Adoption of the cloud is not slowing down. In fact, what’s happening is quite the opposite. According to IDC, worldwide spending on cloud computing is expected to reach $162 billion USD in 2020, growing at a compound annual rate of 19%. This isn’t surprising when you consider that more organisations are looking outside their own environment for solutions that will help them become more agile, maximise resources and save money. Yet, while this study and countless others show that more companies are embracing the cloud and its benefits, many are still hesitant to make the move. One of the biggest reasons why is security.
Particularly in the physical security industry, there is a common misconception that on-premises systems on closed networks are more secure. Many still believe that connecting to a cloud-based application becomes a source of vulnerability that will put corporate data and systems at risk. In this article, we will explore why this belief is unfounded, and why more organisations are relying on cloud service providers to enhance their systems’ security.
Why isolated on-premises systems are not immune to threats
Everyone is working with the same security tools. It doesn’t matter whether it’s an IT team securing an on-premises network, server or system, or a cloud provider protecting its infrastructure and its clients’ applications and data. Essentially, anyone can implement multiple layers of security to reinforce confidentiality, integrity and availability. These can include many mechanisms such as firewalls, intrusion detection systems, multi-factor authentication, antivirus software, etc.
While these security measures exist, the reality is that organisations either lack the expertise or the capital to build and maintain infrastructures with the utmost protection. This inevitably leaves their isolated networks and on-premises systems vulnerable to attack.
The WannaCry and Petya Ransomware attacks are good recent examples of how these vulnerabilities can be exploited, causing catastrophic results. Specifically, WannaCry attacked vulnerabilities in the Microsoft Windows operating system, allowing the malware to quickly spread to neighbouring computers. The vulnerability was promptly patched by Microsoft as soon as they were made aware, but those that did not get around to updating their systems were left at risk. Within a day of the attack being launched, it was reported that over 200,000 systems around the world were infected, holding personal and corporate data hostage in exchange for bitcoin payments
As noted above, attacks often happen when people tap into system vulnerabilities, regardless of whether the system is running in an isolated on-premises environment or in the cloud. Therefore, mitigating system risks is not so much about where the infrastructure is physically located. Instead, it’s about how well the system and its infrastructure is managed from a physical and logical security standpoint.
With this in mind, below are a few reasons why cloud applications can often be more secure than isolated on-premises systems that are managed internally by an organisation.
1. Cloud providers make layers of security more accessible
Keeping systems safe from threats is costly and complex. To do it alone, and do it well, businesses must have dedicated resources and large budgets. This is why cloud providers have an advantage. They can use economies of scale to enhance their operations and provide high levels of security for their shared infrastructure. All the money, time and resources invested in building and maintaining a highly-secure cloud platform does not just benefit one company, but thousands or millions of customers. Therefore, these businesses can take advantage of multiple layers of security that they would not have been able to put in place themselves.
2. Cloud providers facilitate system updates and patches
Ensuring systems are always up to date and minimising risk require constant attention. The landscape of cyber threats is evolving, and many vulnerabilities that hackers prey on are quickly identified and fixed by vendors in software version updates. Unfortunately, updating software is time-consuming, so when an organization is faced with budget constraints, it’s a task that often falls through the cracks. A benefit of using a cloud service is that system updates are facilitated by the cloud service provider. As soon as the latest versions and fixes are available, the organisation will have access to them. This helps to ensure that systems remain protected against known vulnerabilities.
3. Cloud providers take onus for the risk of threats
Top-tier cloud service providers use more stringent security measures for their infrastructures than most businesses. This is because their product and core competency is at stake. In fact, companies like Microsoft have a global incident response team that works around the clock to mitigate against attacks. The company also builds security into its cloud platform from the ground up, embedding mandatory security requirements into every phase of the development process. Top cloud providers also go out of their way to comply with international and industry-specific compliance standards, and participate in rigorous third-party audits which test and verify security controls.
4. Cloud providers have strict policies to prevent unauthorised access
Physical security plays an important role in safeguarding against cyber attacks. For instance, it is not uncommon to see access control servers sitting under a receptionist’s desk in the front lobby of an organisation. At any point in time, the data can be stolen or destroyed with a single USB key. For a cloud service provider, mitigating against internal threats is a critical component of what they do. From the policies and processes they outline to technologies they use, cloud service providers build data centres with unprecedented levels of physical security. They also implement comprehensive incident response protocols, so that any breach is promptly detected and immediately dealt with.
Why outsource the risk and costs to cloud providers?
When it comes to cyber security, the stakes are high – and organisations are finding it more challenging to keep pace with the onslaught of new threats. This is why many are transferring the responsibility and risk over to cloud service providers. Cloud service providers are not only better equipped to manage and maintain these systems and keep them secure, but also make it more affordable for their customers to access the highest possible levels of security.
