The most popular and comprehensive Open Source ECM platform
Cloud Computing Security: Is it getting Better or Worse?
Perhaps the biggest concerns voiced about Cloud Computing is the worry about the security of data managed by the exposure of the cloud servers to the internet. With daily headlines of data breaches occurring, there is obviously a need to be concerned and cautious about cloud security.
How good is cloud security really today? A study from the Ponemon Institute (sponsored by CA) tried to answer that question, or at least to determine if we are making any progress. The group surveyed cloud IT professionals in 2010 and again in 2012 about their attitudes and practices towards implementing secure cloud solutions. While there has been some improvement over those two years, still only about half of those questioned have implemented their cloud solutions using best practices, and only about one half are confident that they know all the cloud services that are available in their organization and what business data those services are exposing.
Mike Denning, general manager of Security at CA Technologies, said that “cloud computing is still one of the most disruptive and promising trends of the past decade, our study shows that cloud security struggles to get past a grade of 50 percent when it comes to best practices, including the percentage of organizations that say they engage their security teams in determining the use of cloud services. We believe that organizations can do better and gain the benefits of cloud computing by reducing risk and achieving that desired balance of protection and business enablement.”
Dr. Larry Ponemon, chairman and founder, Ponemon Institute, said that “What we found in 2010 in general was that security is not the priority in the cloud universe… What we found in 2012 were small improvements, but consistently so in every one of our attributions.”
Andrew Jaquith, CTO of SilverSky, told DarkReading that “Moving to the cloud should be career-defining, not career-limiting… When CIOs and security decision-makers move their critical workloads to the cloud, they seek providers that cut their costs, simplify their architectures and protect their data. But equally important, they are making a leap of faith by entrusting services they can’t do without to someone they don’t know.”













