Applying Security to Your Cloud Computing

If you’re serious about security, all the tools you need are readily available.

When talking about the benefits of cloud computing, the questions I hear most are those concerning cloud security. Is the cloud a safe place to store and interact with sensitive data? Should I be worried about hackers?

These questions are entirely fair.

Users can take some comfort in knowing that all of the major cloud computing service providers such as IBM, Microsoft, Amazon, Apple, and others, are constantly testing and updating their security protocols and defenses. That said, given the vast amount of data being stored and accessed on the cloud, it would be naive not to assume they are a tempting target for cybercriminals despite the numerous protective measures in place.

Yes, no system is indeed perfect, there are, nonetheless, reliable steps you can take to make your cloud usage as secure as possible.

Identity Management and Best Password Practices

The best way to add a measure of security to your cloud computing is by starting with effective password protocols. If you’re serious about security, you have to be serious about this. It’s recommended to, at the very least, apply a two-step authentication process in which a user can only access the cloud after successfully entering both a password and an additional verifier such as a randomly presented code or secret question only the user would know the answer to.

Whether through carelessness or possibly animosity, an employee will occasionally share their login information with someone else and put your company in danger. To keep occurrences like these to a minimum, hold regular audit sessions and go over what employees are currently listed as having authorized access. Update those lists following this audit and make sure to delete accounts that should no longer be active. Also, notify your employees that you require regular, non-repeating password changes. Once a year is often fine. Twice a year is better. Four times a year is best. If your cloud service gives you tools for administrative oversight, take note of any unusual or unexpected activity — especially during non-business hours.

Firewalls and Encryption Are Your Best Friends

Just because many cloud service providers already incorporate encryption into their process doesn’t mean you can’t insert an additional level of security by using encryption on your end when accessing your cloud. Several commercially available encryption tools exist that can be installed fairly easily and be maintained a minimum of effort. If your business is subject to regulatory compliance requirements such as HIPAA, FISMA, or PCI-DSS, you are already obligated to employ encryption. Integrating it into your cloud usage is a simple way to make sure you’re doing all you can to keep sensitive data safe.

Don’t be shy about placing a robust firewall between your users and your cloud connection. This way you can be certain that only authorized connections are making their way through your network to the cloud. You can install virtual firewall software to supplement your physical firewall hardware. Look for virtual firewall software that bills itself as Firewall-as-a-Service (FWaaS). This will allow you to control access, employ URL filtering, engage malware detection, and run network forensics.

Choosing your cloud

When deciding on a cloud service provider, consider the following questions:

• What security measures do they already employ?
• What areas are they working on to improve?
• Do they monitor usage for unusual activity, potential viruses, or suspicious data?
• What tools do they offer to further up your security game?

A good cloud service provider should also allow you to control user access. You want to be in charge of who can or cannot access your data or cloud-based apps. Check service reviews of your provider choices to see where their reputation for security and reliability stand. No system is going to be perfect, but some will be better than others when it comes to meeting your requirements.

You don’t have to be an expert on cloud computing and all its options, but you would be wise to consult with those who may have more knowledge on the subject such as members of your IT team or a managed service provider — if you have one. IT professionals are more likely to be current on cloud technology news and their opinions could be useful in determining which way to go.

Cloud security starts with you

When it comes to keeping on top of cloud security, cloud computing service providers are constantly on the job. You can do your part by ensuring that you are employing all of the best practices available. The majority of security strategies are fairly straightforward and inexpensive — especially when you compare them to the cost and hassle of a data breach.

Just remember… common sense and simple precautions both go a long way in helping to keep your important business data safe.

Thank you for reading. I’d love to share more with you via my Weekly Word Roundup newsletter sent to subscribers every Sunday. It will feature news, productivity tips, life hacks, and links to top stories making the rounds on the Internet. You can unsubscribe at any time.