SECURITY ISSUES IN ADOPTING CLOUD COMPUTING MODEL
Regulatory compliance – Clients are accountable for the security of their solution, as they can choose between providers that allow to be audited by 3rd party organizations that check levels of security and providers that don’t.
Data location –data centers in which data is stored, the country or the jurisdiction is critical and therefore provider of cloud services need to adhere to set out guild lines on what data can be stored where and provide the location information to their clients in a more readily manger. Cloudpap provides geographically targeted cloud services and therefore clients find it easier to choose where their data will be stored.
Data Segregation – a lot of data stored in the cloud is still raw. Cloud computing providers need to work to ensure adoption of full encryption technologies such as Advanced Encryption Standard (AES -128, AES-192, AES- 256) and RSA encryption.
Regulatory Capacity – regulatory bodies lack capacity to investigate, and conduct other duties pertaining enforcement of regulatory framework and therefore clients lack the legal support.
Data Security good practice- every provider need to establish infrastructure in line with good practice – some of them include provision of primary and secondary sites, availability of disaster recovery sites. A few providers in the market overlook these issues and consequently when disaster strikes – the damage is irrecoverable.