Cloud Security: Whose Responsibility Is It? Part 1

The benefits of storing information in the cloud are numerous. Backing up important data, creating more space on your servers, and having your data easily available to your employees are only a few. If you have been looking into this route, you almost certainly have many questions about the security of the cloud. If your company deals with sensitive information that belongs to your clients you may need to stay compliant with HIPAA, PCI or Sarbanes-Oxley regulations.

It can be challenging to tell if your cloud storage solution adheres to these requirements, as many don’t state in their privacy policies. To help you navigate these difficult waters, let’s consider this topic in more detail below.

Compliance

More and more companies are turning to the cloud for storage. For obvious reasons, it is a very cost effective way to go. However, improper handling of your client’s information can harm your reputation and lead to a loss of business for your company. If your company mandates that client data be handled in a controlled way, you must first learn how secure the cloud service is and what regulations does the cloud service providers comply with. If a company has not specifically said they comply with certain policies, it’s safe to assume they do not.

Who is responsible

Who’s shoulders does the responsibility fall on? There is no law requiring that cloud service providers reveal the degree of security they maintain. While they probably do have a decent amount of safety protocols in place, the safest option is to take their privacy policy at face value. In this case, if you wish to stay in compliance with HIPAA, PCI or Sarbanes-Oxley, cloud computing may not be for you. Having said that, if your industry doesn’t require tight regulations, then you might take advantage of the benefits cloud-computing offers. 

In the end, as cloud computing service providers are not required by law to be transparent regarding their security, the responsibility rests in your hands. If you choose to use the cloud, it’s your responsibility to choose a service provider you trust. Weigh the advantages and disadvantages and make the best decision for your business.