|
The Cloud's Biggest Risks |
|
|
|
Tuesday, 24 November 2009 |
|
Page 20 of 24
Lack of Customer Hardening
Probability: Low
Impact: Medium
Risk: Low
Yes, cloud providers must isolate their customers' data, but if customers fail to secure their environments, they can pose a danger to the cloud platform. "In some cases cloud customers have inappropriately assumed that the cloud provider was responsible for, and was conducting, all activities required to ensure security of their data," says the report. "This assumption by the customer, and/or a lack of clear articulation by the cloud provider, placed unnecessary risk on the customer's data."
ENISA recommends that cloud vendors clearly set out the minimum actions their customers must undertake, articulate their isolation mechanisms, and provide best practice guidelines to help customers secure their resources.
|
