Cloud Security – Questions to Ask

Posted on

Cloud services can provide any-sized business efficiency and cost savings. Cloud services can also help free up time to allow for innovation and speed up time to market. For some companies cloud services can also provide better security.  IT teams wear many hats to keep their systems in tip-top shape as the world demands always on service.  Many teams are looking to trusted partners who offer solutions to help them manage.

When it comes to adopting a cloud solution, many put security on the top of their list of concerns.  In fact, IBM recently found that 76% of CIOs consider IT security their biggest risk. Security just like other criteria should be evaluated thoroughly when looking at a new IT service whether that service is cloud related or not. IBM Cloud pulled together these questions to ask when evaluating a cloud service:

  • Who is responsible for security? Understand who owns what once the cloud solution is in place. You may find that the provider does not take full security responsibility or uses a third party.  Depending on the skills  of your team, you will need to decide if you can handle the added security needs or perhaps you can work on a shared responsibility setup or you may want a vendor who has full cloud security expertise and handling
  • How do you evaluate if the security is adequate?  When it comes to security don’t stop your evaluation at the certificate level. Dig in and find out what and where the certification covers and what it means to your business. Better yet, look for a cloud service provider that covers security for the entire infrastructure and can help you manage regulatory compliance standards
  • What happens if something goes wrong? You must understand the provider’s disaster recovery process. In today’s always on world, quick recovery is crucial not only to your customers and employees but also to your bottom line

Finally, once the decision is made to move forward, be sure to clearly document the process, procedures and the division of responsibility for managing your cloud service.