Menu
The dangers of cloud computing

The dangers of cloud computing

On-demand apps and services have several security risks that IT should address up front

The idea of cloud computing -- designed around an architecture whose natural state is a shared pool outside the enterprise -- has gained momentum in recent months as a way to reduce cost and improve IT flexibility. But the use of cloud computing also carries with it security risks, including perils related to compliance, availability, and data integrity.

Yet many companies don't think through those risks upfront. For example, having proper failover technology in place is a component of securing the cloud that is often overlooked, notes Josh Greenbaum, principal at Enterprise Applications Consulting. Yet these same companies make sure they have failover for established services, like electricity. "If you look around, go to any major facility, what is sitting in a box outside is an alternative power supply. They don't rely on just the grid," says Greenbaum. He argues that cloud computing should be no different.

In some cases, the risk is too great to rely on the cloud. And where the decision is made to put some services and applications in the cloud, the business must ask how that risk should be managed.

David Cearley, a vice president and fellow at Gartner, says placing limits on the use of cloud technology is a subtle issue that companies have to examine closely, measuring the risk against when and where cloud computing can be effective. For example, by giving up some control over the data, companies get in exchange cost economies. IT, along with other C-level executives, must decide if that trade-off is worthwhile. Cearley says that everything will eventually be available as a cloud service -- but at any individual business, not everything will be accessed from the cloud.

"In a shared pool outside the enterprise, you don't have any knowledge or control of where the resources run. So if you have a concern over data location, as an example, that may be a reason for not using it," Cearley says.

Security standardization has not come to the cloud

There is a huge body of standards, including services like SAS Interaction Management, for example, that apply for IT security and compliance, governing most business interactions that will, over time, have to be translated to the cloud, notes consultant Greenbaum.

But in the meantime, until security models and standards emerge for cloud computing architecture, most of the risk and blame if something goes wrong will fall directly on the shoulders of IT -- and not on the cloud computing service providers. "The Salesforce.coms and NetSuites of the world don't offer the kind of governance, risk, and compliance [mechanisms] mandated by regulatory regimes," Greenbaum says.


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Featured

Slideshows

Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners

Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners

More than 500 channel leaders gathered in Auckland on 21 October at the ​Reseller News Innovation Awards ​2020 to celebrate the achievements of the New Zealand technology industry's top partners, start-ups, vendors, distributors and individuals.

Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners
Meet the winners of the 2020 Reseller News Innovation Awards

Meet the winners of the 2020 Reseller News Innovation Awards

Reseller News honoured the standout players of the New Zealand channel in front of more than 500 technology leaders in Auckland on 21 October, recognising the achievements of top partners, start-ups, vendors, distributors and individuals.

Meet the winners of the 2020 Reseller News Innovation Awards
Meet the Reseller News 30 Under 30 Tech Awards 2020 winners

Meet the Reseller News 30 Under 30 Tech Awards 2020 winners

This year’s Reseller News 30 Under 30 Tech Awards were held as an integral part of the first entirely virtual Emerging Leaders​ forum, an annual event dedicated to identifying, educating and showcasing the New Zealand technology market’s rising stars. The 30 Under 30 Tech Awards 2020 recognised the outstanding achievements and business excellence of 30 talented individuals​, across both young leaders and those just starting out. In this slideshow, Reseller News honours this year's winners and captures their thoughts about how their ideas of leadership have changed over time.​

Meet the Reseller News 30 Under 30 Tech Awards 2020 winners
Show Comments