Cloud Security ABC: Business data in the cloud is secure

That's shocking. Data thieves, hackers, criminals, they lurk on the web and try to get into your corporate web site, so they can easily steal sensitive business data if the protections aren't perfect.

So how can many companies safely and effectively use the cloud, how to protect data and infrastructure from http://www.aliyun.com/zixun/aggregation/30175.html "> criminals?" Is it safe for companies to use cloud computing?

These questions are not simple, says Ara trembly, head of the Tech consultant, an IT consultant.

First, we need to carefully review our business processes and objectively assess the importance and value of the entire organization process, security issues, business data, Trembly said.

"It's unwise for some companies to use the cloud," says Trembly, a company that "sees data as life" and doesn't put it in vulnerable places. "Insurance companies, financial institutions and medical centers belong to such businesses. ”

The problem is that if such companies cannot place these critical data within an organization with the highest protection that maximizes risk reduction, they cannot guarantee that security will fully meet their needs. "The problem of violating HIPPA is very easy to happen. This is not to say that similar problems have arisen, but rather that similar problems may arise. ”

Whether it is a public cloud or a private cloud, it will never be possible to use the cloud in the way that a supercritical data security enterprise requires. Or is this kind of security-related challenge making this impossible?

"At the moment, I'm not sure," Trembly said. "The problem of cloud and network application is actually bad network security problem." I'm not expecting any significant improvement. The reason network security is so poor is that information is sold, so if someone steals the data, they can sell it. Some may say that these problems will be solved in the end, but I don't think so. ”

This is a real challenge to data security, Trembly says, because criminals are always on guard, and security personnel, who regularly block intrusions and hacker attacks, tend to lag behind. "They (hackers) stare at Social security account information and any content that exposes the privacy of others. The information collected from industrial espionage is available for sale. ”

This is the motive of the lawless elements, and the benefit will drive them to be a quick step, Trembly said. "They are willing to devote all their energies and precious time to all the attempts that you want to prevent." There are a lot of funded illegal enterprises. Just as we make a living by handling and protecting information, they make a living by stealing information. ”

Because of these motivations and their inherent dangers, it is not safe for customers with insurance and financial services to put information on the cloud.

Whether you're using a public cloud or a private cloud, there are problems with cloud security, Trembly said. In contrast, security issues are less severe in internal systems with intrusion prevention measures. "But if you have to be safe according to your will, do not use the cloud." ”

If some of the key data class businesses have to use the cloud to implement certain it functions, it is perfectly acceptable to have some basic functions such as housing repairs and supply ordering, he said. "If you have a better way, you don't have to stick to it," trembly adds.

Cloud has many advantages, one of the outstanding benefits is that it can save costs, Trembly said. If business data is compromised, cost savings are less important. Because it will not only bring great trouble to the enterprise, but also will dampen the enthusiasm of enterprise users, damage the company's reputation. "Once public, things will be around the restoration of trust, to regain customer recognition, and if we do not have the trust of everyone, the customer would be far away." ”

What should your business do when faced with a choice? How do you make a choice when considering whether to adopt a cloud solution?

The following are important questions about cloud security mentioned by trembly:

1. The key issue is the value of the data

Then, consider the following related questions: What will happen to the total destruction of the data? Will the business be completely terminated? Does system recovery cost a lot? Could it be a nightmare? " You really need to think about all sorts of situations, "Trembly said.

2. How would you protect your company's data?

"How are you going to invest? Are you willing to buy and maintain an intrusion prevention system? You must be familiar with these issues. "What changes will you make to ensure that data is protected?"

trembly says customers are most concerned about setting up employee policy and using personal equipment at work. However, it is still necessary to ensure that data protection is locked.

"Ask yourself if you want to use portable devices to standardize management, so you don't have to worry too much, or make it a nightmare for people to volunteer to use these devices." "Trembly said. The more devices that people are allowed to use, the more opportunities there are for security problems. It's confusing to the IT staff.

You can also make clear policy decisions about which employees are selected to access data security. Specify whether there are restrictions on their access rights, Trembly said. This is really important. Restricting access to unrelated people is a smart idea. But does this mean that other things can be accomplished overnight?

(Responsible editor: admin)