Get comprehensive answers to your questions about cloud computing, including its reliability, services, and security risks, based on insights from the University of Missouri.

Introduction

Cloud computing has revolutionized how organizations manage and utilize their IT resources. With its promise of flexibility, scalability, and cost-efficiency, it’s no wonder that cloud services have become integral to various sectors, including education, healthcare, and business. However, despite its advantages, cloud computing also presents challenges, particularly concerning reliability and security. This comprehensive FAQ aims to address the most pressing questions about cloud computing, providing clarity and insights drawn from the University of Missouri’s expertise.

What is Cloud Computing?

At its core, cloud computing refers to the delivery of computing services—including servers, storage, databases, networking, software, and more—over the internet (“the cloud”). These services enable organizations and individuals to access and use applications and data from anywhere with an internet connection, eliminating the need for physical hardware and on-premises infrastructure.

What Kind of Services and Applications Are Considered Cloud Services?

Cloud services encompass a broad range of applications and platforms, including:

Email Services: Platforms like Gmail, Microsoft Outlook Live, and Yahoo Mail.
Productivity Tools: Microsoft 365, Google Apps, and Dropbox.
Social Media and Collaboration: Facebook, YouTube, and Skydrive.
Storage Solutions: Services like Mozy for data backup and storage.

These services are typically offered on-demand and can be accessed without the need for significant upfront investments in hardware or maintenance.

Is the Cloud More Reliable, Efficient, and Less Expensive?

Cloud services are renowned for their flexibility and scalability, allowing users to access resources as needed, often at a reduced cost compared to maintaining on-premises infrastructure. However, while the cloud offers numerous benefits, it doesn’t always guarantee higher reliability. The availability of cloud services largely depends on internet connectivity and the provider’s infrastructure resilience. Therefore, while the cloud can enhance efficiency and reduce costs, organizations must weigh these advantages against potential reliability concerns.

What Are the Security Risks of Using the Cloud?

While cloud computing offers many benefits, it also introduces several security risks, especially when handling sensitive or regulated data. Key risks include:

Data Loss and Theft: Unauthorized access can lead to loss, corruption, or theft of data.
Exposure to Cyberattacks: Cloud services are prime targets for cybercriminals due to their vast data repositories.
Inadequate Protection Measures: Not all cloud providers implement robust security protocols, increasing vulnerability.
Legal and Compliance Issues: Storing sensitive data in the cloud can lead to legal liabilities if not managed in compliance with regulations like FERPA and HIPAA.

Organizations must implement stringent security measures and choose reputable cloud providers to mitigate these risks effectively.

Why Is the Cloud Considered Risky?

Several factors contribute to the perceived risks of cloud computing:

Inadequate Control Over Data: Users often lack direct control over where and how their data is stored and managed.
Non-Comprehensive Terms and Conditions: “Click-through” agreements may not provide sufficient protections for sensitive data, potentially leading to legal issues.
Potential for Security Breaches: Large cloud providers are frequent targets for cyberattacks, which can compromise user data.
Lack of Transparency: Cloud providers may not always inform users about security breaches, leaving data exposed without the user’s knowledge.

These risks highlight the importance of due diligence when selecting cloud services and implementing robust security practices.

What Types of Data Are Considered Sensitive and Pose Risks When Stored in the Cloud?

Sensitive data requires careful handling to prevent unauthorized access and ensure compliance with legal and regulatory standards. Examples include:

Student Information: Data not considered directory information or protected under FERPA.
Patient Information: Protected health information governed by HIPAA.
Personally Identifiable Information (PII): Information like Social Security numbers, credit card details, and bank account numbers.
Human Resources Records: Personnel data containing sensitive information.
Intellectual Property: Proprietary research data and trade secrets.
Data Governed by Export Controls: Information restricted by U.S. export laws.
Research Data: Data collected under specific grants or research projects.

Storing such data in the cloud necessitates stringent security measures to safeguard against breaches and unauthorized access.

Additional Concerns for Researchers Using the Cloud

Researchers often handle sensitive data that may have additional security and compliance requirements. Key concerns include:

Data Residency: Many cloud services store data in overseas facilities, which may conflict with U.S. export control laws requiring certain data to remain within national borders.
Government and Law Enforcement Access: Different countries have varying laws regarding data access, which can pose threats to data integrity and confidentiality.
Intellectual Property Protection: Ensuring that proprietary research data is adequately protected from theft or unauthorized use.

Researchers must thoroughly assess cloud providers’ compliance with relevant laws and regulations to address these concerns effectively.

University Policies Governing Cloud Usage

The University of Missouri has established policies to regulate the use of cloud services, ensuring data security and compliance:

Procurement Policy (BPM 1204): Governs all IT purchases, including cloud services. All applications must be reviewed and approved by the central IT department, regardless of cost.
Information Security Policy (BPM 1203): Responsibilities for setting and enforcing security standards lie with the VP for IT and the Chief Information Officers (CIOs).
Data Classification System (DCS): Defines the security standards for different types of information stored in the cloud.

These policies aim to ensure that all cloud-based applications and services meet the University’s stringent security and compliance requirements.

Determining the Suitability of a Cloud Application

Before adopting any cloud service, it’s crucial to evaluate its compliance with the University’s security and contractual standards. Steps include:

Consult the Central IT Department: They have the authority to approve or reject cloud applications based on security assessments.
Limit Sensitive Information: Avoid storing highly sensitive data in the cloud unless approved and adequately protected.
Review Terms and Conditions: Ensure that the provider’s terms align with the University’s legal and security requirements.

By following these steps, organizations can make informed decisions about which cloud applications are safe and appropriate to use.

Examples of Risks Associated with Cloud Computing

Real-world incidents highlight the potential risks of cloud computing:

Data Breaches: Unauthorized access leading to the exposure of sensitive information.
Service Disruptions: Downtime or outages affecting access to critical applications and data.
Compliance Violations: Unintentional breaches of regulations like FERPA or HIPAA due to inadequate data protection measures.
Intellectual Property Theft: Loss or theft of proprietary research data or trade secrets.

These examples underscore the importance of robust security practices and careful selection of cloud providers to minimize risks.

Conclusion

Cloud computing offers a myriad of benefits, from enhanced flexibility and scalability to cost savings. However, it’s essential to navigate its complexities carefully, particularly concerning reliability and security. By understanding the risks and implementing robust policies and security measures, organizations can harness the power of the cloud while safeguarding their critical data and maintaining compliance with regulatory standards.

Ready to transform your data infrastructure with secure, efficient cloud solutions? Discover how Onix can help your organization leverage cloud computing effectively.