Story image

Security tips for SMBs moving to the cloud

30 Oct 18

Small-to-medium sized businesses (SMBs) are increasingly moving their data, information, and processes to cloud-based services, due to the benefits in cost reduction and workflow the cloud offers. While cloud-based information storage and management services are touted to improve internal business performance, there are risks involved in cloud storage, especially when networks are improperly secured. Organisations taking the next step in digitalisation, innovation, and cloud management must take appropriate security measures to protect their data according to ESET. 

Cloud-based services offer organisations benefits including faster and more accurate data management, network connections that aren’t bound to physical or time restraints, and improved overall workflow. Organisations that want to enjoy these transformations need to properly adopt and install cloud systems. 

Nick FitzGerald, senior research fellow, ESET, said, "SMB managers considering moving to the cloud should assess and prepare for the changes this will bring to their existing security infrastructure. Due to the confidentiality and volume of information cloud services usually store for organisations, shifting to the cloud comes with added security responsibilities that leaders need to be on top of." 

ESET has shared four ways organisations considering moving to the cloud can set themselves up for secure data management: 

1. Pre-emptively consider the security risks. Decision-makers should assess their organisation's IT security capacity to fend off cybersecurity threats. Cyber attacks targeted at organisations can be sophisticated, so cloud systems must be fortified against the latest malware. 

Nick FitzGerald said, "Part of this audit might include examining security processes and tools IT admins use and making changes where needed, based on informed understanding of the type of threats which could affect them. This needs to be done before data is shifted to a cloud-based system." 

2. Check credentials. Organisations can choose between various cloud services and providers, weighing up variables such as cost and effectiveness. Organisations should also compare cloud services in terms of their security. Managers can research cloud providers’ security track records, consult reviews, and be aware of any past data breaches or successful attacks. Organisations should lean towards providers with a transparent commitment to cybersecurity, and opt for encrypted cloud services that enable authentication and access restrictions for immediate and basic security. 

3. Encrypt data. Organisations should prepare to encrypt all data that will be stored in the cloud. Data stored in the cloud can’t be physically protected by its "owners", so enterprises need to implement the right technologies to protect it. Encrypted data is not accessible without valid access credentials, so even if a cloud provider’s systems are compromised, encrypted data they store is effectively inaccessible. When important and sensitive information about clients, consumers, partners or internal practices are encrypted in the cloud, they are safer from breaches.   

4. Enlist two-factor authentication (2FA). While an esteemed cloud provider may protect data to a higher degree than others, the responsibility still falls to individual organisations to manage data security. Organisations must not forget that data breaches can still occur internally. Open networks are vulnerable so, to prevent successful data breaches from within, organisations should police access to stored data. An effective method of restricted access is 2FA, which validates users’ identities more reliably than just passwords. 

Nick FitzGerald said, "Organisations must be aware of and prepared for the extra responsibility that comes with cloud transformations. Organisations can’t just sit back and relax once data is moved into the cloud because, while the cloud offers various benefits, it potentially creates a higher risk of information breaches. Organisations must invest in quality systems from trusted cloud providers to leverage the benefits of cloud securely." 

Cisco expands security capabilities of SD­-WAN portfolio
Until now, SD-­WAN solutions have forced IT to choose between application experience or security.
AlgoSec delivers native security management for Azure Firewall
AlgoSec’s new solution will allow a central management capability for Azure Firewall, Microsoft's new cloud-native firewall-as-a-service.
How to configure your firewall for maximum effectiveness
ManageEngine offers some firewall best practices that can help security admins handle the conundrum of speed vs security.
Exclusive: Why botnets will swarm IoT devices
“What if these nodes were able to make autonomous decisions with minimal supervision, use their collective intelligence to solve problems?”
Why you should leverage a next-gen firewall platform
Through full lifecycle-based threat detection and prevention, organisations are able to manage the entire threat lifecycle without adding additional solutions.
The quid pro quo in the IoT age
Consumer consciousness around data privacy, security and stewardship has increased tenfold in recent years, forcing businesses to make customer privacy a business imperative.
ForeScout acquires OT security company SecurityMatters for US$113mil
Recent cyberattacks, such as WannaCry, NotPetya and Triton, demonstrated how vulnerable OT networks can result in significant business disruption and financial loss.
Exclusive: Fileless malware driving uptake of behavioural analytics
Fileless malware often finds its way into organisations via web browsers (or in combination with other vectors such as infected USB drives).