14 DAY TRIAL // The Information Security Forum (ISF) has released a new study, Data Privacy in the Cloud, which focuses on teaching organizations that want to migrate to the cloud how to handle the risks associated with such decisions, especially now that data stored in the cloud has to comply with privacy regulations.
Many organizations have decided to move their operations to the cloud because of the many benefits. However, there are numerous risks that must be taken into consideration before taking this step.
Cloud-based systems are a combination of a specific service deployed on a particular cloud type. Each service and each cloud type comes with inherent risks.
Organizations must decide which combination to opt for by individually assessing each of the security arrangements offered by cloud providers, and the risks that need to be managed.
“The decision to use cloud-based systems should be accompanied by an information risk assessment that’s been conducted specifically to deal with the complexities of cloud systems, the data that will be stored in the cloud, associated privacy regulations and of course the needs of the business,” said Steve Durbin, global vice president of ISF.
“It should also be supported by business processes that ensure the necessary safeguards. Otherwise, the persistent pressure to adopt cloud services will increase the risk that an organization may fail to comply with privacy legislation, particularly when operating across multinational borders.”
The report published by ISF provides some important details on privacy, personally identifiable information, and the privacy regulations that companies must comply with.
“Cloud-based systems are a standard part of the business landscape because they can be cheaper, quicker and easier to deploy than internal IT systems,” Durbin added.
“For business leaders, the promise of reduced costs from scalable IT services provided on-demand is extremely attractive – and has helped drive a rapid uptake of cloud-based systems. The attraction is especially acute during prolonged economic downturn as organizations look for opportunities to outsource non-core aspects of their business.”
The complete Data Privacy in the Cloud report can be purchased from the ISF Store. A free executive summary is available here.