What Is Cloud Security & The Shared Responsibility Model?
In a time when cyber attacks are increasingly of concern with the average data breach costing $4.45 million, overall security — and specifically cloud storage security — is more important than ever. More than 60% of corporate data is stored in the cloud, and almost half of data breaches are cloud-based, which means the right security solutions are essential to keeping your business or organization’s data safe and secure.
With cloud security also comes the important consideration of shared responsibility. In other words, who is ultimately responsible for security — the user or the cloud service provider (CSP)?
How Does Cloud Security Work?
Let’s first review the differences between security in the cloud versus a traditional data center.
A traditional data center, which houses information onsite, includes physical infrastructure such as servers, routers, hardware and cooling systems. These centers are secured through a variety of ways, including physical steps such as alarms and security staff and software measures such as the implementation of firewalls and multi-factor authentication. In this type of model, the business or organization is responsible for the data.
The cloud, on the other hand, allows for the storage of data on a network of remote servers that are hosted by a third party, such as Amazon, Google or Microsoft.
Cloud security refers to technology that protects this data from internal and external risks; it’s important to note that some of these measures may also be used in traditional data centers. Examples of cloud security include anti-virus software, multi-factor authentication, cloud-based archiving solutions, encryption, data compliance solutions, software-as-a-service (SaaS) and virtual private networks (VPNs).
When it comes to cloud security, a shared responsibility model is often a beneficial solution; this refers to an agreement between the hosting provider and the business or organization that outlines which entity is responsible for what when it comes to security.