Cloud security? Better get a lawyer, son!

Summary:Moving your data into the cloud creates a raft of security challenges, but, according to information security specialists, those challenges are less about hackers and more about data availability and signing the right contracts.

Table of Contents
  1. Raising the stakes

    When data is resides in a company's own datacentre, the onus on protecting that data from outage or breach falls upon that company. Cloud turns that on its head.

  2. What to look for

    Customers need assurance from their supplier that it can maintain the three pillars of security: confidentiality, data integrity and data availability.

  3. Who's responsible?

    A lot of cloud security is about contract management, something that has traditionally been handled by a company's purchasing and legal teams.

  4. Crossing boundaries

    Hosting your cloud services on Amazon's servers might make for high availability and redundancy, but that very redundancy can be a problem.

  1. Keeping the bastards honest

    Contracts are all well and good, but how do you know whether the cloud services are actually being provided as the contract specifies?

  2. The sharks are circling

    The increase of the amount of linked data which is held in the same cloud sanctum makes a fatter target at which hackers can aim.

Topics: Cloud, Big Data, Data Management, Hardware, Security, Servers, Virtualization


Stilgherrian is a freelance journalist, commentator and podcaster interested in big-picture internet issues, especially security, cybercrime and hoovering up bulldust. He studied computing science and linguistics before a wide-ranging media career and a stint at running an IT business. He can write iptables firewall rules, set a rabbit tr... Full Bio

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

The best of ZDNet, delivered

You have been successfully signed up. To sign up for more newsletters or to manage your account, visit the Newsletter Subscription Center.
Subscription failed.