Cloud Security: Not an Oxymoron
Grazed from Sys Con Media. Author: Tom Decoe.
Some businesses today are nervous about moving to cloud-delivered technology because it means allowing their system data to reside somewhere other than their own data center. For some, this can be a tough concept to grasp, especially for those who have spent 25 years or more hosting their company’s systems and data. But cloud computing providers could not exist without implementing strong security controls for their customers’ information. The reality is that leading cloud solutions include security features well beyond what most manufacturing companies can afford to implement on their own. In this article readers will learn about some realities of the security practices at leading cloud providers and the questions that should be asked by those considering use of a cloud solution.
Does the cloud solution have a risk assessment process that addresses risks to information assets?
The starting point of an effective security process is the identification of the information security risks for the cloud provider. Risk assessments are performed to identify the various sources of information and how the information might be breached. There are a number of different risk assessment models that exist and cloud service providers should have a process to identify information risks. After identifying risks, the company can then develop controls to mitigate those risks…

