Re: data security in "the cloud"

Hi Stuart,

   Ok, for example if I ran a company and was thinking about using another
company's network to store some of my company's data, or to help with
workload distribution or for additional processing power, how do I know
whether or not my information is secure? An account name and possibly a PGP
protected password does not seem secure enough.

  As a fellow computer guy, I know first hand that any security on the
planet can be broken given enough time. So, if I was a client of one of
these companies, how could I be sure that they didn't have someone like me
working for them that could get to my data any time they wanted to? I
haven't found any information at all that indicates that any real level of
security exists at all for off-site client data and the information that I
have found indicates that these companies think the topic of client data
security is a joke or something that should not be taken seriously. I'm just
wondering what, if any, security actually exists when it comes to storing
company data in an off-site network?

On Fri, Oct 28, 2011 at 2:23 PM, Stuart Laughlin (Lists) <
[email protected]> wrote:

> **
>
>
> I think you will need to define what you mean by "information that is
> stored in the cloud" as this could mean any number of things. Just taking
> AWS as an example, you could be talking about such diverse things as
> CloudDrive, RDS, S3, or even an EC2 instance hosting one of any number of
> databases. There are security mechanisms in place for each one of those
> services, but how it works, who is responsible, and to what standard will
> vary drastically.
>
>
> --Stuart
>
>
> On Fri, Oct 28, 2011 at 2:00 PM, John Smith <[email protected]> wrote:
>
>>
>>
>> Hi All,
>>
>>   I have been looking for information on data security standards for
>> information that is stored in the cloud and so far every site I find seems
>> to think the topic is a joke. I haven't found a single site that takes the
>> notion of proper data security for the cloud seriously. There is no mention
>> of any kind of data encryption, any kind of SSL type of data
>> transport protocols in place or any other mention of security at all. This
>> kind of irritates me, but before I start ranting, does anyone here have any
>> good pointers to information on the data security standards for the cloud?
>> Thanks guys.
>>
>>
>>
>  
>