Data Security in the Cloud: Who’s Responsible & How Does It Happen?
Grazed from Windows IT Pro. Author: K.B. Winstead.
Does your company use a cloud service to store sensitive or confidential data? If so, where does the responsibility lie for keeping that data secure? These are a couple of the questions addressed in a new study released by Thales e-Security. The study, titled "Encryption in the Cloud," also focused on data encryption with cloud solutions and where such encryption is applied.
One of the big surprises in the survey data comes from how many companies are using the cloud for sensitive or confidential data: nearly half, 49 percent, of respondents do so currently, and another third said their companies likely would do so within the next two years. With that amount of sensitive corporate data going to the cloud, data security must be a primary concern — or so you might think.
Another section of the survey, which was conducted by the Ponemon Institute, looked at where companies felt the responsibility fell for keeping safe that data they were sending to the cloud. Here, 44 percent of respondents said they felt the primary responsibility for data security was with the cloud provider, while only 30 percent thought primary responsibility was with the data owner (i.e., the company that’s sending sensitive data to the cloud). Another 24 percent thought there should be a shared responsibility…

