Home

1. Do you know where your data is and is it secure? 2. Do you have a network security or information security team at your organization? What are your thoughts on the above questions?

1.  Yes I know where my data is.  Do I know it's precise location in storage or network?  No.  But that's what you get when you use someone else's compute instances, i.e. cloud.  Do I need to know exactly where it is?  Not really.  Not when the hosting provider can have more protection for the money than you can.  As long as you can meet regulatory and legal requirements and protect access to your data then it should be ok.  I say should as bear in mind the change a hosting provider made that gave their engineers access to all data stored in their systems before quickly revoking it.  If you are a government, defence or a bank, you MAY want to have more control of where your data actually is. 2.  Yes, everybody does, even if you are a one man band, guess what, you are your security team and you'd better learn at least the basics or risk getting burned.

Anonymous Author
1.  Yes I know where my data is.  Do I know it's precise location in storage or network?  No.  But that's what you get when you use someone else's compute instances, i.e. cloud.  Do I need to know exactly where it is?  Not really.  Not when the hosting provider can have more protection for the money than you can.  As long as you can meet regulatory and legal requirements and protect access to your data then it should be ok.  I say should as bear in mind the change a hosting provider made that gave their engineers access to all data stored in their systems before quickly revoking it.  If you are a government, defence or a bank, you MAY want to have more control of where your data actually is. 2.  Yes, everybody does, even if you are a one man band, guess what, you are your security team and you'd better learn at least the basics or risk getting burned.
1 upvotes