Story image

Security tips for SMBs moving to the cloud

30 Oct 2018

Small-to-medium sized businesses (SMBs) are increasingly moving their data, information, and processes to cloud-based services, due to the benefits in cost reduction and workflow the cloud offers. While cloud-based information storage and management services are touted to improve internal business performance, there are risks involved in cloud storage, especially when networks are improperly secured. Organisations taking the next step in digitalisation, innovation, and cloud management must take appropriate security measures to protect their data according to ESET. 

Cloud-based services offer organisations benefits including faster and more accurate data management, network connections that aren’t bound to physical or time restraints, and improved overall workflow. Organisations that want to enjoy these transformations need to properly adopt and install cloud systems. 

Nick FitzGerald, senior research fellow, ESET, said, "SMB managers considering moving to the cloud should assess and prepare for the changes this will bring to their existing security infrastructure. Due to the confidentiality and volume of information cloud services usually store for organisations, shifting to the cloud comes with added security responsibilities that leaders need to be on top of." 

ESET has shared four ways organisations considering moving to the cloud can set themselves up for secure data management: 

1. Pre-emptively consider the security risks. Decision-makers should assess their organisation's IT security capacity to fend off cybersecurity threats. Cyber attacks targeted at organisations can be sophisticated, so cloud systems must be fortified against the latest malware. 

Nick FitzGerald said, "Part of this audit might include examining security processes and tools IT admins use and making changes where needed, based on informed understanding of the type of threats which could affect them. This needs to be done before data is shifted to a cloud-based system." 

2. Check credentials. Organisations can choose between various cloud services and providers, weighing up variables such as cost and effectiveness. Organisations should also compare cloud services in terms of their security. Managers can research cloud providers’ security track records, consult reviews, and be aware of any past data breaches or successful attacks. Organisations should lean towards providers with a transparent commitment to cybersecurity, and opt for encrypted cloud services that enable authentication and access restrictions for immediate and basic security. 

3. Encrypt data. Organisations should prepare to encrypt all data that will be stored in the cloud. Data stored in the cloud can’t be physically protected by its "owners", so enterprises need to implement the right technologies to protect it. Encrypted data is not accessible without valid access credentials, so even if a cloud provider’s systems are compromised, encrypted data they store is effectively inaccessible. When important and sensitive information about clients, consumers, partners or internal practices are encrypted in the cloud, they are safer from breaches.   

4. Enlist two-factor authentication (2FA). While an esteemed cloud provider may protect data to a higher degree than others, the responsibility still falls to individual organisations to manage data security. Organisations must not forget that data breaches can still occur internally. Open networks are vulnerable so, to prevent successful data breaches from within, organisations should police access to stored data. An effective method of restricted access is 2FA, which validates users’ identities more reliably than just passwords. 

Nick FitzGerald said, "Organisations must be aware of and prepared for the extra responsibility that comes with cloud transformations. Organisations can’t just sit back and relax once data is moved into the cloud because, while the cloud offers various benefits, it potentially creates a higher risk of information breaches. Organisations must invest in quality systems from trusted cloud providers to leverage the benefits of cloud securely." 

Kiwis know security is important, but they're not doing much about it
Only 49% of respondents use antivirus software and even fewer – just 19% -  change their passwords regularly.
Avi Networks: Using visibility to build trust
Visibility, also referred to as observability, is a core tenet of modern application architectures for basic operation, not just for security.
Privacy: The real cost of “free” mobile apps
Sales of location targeted advertising, based on location data provided by apps, is set to reach $30 billion by 2020.
Myth-busting assumptions about identity governance - SailPoint
The identity governance space has evolved and matured over the past 10 years, changing with the world around it.
Forrester names Crowdstrike leader in incident response
The report provides an in-depth evaluation of the top 15 IR service providers across 11 criteria.
Slack doubles down on enterprise key management
EKM adds an extra layer of protection so customers can share conversations, files, and data while still meeting their own risk mitigation requirements.
Security professionals want to return fire – Venafi
Seventy-two percent of professionals surveyed believe nation-states have the right to ‘hack back’ cybercriminals.
Alcatraz AI to replace corporate badges with AI security
The Palo Alto-based startup supposedly leverages facial recognition, 3D sensing, and machine learning to enable secure access control.