Haiti EarthQuake Relief Live Breaking News From Major News Wires

Haiti EarthQuake

Subscribe to Haiti EarthQuake: eMailAlertsEmail Alerts newslettersWeekly Newsletters
Get Haiti EarthQuake: homepageHomepage mobileMobile rssRSS facebookFacebook twitterTwitter linkedinLinkedIn


online backup disaster recovery Cloud Key Management Cloud Encryption  cloud encryption Cloud Encryption and Hurricane SeasonHurricane season is upon us and like all natural disasters, hurricanes have the capacity to demolish homes, destroy businesses, and devastate communities. To protect itself, your business can set up a Business Continuity and Disaster Recovery solution. The most cost effective BCDR solutions are today in the cloud, often called “Disaster Recover as a Service” (DRaaS). You can have great control for your sensitive data by setting up BCDR with cloud encryption.

Several of our customers, over the years, have had their data centers hit by hurricanes. Thankfully, the only damage was to equipment: data centers were flooded or had their lights out.

So it is of more than passing interest that experts’ outlook calls for 8-13 named storms, including 3-6 hurricanes, two of which are predicted to attain major hurricane status with winds over 111 MPH (Category 3 or stronger on the Saffir-Simpson Hurricane Wind Scale).

Though the future of this hurricane season, or his next of kin, cannot be known, the way to protect your business continuity is known and easily attainable.

DRaaS with Cloud Encryption in Business Continuity Plans

To comply with industry regulations and prepare for severe hurricanes, earthquakes, fires, or other disasters, many businesses create and implement business continuity and disaster recovery plans. Today, DRaaS allows you more than just storage – you can also get “hot” recovery solutions that back up not just data but also servers.

Such DRaaS solutions offer the classic cloud advantage: they are affordable for business while the quality of the solution is enterprise-grade. They can also be compliant with industry regulations like HIPAA and PCI DSS, and secure enough for sensitive data, such as financial, health or insurance information. Typically, you should seek:

  • Replication of the entire infrastructure to a remote location
  • Strong access controls
  • Data encryption both in transit and at rest
  • Encryption keys to be owned and controlled by the data owner
  • Integration with your security tools

Cloud Storage Encryption and Key Management

One of the points to look out for is the management of the encryption keys.

The cloud storage encryption can be rendered useless if the encryption keys are:

  • Stored in the cloud alongside the encrypted data. This way, if encrypted data is hacked along with the key, it can easily be deciphered.
  • Managed or owned by a third party, such as the DRaaS provider or their infrastructure provider. In this scenario, the third party’s employees or technical failures can lead to compromised encryption keys.

The industry best practice for key management is:

                Only the owner of the data can own and manage its encryption keys.

Cloud Encryption for Hurricanes and DRaaS

Whether you choose to go for just cloud storage, say with Amazon S3, HP Cloud, Zetta, or Egnyte; or opt for a full “hot” DRaaS like nScaled, Axcient,  or others, you must always keep the management of your encryption keys at the top of your mind.

These services can save you and your business in the event of a hurricane or other major natural or business catastrophe, but if using the service puts your encryption keys in danger in the regular course of doing business, you have created an opening for a different kind of disaster.

Porticor’s split key encryption and homomorphic key management are the interconnected innovations that enable you to choose any cloud platform to store your sensitive business data, but maintain full ownership and control of the encryption keys with you at all times (while in motion and while at rest). Read more about it on this white paper.

 

The post Cloud Encryption and Hurricane Season appeared first on Porticor Cloud Security.

Read the original blog entry...

More Stories By Gilad Parann-Nissany

Gilad Parann-Nissany, Founder and CEO at Porticor is a pioneer of Cloud Computing. He has built SaaS Clouds for medium and small enterprises at SAP (CTO Small Business); contributing to several SAP products and reaching more than 8 million users. Recently he has created a consumer Cloud at G.ho.st - a cloud operating system that delighted hundreds of thousands of users while providing browser-based and mobile access to data, people and a variety of cloud-based applications. He is now CEO of Porticor, a leader in Virtual Privacy and Cloud Security.