If you use a cloud provider for your application and infrastructure needs, tell me quickly: Where is your data? Don’t feel bad if you really don’t know, most people and organizations have no idea where their data actually resides.
There are security implications the moment you move your data off site and use any outside hosting or cloud provider. How do you protect it from malicious attempts to access? In many cases, your efforts at securing that data may be falling victim to the security conversations that are not happening.
Where is it? Physically, where does it reside? That sounds like a loaded question because we all know, in the cloud, it could be anywhere at any time. However, in the case of sensitive corporate or personal data, that could be a problem, right? At any given point in time, the data for your application and the customers that use it is physically somewhere in a data center on one or more physical disks of some kind. A quick look at AWS, for example, provides information about the Availability Zone and Region that an application and its data is in, but nothing specific as to location. (more…)