Your Data In The Cloud

How secure is your data when it is in the Cloud? The emphasis is on the words 'your data' and it is your responsibility to ensure that whichever service you are using, you treat it as if your data is stored on your own on-site server ...

Microsoft, Amazon and Google are just like car manufacturers. Once you buy a car, it is your responsibility to make sure you have it serviced regularly, change the brake pads and discs when required, and ensure the oil and water are topped up and the tyre pressures checked before a long journey.

In terms of your cloud storage and shared workspace, make sure user access and passwords are prioritised to the right people in your organisation and that the correct permissions are set for the different levels of access required within your organisation!

There are people springing up everywhere to scare monger businesses with the all-encompassing four-letter acronym that is GDPR. The regulation about losing your customer's data by way of either someone hacking your database and holding you to ransom or a disgruntled employee leaking the data into the public domain are actually real-world threats and this is when the Information Commissioners Office (ICO) will investigate and no doubt hit you with a hefty fine.

There are some companies who have their own servers, but store them off-site and access the data via an internet connection. In one respect, these companies have made their own cloud service.

As touched on briefly, granting the correct levels of permissions, access rights and security levels in any of the off-site services is a must. Did you know that you also need to make a copy and back up your database and documents, to a third-party site even if you are using any of the services as previously mentioned?

You are going to ask me why? It is because of the fact that hackers are now targeting the data centres as much as your individual company servers due to the fact that more data is in the cloud than ever before.

I can tell you of cases where an entire customer database on AWS was held to ransom because the particular company 'silo' had an inadequate password and literally millions of records were encrypted by the hacker until paid in full ...

"And it was paid in Bitcoin!"

Your IT professionals now need to be fully qualified in on-site and off-site security and although you will have to spend money in bolstering your defences, make sure you get at least three opinions and prices and also an independent review and penetration test done on all your networks.

Some hackers look for ways into your system and then back out to your off-site data storage sites through bookmarks and saved passwords or by phishing emails.

If you're worried about your data in the cloud, then do get in touch.


If you feel inspired to find out more then do call me on 07555 807700 or leave a comment below and I'll be in touch as soon as I can.