Friday, February 24, 2012

Cloud Security - Good or Not?

There is a debate going on these days about the question of whether placing systems in the cloud is good for security or not. On the one hand, the argument goes, cloud providers usually have good security in place, and that security should translate into better security for the company. On the other hand, if the company is running its own security, there could be a chance that the security will be more suitable to the company and more likely to cover off the risks it faces.

The debate referenced to this article addresses this issue. In the end, the point is made that no matter whether the security is in the cloud or not, the company must be responsible for its own security. Many of the security functions, such as maintaining id's and passwords and monitoring activity are functions that cannot be outsourced, and therefore the company must take responsibility for them. And it is these very functions that are core to the security system and that largely determine whether it is effective or not.

No comments: