Securing Data in the Cloud
When it comes to data security and cloud computing, many companies indulge in magical thinking: They envision the cloud as a single type of computing platform guarded by service providers that secure the data and think through the tough issues. In fact, while cloud computing may reduce costs, it introduces new layers of complexity that must be managed by your company’s IT, legal and executive personnel.
The reality is that cloud computing presents a spectrum of choices. At one extreme is limited outsourcing, in which the company retains responsibility for most computer security, including configuring server operating systems and the data center firewall—but not the physical security of the cloud data center itself. In this scenario, your IT department must secure all applications and databases, oversee security patch management, and be prepared for all forms of cyberattack and incident responses…

