Menu
The dangers of cloud computing

The dangers of cloud computing

On-demand apps and services have several security risks that IT should address up front

The idea of cloud computing -- designed around an architecture whose natural state is a shared pool outside the enterprise -- has gained momentum in recent months as a way to reduce cost and improve IT flexibility. But the use of cloud computing also carries with it security risks, including perils related to compliance, availability, and data integrity.

Yet many companies don't think through those risks upfront. For example, having proper failover technology in place is a component of securing the cloud that is often overlooked, notes Josh Greenbaum, principal at Enterprise Applications Consulting. Yet these same companies make sure they have failover for established services, like electricity. "If you look around, go to any major facility, what is sitting in a box outside is an alternative power supply. They don't rely on just the grid," says Greenbaum. He argues that cloud computing should be no different.

In some cases, the risk is too great to rely on the cloud. And where the decision is made to put some services and applications in the cloud, the business must ask how that risk should be managed.

David Cearley, a vice president and fellow at Gartner, says placing limits on the use of cloud technology is a subtle issue that companies have to examine closely, measuring the risk against when and where cloud computing can be effective. For example, by giving up some control over the data, companies get in exchange cost economies. IT, along with other C-level executives, must decide if that trade-off is worthwhile. Cearley says that everything will eventually be available as a cloud service -- but at any individual business, not everything will be accessed from the cloud.

"In a shared pool outside the enterprise, you don't have any knowledge or control of where the resources run. So if you have a concern over data location, as an example, that may be a reason for not using it," Cearley says.

Security standardization has not come to the cloud

There is a huge body of standards, including services like SAS Interaction Management, for example, that apply for IT security and compliance, governing most business interactions that will, over time, have to be translated to the cloud, notes consultant Greenbaum.

But in the meantime, until security models and standards emerge for cloud computing architecture, most of the risk and blame if something goes wrong will fall directly on the shoulders of IT -- and not on the cloud computing service providers. "The Salesforce.coms and NetSuites of the world don't offer the kind of governance, risk, and compliance [mechanisms] mandated by regulatory regimes," Greenbaum says.


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Featured

Slideshows

EDGE 2019: Channel forges new partnerships during evening networking

EDGE 2019: Channel forges new partnerships during evening networking

Partners, vendors and distributors reconnected during a number of social gatherings during EDGE 2019. The first evening saw the channel congregate for a welcome party at the Hamilton Island yacht club, while the main poolside proved to be the perfect stop for a barbecue on the final night.

EDGE 2019: Channel forges new partnerships during evening networking
EDGE 2019: Thought leaders share how to build a channel of the future

EDGE 2019: Thought leaders share how to build a channel of the future

Day 2 of EDGE was opened by in-depth research from TRA's Tim Dillon, which outlined the partner view on the channel's future. The following day saw Forrester's Jay McBain and Odgers Berndtson's Tim Sleep conclude the keynote line-up, while HPE and Cisco rounded off the thought leadership.

EDGE 2019: Thought leaders share how to build a channel of the future
Show Comments