Cloud Industry Forum research shows that cloud fears are over stated

New research from the Cloud Industry Forum (CIF) highlights the discrepancy between the perceptions of data security in the cloud and the reality experienced by users of cloud services in the UK. While adoption rates of cloud continue to increase at pace, the perceived threat is clearly not the real position, so must be countered and resolved by a professional industry and informed users, says CIF.

The research, which polled 250 senior IT and business decision-makers, confirmed that the number one issue in the minds of end users still relates to data security, cited by 61 percent of respondents. This was followed by data privacy (54 percent), and data sovereignty (28 percent). Critically however, only 2 percent of organizations believed that they had actually experienced a cloud service-related security breach.

Other findings include:

Applications considered to be the highest risk by organizations are data backup/disaster recovery (36 percent); data storage (30 percent) and personnel and payroll (33 percent);
88 percent of organizations are concerned to some extent about their data in the cloud;
Just under half (44 percent) have actively changed the way they use cloud following the PRISM revelations, including almost one in ten (9 percent) who have changed their CSP entirely;
Security ranks as the number one reason for organizations not wishing to move specific applications to the cloud (75 percent)

For Alex Hilton, CEO of CIF, the results should be seen as solid reinforcement that the perception that cloud is inherently less secure than on-premises IT is far removed from the realities experienced by users of cloud services.

Hilton said: “Despite the significant growth in adoption and penetration of cloud services, it’s clear from the research that the market remains somewhat confused and uncertain as to the legal, regulatory and security environment surrounding the market. This is arguably driven by the continued FUD (fear, uncertainty and doubt) being peddled in the media following recent developments in European Data Protection and the revelations about PRISM.”

Larger regulated businesses are most cautious about cloud adoption and this is where hybrid cloud becomes relevant. Hilton commented:

“Hybrid Cloud enables organizations to combine the best of both worlds to fit both their technology needs together with mandatory regulatory requirements. This will also help them manage data concerns. Businesses are right to be concerned about their data, but this applies as much to cloud environments as to on-premise,” he continued.

Richard Pharro, CEO of APM Group, CIF’s independent certification partner, added: “This issue is as much about perceptions as actual risk, presenting something of a challenge for the industry. Although more businesses than ever are open to cloud to some extent, turning the perception that cloud is insecure will take time. There are, however, a number of things that the industry can do to hurry the process along – certification being one of them. It’s simply not enough to say ‘trust that we will look after your data’; the industry must prove its worth. The CIF Code of Practice offers CSPs the chance to demonstrate their capabilities and commitment up front in an open, up-front and verifiable way, helping to build trust with end users.”

•Date: 16th September 2014 • World •Type: Article • Topic: Cloud computing

Sign up for Continuity Briefing, our weekly roundup of business continuity news. For news as it happens, subscribe to Continuity Central on Twitter.

How to advertise on Continuity Central.

To submit news stories to Continuity Central, e-mail the editor.

Want an RSS newsfeed for your website? Click here