{"id":20602,"date":"2018-08-01T11:20:51","date_gmt":"2018-08-01T10:20:51","guid":{"rendered":"http:\/\/www.intelligentcio.com\/africa\/?p=20602"},"modified":"2018-08-01T11:21:11","modified_gmt":"2018-08-01T10:21:11","slug":"alto-africa-cto-oliver-potgieter-on-securing-data-in-the-cloud","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/africa\/2018\/08\/01\/alto-africa-cto-oliver-potgieter-on-securing-data-in-the-cloud\/","title":{"rendered":"Alto Africa CTO Oliver Potgieter on securing data in the cloud"},"content":{"rendered":"<p><em>Many small business owners are more concerned about how secure their data is in the cloud but don\u2019t worry about taking their unencrypted laptops to a local coffee shop, says Alto Africa CTO Oliver Potgieter. He talks to Intelligent CIO about why having a \u2018secure\u2019 password doesn\u2019t mean one\u2019s data is protected and why \u2018the cloud\u2019 itself is not the security issue.<\/em><\/p>\n<p>Gartner\u00a0predicts that by 2022, at least 95% of cloud security failures will be the user\u2019s fault. The challenge is not in the security of the cloud itself, but rather in the policies and technologies for security and control of the technology.<\/p>\n<p>SMEs need to understand where their data protection concerns should lie. Having a \u2018secure\u2019 password surely cannot compare to storing one\u2019s data on a multi-billion-dollar cloud platform like Microsoft&#8217;s Azure, Amazon Web Services or Google Cloud.<\/p>\n<p>Instead of asking whether the cloud is secure, they should rather be asking whether they are using the cloud securely. It is nearly always the user and not the cloud provider, who fails to manage the controls used to protect an organisation\u2019s data.<\/p>\n<p>Small and mid-sized businesses have a relationship with cloud security that reflects a line from Shakespeare \u2013 full of sound and fury, signifying nothing. In part, the blame should be placed on the shoulders of the \u2018bakkie brigade\u2019 \u2013 a group of IT providers that service the SMB sector in South Africa.<\/p>\n<p>Unfortunately, most small businesses have a vested interest in friends and relatives who look after their computers. These \u2018IT professionals\u2019 tend to keep software and data local and charge a handsome callout fee every time there\u2019s a problem.<\/p>\n<p>So they sow fear, uncertainty and doubt (FUD) about \u2018the cloud\u2019 while punting their own \u2018data centre\u2019. It\u2019s not even worth commenting on the security of a couple of servers in the IT provider\u2019s basement.<\/p>\n<p>There are very few fortune 500 companies that can compete with the availability and security of Azure, Amazon Web Services or Google Compute, let alone any small or mid-size businesses. There is a massive difference between a real <a href=\"http:\/\/click.mlsend.com\/link\/c\/YT05NDY3ODEwMDA4NzkzMTQyNjUmYz1nN2cyJmU9Mzk1ODExODUmYj0xOTIyNjc0MDgmZD1xOW03eDRr.aFkWJsKiUgJUrRc0KRrfbydnAt7Kup3RkuODaEH3BWo\">data centre<\/a> and the local IT provider\u2019s \u2018<a href=\"http:\/\/click.mlsend.com\/link\/c\/YT05NDY3ODEwMDA4NzkzMTQyNjUmYz1nN2cyJmU9Mzk1ODExODUmYj0xOTIyNjc0MTAmZD16MnMzeThu.VPMT-sI0_NhEj2m-MLdu72-rcQZhnK-kvhBZ1z26qFo\">data centre<\/a>\u2019.<\/p>\n<p>So, do businesses never get hacked in the cloud?\u00a0Of course they do, but Microsoft\u2019s Azure SLA for example states that they take responsibility for security of the cloud service they provide, e.g. the physical components and the network connected layer.<\/p>\n<p>SMEs can run pretty much any service they want from these global cloud platforms but if they leave remote connections open to the world, give every user that needs access full admin rights and have a password policy that allows \u2018Password123\u2019 as the only form of authentication needed then they deserve to be hacked.<\/p>\n<p>Don\u2019t blame the platform, securing data is the company\u2019s responsibility and this is according to Protection of Personal Information Act 2013 (PoPI) and the European Union\u2019s General Data Protection Regulation (GDPR).<\/p>\n<p>Next time a \u2018trusted advisor\u2019 says the cloud is just not ready yet, consider some of the following statistics \u2013 Amazon cloud did 49% year on year growth in Q1 with US$5.44 billion in revenue, while Microsoft\u2019s commercial cloud revenue leapt an incredible 58% to US$6 billion.<\/p>\n<p>There are plenty of good reasons to move to the cloud, it makes good business sense and it allows small business owners to focus on their business. Cloud computing can be used for almost all types of applications, not just business security.<\/p>\n<p>When running one\u2019s own servers, the overall costs of maintenance and management can lead to unforeseen expenditures.<\/p>\n<p>While the idea of cloud computing can sometimes sound complicated, it&#8217;s clear that it saves its users money. There are no upfront costs, moving to cloud is cheaper than one thinks. It involves no upfront investments as all the IT infrastructure needs will be taken care by the cloud service provider for a fixed cost.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Many small business owners are more concerned about how secure their data is in the cloud but don\u2019t worry about taking their unencrypted laptops to a local coffee shop, says Alto Africa CTO Oliver Potgieter. He talks to Intelligent CIO about why having a \u2018secure\u2019 password doesn\u2019t mean one\u2019s data is protected and why \u2018the [&hellip;]<\/p>\n","protected":false},"author":28,"featured_media":20606,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[182,5,6,399],"tags":[5056,1173,6090,376,1495,453],"class_list":["post-20602","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud","category-enterprise-security","category-insights","category-more-news","tag-alto-africa","tag-cloud-security","tag-cto-oliver-potgieter","tag-gartner","tag-google-cloud","tag-south-africa"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/20602","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/users\/28"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/comments?post=20602"}],"version-history":[{"count":1,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/20602\/revisions"}],"predecessor-version":[{"id":20603,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/20602\/revisions\/20603"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media\/20606"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media?parent=20602"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/categories?post=20602"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/tags?post=20602"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}