fbpx

Download free GDPR compliance checklist!

Tag Archives for " cloud "

The European Union Agency for Cybersecurity Publishes a Draft Certification Scheme for Cloud Services

On December 22, 2020, the European Union Agency for Cybersecurity (ENISA) published a draft scheme for cloud services. Cloud services that meet the security requirements of the scheme will be able to obtain a certification attesting their level of cybersecurity.

The draft scheme sets out criteria that apply to the design and implementation of cloud services, including their security features and the essential processes used throughout their lifecycle. It supports three assurance levels: “basic”, “substantial”, and “high”.

Source: The European Union Agency for Cybersecurity Publishes a Draft Certification Scheme for Cloud Services

Trump admin mulls blocking cloud firms from countries like China

A proposed executive order that could keep American cloud computing companies out of certain foreign countries is being circulated within the Trump administration and to tech industry players.

Under the proposed order, the Commerce Department would under certain circumstances have the authority to ban U.S. cloud providers from doing business in certain countries and ban foreign cloud providers from doing business with U.S. customers.

Source: Scoop: Trump admin mulls blocking cloud firms from countries like China – Axios

Cloud Industry Unites to Create Global Standard for Transfer of Personal Data following ‘Schrems II’ ruling

The creators of the data protection market standard for cloud, the EU Cloud Code of Conduct, announced work is underway on a proposed legal solution for the transfer of personal data outside the EU.

Once approved by data protection authorities, the solution could be an alternative to the recently annulled EU-U.S. Privacy Shield, previously relied on by thousands of businesses who now face disruption and uncertainty when transferring EU citizens’ data across the Atlantic.

Source: Cloud Industry Unites to Create Global Standard for Transfer of Personal Data following ‘Schrems II’ ruling: EU Cloud CoC

Google, Dropbox and Apple accused of not clarifying terms and conditions of the consumers’ data in Italy

Apple, Google and Dropbox can be the center of the investigation carried out in Italy on cloud services. Complaints associated with terms and conditions about human data recorded.

As per an announcement made by the Italy competition authorities, it is said that they will be looking into the cloud storage services very soon. The cloud storage services will be from Apple, Dropbox and Google. Many types of complaints are registered against the companies.

Source: Google, Dropbox and Apple accused of not clarifying terms and conditions of the consumers’ data in Italy – Investor Telegraph

Legal clouds gather over US cloud services, after CJEU ruling

In the wake of landmark ruling by Europe’s top court Europe’s lead data protection regulator has fired its own warning shot at the region’s data protection authorities (DPAs), essentially telling them to get on and do the job of intervening to stop people’s data flowing to third countries where it’s at risk.

In its ruling CJEU stroked down a flagship transatlantic data transfer framework called Privacy Shield, and cranking up the legal uncertainty around processing EU citizens’ data in the U.S. in the process. Now, any sense of legal certainty U.S. cloud services were deriving from the existence of the EU-U.S. Privacy Shield — with its flawed claim of data protection adequacy — has vanished.

Source: Legal clouds gather over US cloud services, after CJEU ruling | TechCrunch

52% of companies use cloud services that have experienced a breach

Use of personal devices when accessing cloud services and the sprawl of high-risk cloud services drive new areas of risk for companies using the cloud.

Seventy-nine percent of companies store sensitive data in the public cloud, according to a McAfee survey. While these companies approve an average of 41 cloud services each, up 33 percent from last year, thousands of other services are used ad-hoc without vetting. In addition, 52 percent of companies use cloud services that have had user data stolen in a breach.

Source: 52% of companies use cloud services that have experienced a breach – Help Net Security

Most organisations still misunderstand cloud security

A report based on a survey of over 700 respondents from the United States, Canada and UK, foundthat 60% of respondents misunderstand the shared responsibility model for cloud security and incorrectly believe the cloud provider is responsible for securing privileged access.

Furthermore, 68% of organisations are not employing a common security model or enforcing least privilege access to reduce risk, and the majority list security as their main challenge with cloud migrations.

Source: #Privacy: Most organisations still misunderstand cloud security, report reveals

Organisations worldwide failing to adequately protect sensitive data in the cloud, study finds

A new global study from Thales, with research from the Ponemon Institute, has exposed an increasing disparity between the rapid growth of data stored in the cloud and an organisation’s approach to cloud security.

Although nearly half (48%) of corporate data is stored in the cloud, only a third (32%) of organisations admit they employ a security-first approach to data storage in the cloud.

Source: #Privacy: Organisations worldwide failing to adequately protect sensitive data in the cloud, study finds

Your Data Might Be Safe in the Cloud But What Happens When It Leaves the Cloud?

Cloud service providers can successfully protect data physically and technologically while it is in the cloud, but that information can be vulnerable to hacking as soon as it leaves the cloud to interact with another system.

To protect your data through every transaction, take the following measures:

  1. Practice internet safety.
  2. Encrypt connected devices.
  3. Use multifactor authentication (MFA).
  4. Protect backups.

Full article: Your Data Might Be Safe in the Cloud But What Happens When It Leaves the Cloud?

1 2 3
>