To Stay Safe in the Cloud, First Assess Risk

by Siki Giunta

Are you letting security concerns outweigh the many benefits of cloud computing? If so, you’re not alone. From a security perspective, moving IT applications and data to the cloud could introduce new risks. Yet with careful planning, you can enjoy all the benefits of the cloud while still securing your organization’s most important data and applications.

How? Mainly, by examining an application’s risk profile before you move it to the cloud. Let’s say you have determined that for a given application data protection is not a major issue. Such an application is well suited for the public cloud. But now imagine that you have determined that an application’s risk profile is high – meaning it needs data governance, high levels of privacy and compliance, business continuity or frequent backups. In this case, a private cloud with gold or platinum service would most likely be your best choice.

Reliability is another concern, and here again, important work needs to be done before you move to the cloud. In fact, I recommend that you treat moving to the cloud exactly as you would any other implementation: Start with your normal preparation for project management, including evaluations, life-cycle planning and interaction with key decision makers. Then follow your regular risk-management rules.

Worried about industrial espionage and IP control in the cloud? Then determine which of your data sets and applications contain business-sensitive data, and simply keep them off the public cloud. Also, empower your developers to work safely on sensitive materials by providing them with an environment in which they can securely exchange information and design products. Similarly, limit all research and development work to a highly secure environment, preferably one within the protected confines of your data center. A private cloud in your data center is a good choice in this case.

Cloud computing can be safe and secure, but only if you have the right provider, technology and process solutions. By creating and maintaining a culture of security, you can enjoy the cloud’s many benefits — and reduce your worries!