The Patriot Act and the Cloud
A year ago, Microsoft’s U.K. managing director surprised many people by publicly admitting that Microsoft will hand over data stored in any of its worldwide facilities when asked to do so by the U.S. government. In fact, the cloud customers and their data subjects would not even be informed if there was a gag order […]
Flame Authorship is Acknowledged… Now What?
Last week the Washington Post reported that “Western officials with knowledge of the effort” said that the malware called Flame had been jointly developed by the United States and Israel. The main surprise here was the announcement itself. The complexity and sophistication of the Flame malware had led researchers to conclude that it was probably […]
Can You Get Cyber Insurance for Cloud Computing?
A recent Business Insurance article addressed the applicability of cyber risk insurance to cloud computing. The article concludes that existing cybersecurity insurance policies are generally written in language broad enough to include cloud services under the category of outsourcing. Cybersecurity insurance is an important thing to consider, because cloud providers accept little to no liability. […]
Will My Cloud Provider Read My Data?
In my last blog post, I explained how you can verify that Amazon cloud storage is zeroized before being redeployed for the next user. But what about the cloud provider browsing through your data? After all, it’s stored on their hardware in their facility, so they have physical access plus the ability to interact with […]
Who Can Read My Data in the Cloud?
For the sake of your compliance, you hope that the answer is “nobody”! For most organizations, confidentiality is the greatest concern. The most worrying thing about using cloud technology is storing your data on someone else’s hardware. But how big of a risk is this, really? Stored data should be encrypted. However, how much of […]