Don't expect to peer into Google cloud services security

Customers of Google cloud services who are concerned about security better get used to being unable to check out first-hand how well their data is being protected

Customers of Google cloud services who are concerned about security better get used to being unable to check out first-hand how well their data is being protected, a Google spokesman told a high-tech leadership council recently.

The technology pro's greatest enemies

Many customers worry about how well cloud providers protect customer data, and there is no satisfactory way for customers themselves to evaluate it, says Adam Swidler, a product marketing manager at Google speaking at the Mass Technology Leadership Council Security Summit.

"We won't let you audit to the degree that you would audit your own infrastructure," Swidler says. "It's never going to be the same as auditing your own infrastructure. You'll have to extend some level of trust to third-party verification."

As a practical matter cloud providers wouldn't have the time to let every customer check out data security, but also providers can't allow their security measures to become public so attackers can figure out how to circumvent them, he says.

The best Google can do is let customers see the control objectives of Google's security, but only after signing a non-disclosure agreement, he says. "It lets you see some of what we do and look at it without violating Google security," he says.

He does say that Google uses proprietary measures that it believes are in the best interests of its customers. Industry-recognized audits such as SAS 70 and compliance with Federal Information Security Management Act (FISMA) requirements could give customers some assurance. But he also acknowledges they aren't ideally suited to evaluating cloud security.

"There really aren't a strong set of cloud security standards," Swidler says. But the guidance set by the Cloud Security Alliance does offer some criteria that customers might want to consider, he says.

During his keynote talk at the security summit, Swidler urged customers to grill cloud providers on how they can get their data out of the provider's network should they decide to switch providers. Knowing ahead of time that it can be done can prevent getting locked in to one provider, he says.

He says Google expects that most businesses won't trust all their data to the cloud, "but we will enable it for those who want to shift." The most reasonable expectation is that there will be a spectrum from users who do entrust all their applications to the cloud to those who trust none of them to the cloud. "Very few will be all in the cloud," he says.

Cost savings and collaboration benefits are the most compelling reasons businesses have for switching to cloud services, he says

Swidler acknowledges that customer service for Google Apps has been a problem for customers. One attendee at the summit says he noted that the more a business relied on Google Apps, the more problems it ran into.

"We have some opportunity to improve the service we give, particularly to small and medium businesses," Swidler says. Those improvements will include better search tools for businesses seeking help and Google supported user communities in which customers can help each other out with problems, he says.

Read more about data center in Network World's Data Center section.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags securitycloud computinginternetGoogleData Centerhardware systemsConfiguration / maintenanceGoogle cloud security

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Tim Greene

Network World
Show Comments

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Laura Johnston

MSI GS65 Stealth Thin

If you can afford the price tag, it is well worth the money. It out performs any other laptop I have tried for gaming, and the transportable design and incredible display also make it ideal for work.

Andrew Teoh

Brother MFC-L9570CDW Multifunction Printer

Touch screen visibility and operation was great and easy to navigate. Each menu and sub-menu was in an understandable order and category

Louise Coady

Brother MFC-L9570CDW Multifunction Printer

The printer was convenient, produced clear and vibrant images and was very easy to use

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Walid Mikhael

Brother QL-820NWB Professional Label Printer

It’s easy to set up, it’s compact and quiet when printing and to top if off, the print quality is excellent. This is hands down the best printer I’ve used for printing labels.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?