The Lighter Side Of The Cloud – Obscurity
The Lighter Side Of The Cloud – Accessories
The Lighter Side Of The Cloud – Cloud Ready

Are Cloud Computing Service Providers Shirking Responsibility On Security?

Are Cloud Computing Service Providers Shirking Responsibility On Security?

Former American President Harry S. Truman famously had a sign on his desk at the Oval Office with the phrase, “The Buck Stops Here!” It signified that it was the President who had to make the hard decisions and bear responsibility for them; he could not pass it on to someone else, being at the head of command. Unfortunately, it seems that cloud computing service providers believe in a completely different ideology.

For them, it’s passing the buck that has become an established norm, especially regarding security. While the recent outage at Amazon has seriously undermined cloud computing’s claims of reliability (See: Lessons from the Amazon Cloud Outage) and a Greenpeace report questioning the technology’s environment-friendliness (See: Environmental Challenges to Cloud Computing), several of cloud computing’s perceived advantages (See: Which Cloud Computing Quality Works For You? ) are under serious threat.

Now, a new report that says that most cloud computing providers don’t see securing customer data as their primary responsibility but seek to “pass the buck” to customers themselves may end up vilifying cloud computing further. Especially since in almost every survey conducted to measure the adoption of cloud computing, security has always been the prime concern holding back wider acceptance (See: UK Lags Behind Other European Nations in Adoption of Cloud Computing).

According to the Ponemon Institute’s “Security of Cloud Computing Providers Study” commissioned by enterprise software vendor CA, most cloud computing service providers paid more importance to cost reductions and rapid deployments than to security. The survey was conducted amongst 127 providers, 103 from the US and the rest from Europe. 65% of the respondents were public cloud providers, while the rest worked on private and hybrid clouds (See: Having The Best Of Both Worlds With Hybrid Clouds and Which is the Safer Cloud – Public or Private? ).

According to the survey responses from managers, director and technical staff for the service providers, more than 50% “do not consider cloud computing security as one of their most important responsibilities and do not believe their products or services substantially protect and secure confidential or sensitive information.” Private cloud providers were found to be more sensitive to security concerns than their hybrid cloud counterparts.

What’s more alarming is their nonchalance on the matter, in spite of awareness of their deficiencies. Over 60% of the respondents expressed lack of confidence in the security of their own services.  In fact, 91% said they don’t provide security-as-a-service from the cloud today, but about one third are considering doing that in the next two years.

If the risk of breach outweighs potential cost savings and agility, we may reach a point of cloud stall, where cloud adoption slows or stops, until organizations believe cloud security is as good as or better than enterprise security,” warned Mike Denning, CA Technologies general manager for security. Matthew Gardiner, CA Technologies director of security, struck a conciliatory note, saying that providers were merely responding to greater demand for cost reduction as compared to security. However, many other surveys offer a contrary opinion.

One of these is the one conducted by the same people who did this survey. According to that survey conducted among cloud computing users as compared to the current one where service providers were the respondents, there is considerable difference of opinion between these two stakeholders. Nearly 70% of users said vendors were most responsible for ensuring the security of cloud resources, whereas only 32% of the current respondents held themselves accountable. The authors of the study recognize this discrepancy and state that “different perceptions about who is responsible for securing the cloud means organizations may be over relying on their cloud vendors to ensure safe cloud computing.”

While there is no denying the cost reductions cloud computing can bring (See: How Cloud Computing Can Save You Money), I believe that service providers are being extremely short-sighted by discounting the importance of security. Even if clients do not explicitly stress on security, something many surveys contradict, the providers should consider the long-term implications of this approach. For example, security breaches can end up costing more money than can be saved in the short term.

Therefore, service providers should not neglect the security aspects of their services. We live in a world under constant threat of cyber-terrorism; it’s in everybody’s interest to take active steps to combat it.

By Sourya Biswas

sourya

Sourya Biswas is a former risk analyst who has worked with several financial organizations of international repute, besides being a freelance journalist with several articles published online. After 6 years of work, he has decided to pursue further studies at the University of Notre Dame, where he has completed his MBA. He holds a Bachelors in Engineering from the Indian Institute of Information Technology. He is also a member of high-IQ organizations Mensa and Triple Nine Society and has been a prolific writer to CloudTweaks over the years... http://www.cloudtweaks.com/author/sourya/

Sorry, comments are closed for this post.

Popular

Using Big Data To Make Cities Smarter

Using Big Data To Make Cities Smarter

Using Big Data To Make Cities Smarter The city of the future is impeccably documented. Sensors are used to measure air quality, traffic patterns, and crowd movement. Emerging neighborhoods are quickly recognized, public safety threats are found via social networks, and emergencies are dealt with quicklier. Crowdsourcing reduces commuting times, provides people with better transportation…

Cloud-Based VOIP – 4 Alternatives To Skype

Cloud-Based VOIP – 4 Alternatives To Skype

Cloud-Based VOIP – 4 Alternatives To Skype Skype is the most popular cloud-based VOIP service. Since being bought out by Microsoft for $8.5 billion in 2011 the company has grown to more than 300 million users and now accounts for 34% of all international calls. Some people don’t want to use Skype though. Reports of…

Cloud Infographic – The Future Of Big Data

Cloud Infographic – The Future Of Big Data

The Future Of Big Data Big Data is BIG business and will continue to be one of the more predominant areas of focus in the coming years from small startups to large scale corporations. We’ve already covered on CloudTweaks how Big Data can be utilized in a number of interesting ways from preventing world hunger to helping teams win…

Three Factors for Choosing Your Long-term Cloud Strategy

Three Factors for Choosing Your Long-term Cloud Strategy

Choosing Your Long-term Cloud Strategy A few weeks ago I visited the global headquarters of a large multi-national company to discuss cloud strategy with the CIO. I arrived 30 minutes early and took a tour of the area where the marketing team showcased their award winning brands. I was impressed by the digital marketing strategy…

Surprising Facts and Stats About The Big Data Industry

Surprising Facts and Stats About The Big Data Industry

Facts and Stats About The Big Data Industry If you start talking about big data to someone who is not in the industry, they immediately conjure up images of giant warehouses full of servers, staff poring over page after page of numbers and statistics, and some big brother-esque official sat in a huge government building…

Recent

The Importance Of Cloud Security For Wearable Technology

The Importance Of Cloud Security For Wearable Technology

Wearable Technology Starts With Cloud Security The integration of wearable technology into our society is all but inevitable. Today, major players in the wearable tech field include Google, Fitbit, Boston Scientific and Apple. As users continue to demand ever increasing availability and functionality from their devices, so do security concerns for wearable tech. The future…

Customer Success Guidelines – In A World Gone Cloud

Customer Success Guidelines – In A World Gone Cloud

Customer Success Guidelines for Maximum Upselling and Cross-Selling in a World Gone Cloud With the growth of the subscription economy, companies can no longer assume that a sale means that the deal is closed. Companies need to prove their worth every minute of every hour, every hour of every day and so on. A big…

Why You Should Be Concerned About Drone Security

Why You Should Be Concerned About Drone Security

Why You Should Be Concerned About Drone Security Over the past decade, drones, also known as UAVs (unmanned aerial vehicles), have become a fact of life. Beginning as underpublicized but extremely effective items in the U.S. military’s arsenal, drones have since come into wide use by government agencies for everything from geographic surveys to law…

Contact Us

Sending
cisco_logo_100x100 vmware citrix100
Site 24x7 200px-KPMG


Contributor Spotlight

Established in 2009, CloudTweaks is recognized as one of the leading influencers in cloud computing, big data and internet of things (IoT) information. Our goal is to continue to build our growing information portal, by providing the best in-depth articles, interviews, event listings, whitepapers, infographics and much more.

Branded Content Programs

Advertising