“Ransomware — malicious software that encrypts the victim’s files and holds them hostage unless and until the victim pays a ransom in Bitcoin — has emerged as a potent and increasingly common threat online. But many Internet users are unaware that ransomware also can just as easily seize control over files stored on Cloud services.”
http://krebsonsecurity.com/2016/01/ransomware-a-threat-to-Cloud-services-too/
More and more businesses use the Cloud for applications, backup and file storage. These companies make it really easy to sign up and use – so easy that businesses often forget to review, analyse and check what they are paying for. Technology moves fast, so you need to check regularly that the benefits and risks (see above quote and link) have not changed. So, this month it would be good to review what you are doing on the Cloud.
Are you paying for Cloud storage you don’t use?
Few people like to do file and folder housekeeping but with Cloud services you may be paying for online storage. So once a year it is not only good practice to do some archiving, it can also save you money. What can be you delete? What can you archive to cheap local backup?
Are you paying for services you don’t use?
Cloud packages come with lots of options, some of which may have sounded brilliant when you signed up. Ask yourself, though are you using them all? Could you save money by moving to a different package? Are you paying for the right services for the right access? Some applications require the fastest access possible, others do not. Have you got the balance right?
What happens in a disaster?
Cloud is brilliant but you should regularly evaluate the risk. Maybe a year ago it would not be important if BT cut the broadband line for a week or the provider experienced a Denial of Service attack. Now, however, it may be a disaster. Maybe the files you stored on the Cloud were not important a year ago. Now, however, they may be vital to the daily running of your business. Has the Cloud provider been taken over? If so, are you still happy with the server security and backup the new company provides. Once a year it is good to review what you are doing and ensure that you have the disaster recovery plans in place. Plans to ensure the smooth running of your business.
How secure are your files?
What would happen if the Cloud provider was hacked? Is there information stored on the Cloud that would make your company vulnerable? If so, what can you do to minimise the risk?
When did you last check that your Cloud backups were working?
Maybe your files are not on the Cloud but you backup to it. If so this month run a test restore. Make sure that you are still backing up everything you need:
• Has a new folder been added to the server that is not being backed up?
• Has someone opted to back up a vital program – normally the accounts software – locally and that is not included in your backups?
• Did anyone start storing files that are essential for your business locally on their computer (usually a laptop) or on a removable hard drive?
Are you still fulfilling Data Protection Laws?
The storage of personal data has strict laws – are you still meeting those requirements?
Don’t forget Cloud applications
More and more software programs are Cloud based, which means often confidential or vital data is stored and processed by a third party you have no control over. So, is that company still secure? Are you still getting the best package for your needs (it’s easy to pay and then just keep renewing automatically without checking)? Is your data still secure? How would you get a backup of that data? Would it be a disaster if the company experienced a Denial of Service attack or went out of business overnight?
As I said at the start of this blog, technology moves fast. Once a year it is good to ask yourself are you taking advantage of the benefits of new technology? These days that includes asking yourself are you making full use of the latest Cloud options? Business needs change but it is easy to continue working in the same way as you have for years. Is there anything you can do better, new services you could take advantage of, old services that would be used better with a little training?
Rebecca Mansbridge
Director
February 2017
If you found this of interest you may also like our Quick Tip about Cloud Servers