8 ways cloud providers save you money


After completing my blog on how you would move to the cloud I started thinking about some compelling reasons to adopt cloud computing. Here are 8 immediate cost benefits moving to the cloud for a start-ups or small or mid-sized company. 


1. Established ISMS
Information Security Management System:  Many companies talk about setting up an ISO27002 based ISMS but struggle. That’s because it take lots of people resources, and money. The major cloud providers have this already built out, and tested. 
2. Gates, fortified walls, guards, fences
Facility Security:  Cloud providers help restrict access by role, and by granting access to small sets of trusted staff members. Most cloud providers have well established facility security including gates, fences, guards, lighting, and many other security measures.
3. Tested backup and recovery solutions
Data Retention Policy:  Cloud providers should have a plan for data retention and storage that includes redundancy can ensure shorter down-time in case of an incident. Cloud providers typically maintain a data backup and recovery framework that is consistent with industry practices. 
4. Established data destruction methods  
Secure Data Disposal:  All disposed media needs to be truly disposed of.  Hard disk drives should be wiped securely or physically destroyed.  Documents must be shredded.  Most cloud providers subject all stored data to strong disposal policies. 
5. Invest in understanding threats
Risk Assessment and Management:  Cloud providers can centrally manage risk with the “plan, do, check, act" (PDCA) approach.  These four pillars are:  Plan for bad events; Do verify the plan; Check back sometimes; Act when things go bad with your plan.
6. Plan for natural disasters
Resilience Management:  Cloud providers must have a disaster recovery plan in place so operations can continue running when an incident occurs.  Most cloud providers have plans in place that assign responsibilities, define objectives; delineate information, and provide training.
7. Means to handle an online rush (or high load)  
Capacity / Resource Planning: Cloud providers can effectively plan capacity and resources around your business fluctuations to keep things running smoothly.
8. Protect against worms, DDOS, and other malware attacks
Information Security protections:  Cloud providers are aware of the threat landscape, and provide protections against DDOS, Worms, and malware in general.


Does your cloud providers stack up?
Interested in following up to see if your provider can address these issues? If so I’d recommend taking a look at the  Cloud Security Alliance’s Security, Trust & Assurance Registry (STAR) registry which hosts almost 100 companies answers to these and many more pertinent questions for moving to the cloud.


UPDATE:
This week I will be presenting at SecureWorldExpo in Seattle.

Moving to the Cloud: How to Be Secure on the 12th at 3:00 PM

Interested in the show take a look at my discount codes.

Comments

Post a Comment

Popular posts from this blog

2020 predictions

Image
2020 is coming upon us, and it's time to reflect on my 2019 predictions I made, and look forward to this coming year with another technology prediction. So let's get started - first off - a lookback to see  progress in the areas I outlined, possibly no earth shattering results, but progress.  2019 retrospective - New UX - probably not as much evolution as I would have wanted to see in this area. For now, we use windows, android, IOS, and it's pretty much the same UX as it's been for a while. IoT the simple assistant - IoT continues to be the hot area of growth. I consider this more evolution than revolution. As we see IoT based technology being embedded into more and more devices. Cloud growth advances in   astonishing speeds - This past year all three cloud providers made strides in the cloud worth noticing.  AWS entered the quantum computing market with Bracket, introduced an in-house...
Read more

Secure workstation - Root of trust to manage the cloud

Image
Two months ago I introduced the Azure secure workstation, and I’ve had the privilege to present the ideal to some great audiences. From the discussions, a common question I’ve been asked is a pattern that would provide the Secured PAW model lock down scenario to exclusively manage an Azure Portal (EG how to I assure only secured workstation, and users assigned to the program can manage my cloud services)? In this article I’ll provide the NEXT step to accomplish exactly that outcome. This includes additional configurations that I only lightly covered, or net new technology to apply since the publishing of the doc. Proposed outcome “ How do I” Use a Secured workstation (that I can trust) to manage my Azure cloud. Here’s how I would deploy the solution. First I will start by deploying the Secured Workstation model this using the secured profile. New technology, and capabilities to add: Hardware root of trust – in our solution we post the idea that you can...
Read more

What is the Security Threat Landscape in 2024?

Image
 I was working up a question that I thought would make a great blog. the question is in 2024 what is the the security threats landscape? Here's the key take aways that I considered. Proactive Mindset : Today’s threat landscape demands a proactive mindset. Organizations are moving away from reactive security measures and are instead focusing on identifying potential intrusion points and actors before an incident occurs . Cyber Threats evolving : Cyber threats are leveraging AI, exploiting vulnerabilities in mobile and cloud platforms, and targeting data breaches. The rise of connected cars has led to concerns about automotive hacking. Ransomware attacks have become more sophisticated, causing significant damage to organizations. The proliferation of IoT devices on a 5G network presents new security challenges. As systems become more integrated and automated, they also become more vulnerable to cyber threats.  Remote Work and Digitization : The rush to adapt to pandemic-inspired...
Read more