
One of the common concerns about moving data and services away from a premise-based solution is that of security in the cloud. In security, old adages still hold true today. There is no one silver bullet when it comes to security; whether you’re dealing with premise-based or cloud based solutions, your best strategy for security is still Defense in Depth.
Some of the most important standard components and services that you want to continue to build in depth in the cloud include:
- Firewall
- IDS/IPS
- SIM/SEM Monitoring
- Anti-Virus
- Anti-Malware/Web Reputation
Additionally, there are three key things you’ll want to double-check with your selected cloud services provider, because they usually fell under your purview before your migration to the cloud:
- Does the provider hold themselves to a compliance based standard for operations, like SOC or ISO?
- Do you know where your data resides? Is it in country? Does the provider have a high standard for physical controls?
- Encryption at Rest: What happens when your service provider replaces a drive? Is your data still on it and obtainable?
If you’re still using premise-based solutions, and are concerned about security in cloud computing, it’s important to do your due diligence in selecting a provider. Since the beginning, we at Evolve IP recognized that security management and data integrity are critical requirements that our customers demand, especially those customers that have formal compliance regulations.
The right service provider will have the appropriate certifications and technology in place to keep your data secure. Evolve IP is not only a cloud services company, but also a Managed Security Services Provider (MSSP), experienced in protecting, reporting and auditing enterprise customer environments. We are SOC 3 certified, PCI-ASV certified and are a registered and participating member of CSA Security, Trust & Assurance Registry (STAR). These are essential components that you need to ensure that your cloud provider offers, to help you maintain the level of security you have historically maintained for your company.
Categories: General