Transparency is the biggest challenge in moving to cloud computing, not security, according to Gavan Egan, vice-president of sales at Verizon Terremark Europe.
“Most big organisations do not see security as a challenge because serious cloud providers understand security and security infrastructure,” he told Computer Weekly.
Verizon, which has a long-established security tradition, encrypts all data in its cloud environment and ensures that none of its employees have access to the data. All staff are also screened.
Egan, who formerly headed Verizon’s security services business in Europe, sees transparency as a far bigger issue for organisations making the transition to cloud.
“IT departments not only have to ensure that cloud deployments comply with external and internal regulations, but they need to be able to prove that compliance to auditors and regulators,” he said.
As part of Verizon’s strategy to grow its cloud business, the company is geared to help customers with potential hurdles, such as data classification, risk management and regulatory compliance.
For European organisations, Verizon is able to guarantee that data will not leave its datacentres within the EU, located in the Netherlands and the UK.
Read more on cloud security
- (ISC)2 and the CSA announce certification for cloud security
- Why the cloud is not a security nightmare
- Enterprise security moving to the cloud, says Gartner
- Cloud: security threat or solution?
- FAQ: Addressing cloud computing security concerns
Security may be second to transparency, but Egan allows that it is still a key consideration for companies moving to cloud in pursuit of greater IT agility and flexibility for rapid response to business challenges.
For most organisations, the move to cloud provides the opportunity of increased security as cloud providers typically invest more in security and have greater staff and intelligence resources, he said.
“Verizon, for example, can draw threat intelligence from our annual data breach report and our ability to monitor threats as 70% of all internet exchanges cross our IP backbone infrastructure,” said Egan.
While most companies are adopting a step-by-step approach to cloud starting with non-critical elements, some that have already moved all applications and infrastructure to the cloud.
“Cloud does not necessarily meet all requirements, so organisations need to look at what areas of the business cloud can improve, and begin with those,” said Egan.
Most cloud providers are serious about what they are doing and encourage high standards in the industry, he said.