10 Tips For Data Protection And Data Security In The Cloud

Security issues are still the biggest obstacle when it comes to using cloud technologies. These are the results of the Cloud Monitor 2016, a study by Bitkom Research on behalf of KPMG.

When migrating to the cloud, data security and data protection go far beyond purely technical measures such as backup and ensuring availability.

Above all, good planning and careful assessment of the various service providers in advance prepare a good starting point for a secure migration to the cloud. Florian van Keulen, Principal Consultant Cloud & Security at IT service provider Trivadis has compiled the ten most important tips for data protection and data security in the cloud:

1. Make preliminary considerations

There are different reasons to go to the cloud. To do this safely, basic preliminary considerations are essential. A company should therefore be clear in advance of what it wants to do in the cloud. Most of the time there are two possible scenarios, for which different follow-up considerations follow. If it is a matter of modernizing or outsourcing existing systems, you have to take a close look at them, because a 1: 1 move of IT to the cloud usually makes little sense: Are the systems and applications cloud-compatible? Are there dependencies on other applications or systems? Which applications have to be newly developed? In the second scenario, a new service, business process or new functionality for the company is to be introduced in the cloud.In order to be able to put this on securely, it is important to know the business case behind it and to examine the security policy questions step by step.

2. Observe compliance and legal requirements

Especially when the IT systems are operated in the cloud, it is extremely important to know which guidelines have to be followed. Compliance means the observance of internal, legal and contractual regulations as well as industry and branch requirements. For example, company policies could prohibit certain data from being held and processed abroad. Legal requirements primarily concern data protection. It is important to remember that a new EU General Data Protection Regulation will come into force in 2018. These regulations should already be included in new projects. Existing contracts must of course also be taken into account. Under certain circumstances, customer data may not leave the company or the EU. There are also industry requirements,such as in the financial area PCI DSS or in the healthcare sector HIPAA.

Content of the article:

• Page 1: 10 tips for data protection and data security in the cloud
• Page 2: Choose your provider wisely
• Page 3: Don't neglect backup, archives and availabilities

> Next page