service and are therefore much more secure.

The tricky bit for the average user is telling the difference.

My security process for cloud services is pretty basic - I avoid using them.

[b0redom]

Assuming the OP is not trolling for free scan postage, if you are serious about using cloud services or connecting any sort of system containing customer data to the Internet, don't post on a random Internet forum, employ someone who knows what they're doing!

You do not want to be the next Talk Talk.