Who's that cuddling up in the container... *squints* Wow you're getting along well The cloud is a highly competitive arena, where cloud providers jostle for market share. We know of Microsoft's long haul against Amazon’s AWS, but of late Oracle has cranked up the noise against Jeff Bezos' market leader while trying to break past Google and IBM. And yet, what we imagine to be bitter rivals team up – as when …
And that was the ONLY sentence in the paragraph related to security.
Security related to what?
How is the data secured?
How is the communications secured?
How are the backups secured?
Who can read the backups?
Who owns the keys to the backup?
As long as you are using someone else's computer, YOU ARE NOT SECURE.
It may be cheaper... but you have no control.
"As long as you are using someone else's computer, YOU ARE NOT SECURE.
It may be cheaper... but you have no control."
... said the infrastructure bigots at Equifax, Deloitte, and the US govt's OPM right before corporate security came by to escort them out of the building.
Public cloud is more secure than what local enterprise teams can implement due to the scale of operations, which requires huge amounts of tight processes, automation, and testing. The only enterprises that can come close are the largest banks.
How about discussing the potential secure capabilities of cloud compared to individual firm's potential secure capabilities. We have no clue about the actual facts on the ground with respect to cloud. None of the cloud firms, huge and small, are giving us any numbers to work with We already have the facts with respect to individual firm's actual performance and it's damned grim.
This is much like the situation comparing up-time between cloud and actual firm performance data. At least there, given outage data, we can compare internal practice results against cloud. You have a yard stick. Funny actually that we have solid numbers for cloud here and very little to work with at the firm level across entire industries. The reverse of above.
"Public cloud is more secure than what local enterprise teams can implement due to the scale of operations"
No doubt you'll correct me, but a VM running in the 'cloud' has no more or less security than one running on its own hardware, it's up to the client to secure it. We also have to take the vendors word for it that the back-end is secure. There's also the question as to who can access your data in the 'cloud' without a warrant.
Your reference to infrastructure bigots Equifax in relation to scale of operations don't make sense. Equifax, with an annual revenue of US$ 3.1 billion couldn't even secure its own systems and the largest banks aren't immune to being hacked. In short, moving to the 'cloud' for security reasons is a specious argument.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
