Menu
​INSIGHT: Top 3 security layers to protect cloud data

​INSIGHT: Top 3 security layers to protect cloud data

"Once data about your company and workforce is in the cloud, it is important to take steps to ensure it is secure."

While cloud infrastructure can save time and money, organisations must be vigilant about keeping private data secure, especially if they use human resources management systems in the cloud.

Because HR systems use and store such sensitive information, they can provide a fertile hunting ground for malicious attackers.

This is becoming a more serious issue as almost half (40 per cent) of companies now use HR software delivered ‘as-a-service’ via the cloud instead of traditional software.

The benefits include faster deployments than traditional hosting methods, access anytime from anywhere, and continual software updates.

“Workforce management technology can free up enormous amounts of time and money from human resources departments,” says James Kissell, marketing director at WFS: A WorkForce Software Company.

“When it is delivered as a cloud-based service, it can also reduce organisational overheads relating to hosting and IT maintenance, so it can save a business even more time and money.

“However, once data about your company and workforce is in the cloud, it is important to take steps to ensure it is secure.

“If a breach were to publicly expose such data, it could result in hefty fines in addition to negative public scrutiny and security issues.”

Kissell recommends companies implement three layers of security to safeguard sensitive workforce data in the cloud:

1. Physical safeguards

The first layer of security is physical. This includes considerations such as where data is stored and how it is protected from intrusion, natural disasters, and climate-related risks.

It also includes strict access protocols to the data centre where their cloud-deployed infrastructure resides. Furthermore, it is important to have robust backup and redundancy safeguards in place to avoid data loss.

2. Technical safeguards

Technical solutions can help protect companies from cyber attacks, network fidelity issues, connectivity issues, and downtime, among many other unforeseen failures or threats.

These safeguards can include firewall, monitoring, and threat detection platforms, while stringent network access control systems can help prevent unauthorised access to cloud-based systems and data.

Additionally, data encryption is an important tool in keeping data secure while being sent to or from the server, and third-party penetration testing can help keep an eye out for unknown vulnerabilities.

Backup and redundancy mechanisms are vital. If a server fails, backups let the company get systems back online without losing data, while redundancy can help keep cloud-based applications and systems operational if an outage occurs.

3. Administrative safeguards

Administrative safeguards include background checks, testing, limited access permissions, and extensive training.

These measures, among others, can help keep data safe, along with security staff, a regular backup regime, and separate database schemas for internal and external data access.

Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Tags dataWFSCloudsecuritybig data

Slideshows

IN PICTURES: Ingram Micro Innovation hits Auckland with Hewlett Packard Enterprise

IN PICTURES: Ingram Micro Innovation hits Auckland with Hewlett Packard Enterprise

Ingram Micro completed its nationwide roadshow in Auckland last month, kicking off its Innovation Hour series with Hewlett Packard Enterprise. Uncovering the latest in storage, networking and servers, the event outlined key market trends for resellers in 2016 and beyond.

IN PICTURES: Ingram Micro Innovation hits Auckland with Hewlett Packard Enterprise
IN PICTURES: FireEye celebrates channel at 2016 Partner Conference

IN PICTURES: FireEye celebrates channel at 2016 Partner Conference

FireEye welcomed 143 channel partners and distributors to FireEye's 2016 annual Partner Conference, FireEye A/NZ Momentum - held at Establishment in Sydney. Delegates heard from senior trans-Tasman channel leaders, marketing and the product divisions in the morning, with FireEye customers, incident responders and threat intelligence analysts sharing knowledge during the afternoon.

IN PICTURES: FireEye celebrates channel at 2016 Partner Conference
​IN PICTURES: Disruption in the data centre - Can the Kiwi channel capitalise?​

​IN PICTURES: Disruption in the data centre - Can the Kiwi channel capitalise?​

With New Zealand businesses now open to innovation, the industry sits on the cusp of significant disruption in the data centre. Driven by software-defined networking, the future of the data centre is fast becoming reality, as the channel seeks to keep up, keep innovating and keep growing. APC by Schneider Electric, Lenovo and key partners outlined how the channel can capitalise at The Grill restaurant in Auckland.

​IN PICTURES: Disruption in the data centre - Can the Kiwi channel capitalise?​
Show Comments