4 advantages of moving to the cloud

​Why the security landscape shouldn’t scare you away from the cloud

The majority of breaches that have occurred over the past two years have resulted from on-premise issues.

The majority of breaches that have occurred over the past two years have resulted from on-premise issues.

Fear of the cloud in today’s security landscape is largely misplaced. While it’s the simple things that are frequently the best option for security, factors such as growing network structures and a mobile workforce mean businesses are challenged with many systems that need to be secured against a growing range of security threats. Many IT professionals feel overwhelmed with the burden of coverall aspects of security and are expressing fear of the cloud. However, there are some really compelling reasons to be looking at the cloud for security.

A 2015 study conducted by Forrester Consulting suggests security experts overwhelmingly believe security should be delivered as a platform, and cloud-delivered security offers better protection at a lower cost than traditional on-premise security. Nearly all decision-makers recognise that integrated platforms can deliver better security functionality than point solutions.

Based on this finding, let’s look at some of the advantages of moving to the cloud:

  • The majority of breaches that have occurred over the past two years have resulted from on-premise issues. Let’s take one of the largest data breaches of 2016 to date, the Panama Papers data leak. The firm allegedly ran its unencrypted emails through an outdated (2009) version of Microsoft’s Outlook Web Access. Outdated open source software (WordPress and Drupal) running the frontend of the firm’s websites is now suspected to have provided a vector for the compromise. The firm’s main site is also loading a number of outdated scripts and plugins, which were all on-premise boxes. Certainly the move to Office 365 (in the MSFT cloud) would have mitigated the outdated, unencrypted web access situation.
  • Moving services to hosted cloud providers means a simple, easy upgrade. For those of us who spent our formative IT years doing system upgrades and hard drive capacity expansions, those calls were long and challenging. In the cloud, adding capacity, CPU cores, disk capacity and memory is usually just a right click and select option. Nothing is wasted; you don’t even have to throw out those 256MB proprietary SDIMMs when you replace them with 1GB ones. Backups also become as simple as ‘taking a snapshot’ as moving large data sets like backup cloud to cloud is a lot quicker than up and down. This is the foundation of solid security.
  • Have tighter controls on administrative rights. In most cloud services, user access is application specific and security controls are far more granular. There is usually only one super-user, account holder or administrative account for hosted solutions. Adding users in hosted services usually has a financial control – i.e. it costs more money – so fiscally responsible organisations are quick to delete or re-assign licenses as requirements dictate. User permissions and administrator functions are again, usually deliberate decisions in the console of a hosted service.
  • On-premise servers are expensive. When you combine the costs of the hardware, the operating system licensing and the application licensing with the physical server, you are looking at considerable upfront costs. If you need to scale, cluster or load balance your only option is to purchase another server. This is where ‘pay as you go’ pricing has a huge advantage; all your costs are incurred as you use the service.

Even though moving the WordPress and Drupal sites to the cloud may not have mitigated the risk of unpatched boxes, it would have likely prevented the compromise of the on-premise network. With hosted cloud services it’s possible to build on-premise networks with no external ports or services located on the Internet. When that architecture is adopted, facilitated by hosted services, outbound network activity to a limited number of IP address(es) is easy to monitor. So, in the instance of a data breach occurring within an on-premise box, cloud-based solutions would make it more difficult for hackers to access data.

The majority of cloud providers offer attractive subscription-based options with loads of add-in security, such as application firewalls, geo-IP filtering and VPN endpoint technology. For MSPs, removing physical servers from customers and putting them in the cloud can be done without affecting recurring revenue. The customer still has a ’server’ after all – it’s just in a data centre – and endpoints will never go away as they are the technology needed to access the cloud. Furthermore, when it comes to protecting the server from physical threats, such as weather and theft, you can’t beat an SOC 2-compliant data centre.

From the above it should be clear that moving servers and services to the cloud is a huge win for security and ease of administration. However, the last point in favour of cloud services is perhaps the most compelling: the vast majority of cloud providers offer security features that are costly to implement into on premise networks. IP address(es) for whitelisting access, two factor authentication for account access, granular user controls and advanced security analytics to detect account credential compromise are all possible.

So, far from shying away from the cloud, you should be embracing it and the efficiencies and extra security it can give you.

Ian Trump is Security Lead, LOGICnow

Join the PC World newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection

Tags Cloudsecurity

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Ian Trump

PC World
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Armand Abogado

HP OfficeJet 250 Mobile Printer

Wireless printing from my iPhone was also a handy feature, the whole experience was quick and seamless with no setup requirements - accessed through the default iOS printing menu options.

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?