Three Security Questions to ask Cloud Vendors

Three Security Questions to ask Cloud Vendors

Your company is looking to dramatically change the way they are saving large amounts of data and they are thinking about moving to the “cloud.” There are many concerns when transferring to the cloud and security is one of the biggest, followed closely by concerns about complying with regulations and losing control of data according to a recent study by 451 Research.

While these are valid fears based on the recent news about breaches in data, loss of information and general doubt of cloud security at both the company and government level. Jack Sepple and Daniel Mellen tend to disagree, stating that “most public clouds are infinitely more secure than most companies’ current internal data centers and security functions,” in a column on Forbes.com.

Does this cloud meet my business’s specific needs?

There are major differences among cloud providers in their approach to security and their use of security technologies, processes, and personnel. These differences can have a major impact on the availability, integrity, accessibility, privacy, and compliance of your data. These cloud components can directly impact your company. Figure out exactly what your business needs, ask yourself questions such as: how many people will be using the cloud, how much storage will it need and how much will it cost? First research the needs of your company and then study available vendors to eliminate the ones that don’t work best for you and when you’ve narrowed down the options, dive deeper into questions about data protection, regulations and isolation of databases.

How can you isolate customer data?

“Some cloud providers will promote the fact that they provide data isolation or tenant isolation, but often that isolation mechanism is just one bad keystroke away from potentially comingling customer data,” Ben Nelson, vice president of security and regulatory compliance for Oracle Cloud said in an article on Forbes.com.

It is all too easy for a cloud provider who segregates customer data on one database and relies on application-level tools to accidentally update information for the wrong customer or multiple customers. If there is proper isolation between customers, meaning each cloud database is separate (although on running on the same hardware) and has proper authentication credentials it could dramatically reduce the chance of a data breach. The provider could even have a unique schema associated with your database instance to keep it even more secure. If all these proper tools are applied, it is less likely for data to be changed, manipulated or lost.

Who can access my data?

When trying to avoid a breach in data, it is crucial to know who can access the data in which you’ve stored on the cloud. You’ll want to know how the cloud provider controls and manages access to your database, from cloud vendor employees to your own staff, and which data they can access and any given time.

In the cloud model, data is transmitted between and among connected data centers and a diverse array of clients: mobile phones, desktops, laptops, tablets, etc. While the cloud service provider has no control over the security mechanisms put in place by the vendors of these devices, they can ensure that no client ever opens a hole in your firewall with any externally accessible port, communicates with any non-authenticated source, or stores cached credential information in an unencrypted format. This will stop three of the most common attack vectors and the people who could be behind the potential breach.

When evaluating prospective vendors, be sure to get a detailed description of their use of the cloud, from their customer isolation process to their protection of your data. Don’t be afraid to ask questions and if you’re not conversant in the technology yourself, consider having it appraised by an expert.

Featured

  • Smarter Access Starts with Flexibility

    Today’s workplaces are undergoing a rapid evolution, driven by hybrid work models, emerging smart technologies, and flexible work schedules. To keep pace with growing workplace demands, buildings are becoming more dynamic – capable of adapting to how people move, work, and interact in real-time. Read Now

  • Trends Keeping an Eye on Business Decisions

    Today, AI continues to transform the way data is used to make important business decisions. AI and the cloud together are redefining how video surveillance systems are being used to simulate human intelligence by combining data analysis, prediction, and process automation with minimal human intervention. Many organizations are upgrading their surveillance systems to reap the benefits of technologies like AI and cloud applications. Read Now

  • The Future is Happening Outside the Cloud

    For years, the cloud has captivated the physical security industry. And for good reason. Remote access, elastic scalability and simplified maintenance reshaped how we think about deploying and managing systems. But as the number of cameras grows and resolutions push from HD to 4K and beyond, the cloud’s limits are becoming unavoidable. Bandwidth bottlenecks. Latency lags. Rising storage costs. These are not abstract concerns. Read Now

  • Right-Wing Activist Charlie Kirk Dies After Utah Valley University Shooting

    Charlie Kirk, a popular conservative activist and founder of Turning Point USA, died Wednesday after being shot during an on-campus event at Utah Valley University in Orem, Utah Read Now

  • The Impact of Convergence Between IT and Physical Security

    For years, the worlds of physical security and information technology (IT) remained separate. While they shared common goals and interests, they often worked in silos. Read Now

New Products

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions.

  • Compact IP Video Intercom

    Viking’s X-205 Series of intercoms provide HD IP video and two-way voice communication - all wrapped up in an attractive compact chassis.