أنشئ حسابًا أو سجّل الدخول للانضمام إلى مجتمعك المهني.
Cloud and data security is really an interesting topic. There are pros and cons in moving all or part of the infrastructure and data to the cloud in regards to security. Cloud for example has rapidly decreased the cost of DR, making data highly available and storage for off-site backup to restore lost data cheaper, hence a plus point for data security. On the other hand though, cloud has opened a whole new set of issues in security whether this is account hijacking and/or data breach or data leak, or even malware injection. There will always be risk of malicious activity by insiders or external hackers. There are solutions however. For example I would instruct a network admin to limit access IPs to the cloud services, from specific public office IPs (users are in office), or VPN (out of office) and use of SSL as mentioned, or limit access hours to the working hours only (for whatever servies this can apply without disrupting out of working hours operation for some users like salespeople). Another option is increased monitoring of user activity in the cloud.
I think cloud providers are still behind offering sufficient monitoring or auditing abilities as compared to on premise solutions. So do whatever you do with caution, bring only data to the cloud which can easily be restored and even if lost will not bring down the whole business. Eventually you will realize, it all comes down to analyzing cost vs benefit rather than trying to secure everything. More important, in my opinion, is how to get lost data back so business can continue operate in case of loss or service disruption. Preventing data loss completely, although important and desirable, can become really expensive in resources (consistent monitoring of internal activity, being up to date and eliminating external threats, etc).
Hope this helps :)
هل تحتاج لمساعدة في كتابة سيرة ذاتية تحتوي على الكلمات الدلالية التي يبحث عنها أصحاب العمل؟