When you signed a deal with a cloud storage provider, you should not only aim your focus on the information technology security of the cloud storage but you should also place a significant attention to the security (both financial and infrastructure) of your cloud storage provider. If you are dealing with a small or medium-size cloud Storage Company, your mind may immediately think that the said company’s security is quite lame compare to big cloud storage provider companies. Well, big storage companies do not immediately translate that they are better in terms of security. Sometimes, due to sheer number of their subscribers, big companies cannot even monitor the security of their providers. This is the reason why there are a significant number of people who are willing to take the risks and employ the services of small cloud storage providers so that their cloud accounts are given enough attention.
Anyway, whether you are dealing with a small or large company, there are highly important questions that you need to ask first before you go get your pen and sign a contract. Voicing out your questions does not mean that you are being picky and intimidating to the cloud storage company but it would greatly help you make a good decision to choose the right one. It is also important that you ask the right questions to be able to gather the appropriate information necessary for decision making. Here are some examples of the questions that you should ask your service provider:
1. What would be the specific roles and responsibility of the storage cloud provider? Will they also be the one in charge in the safekeeping of your account’s system and stored data? If yes then up to what extent? In return, as a user, what would be your role in keeping your account safe?
2. Does the cloud storage provider provide security by encrypting the data while on transit and while at rest?
3. What kind of security measures does the cloud storage provider has set up to destroy any stored electronic materials once they are deemed obsolete by the account holders?
4. Is the cloud storage provider certified for any type of security certifications? Examples of security certifications are SAS 70 Type I and II, and there’s also PCI-DSS? Can the cloud storage provider really prove that their certifications are genuine and authentic? If possible, are you or do you have someone to examine the authenticity of such certifications?
5. Is the security management system of the cloud storage provider regularly audited by recognized bodies? If yes, then how often is the audit being conducted? If no then it’s time for you to move on and look for another service provider.
6. What kind of security measures does the cloud storage provider have put in place to process and monitor any type of data hacking?
7. What is the process being followed by the cloud storage provider when hiring employees, sub-contractors and contractors?
8. If you happen to employ the services of the cloud storage provider, who will have access to your data? Is it only the company or there are powers that be that can also access the stored data on your computer? If there is, what’s the reason why other people can access the data? And up to what extent can this people do with your data? View, copy or edit?
Although the above list is not an exhaustive one, it will still help you in finding the best cloud storage solution.