The document discusses three common myths about cloud security. Myth 1 is that cloud technology is still in its infancy, but the document explains that cloud technology originated in the 1970s. Myth 2 is that physical security keeps data safe, however strict access rights, data stewardship and governance provide the greatest defense. Myth 3 is that cloud security is solely the provider's responsibility, but users must also implement corporate policies to ensure compliance.

1. The Top Three
Cloud Security Mythbusters
Part of Capita plc

2. The rise in global cyber-attacks
has forced businesses to question
the security of public cloud.
Part of Capita plc

3. In fact...
79%of CIOs find it a
challenge balancing the
productivity needs of
employees against
potential security threats.
Part of Capita plc

4. The reality is that any system has
vulnerabilities which can be exploited.
But the way businesses plan and mitigate
risk are the keys to success.
Part of Capita plc

5. Here are our
top three mythbusters
on cloud security:
Part of Capita plc

6. Myth #1
Cloud technology
is still in its infancy
Part of Capita plc

7. Cloud has brightened our skies for much longer than it is given
credit for. In fact, cloud technology can be traced as back as far
as the 1970s.
The rapid pace of cloud development, coupled with a realisation
of what cloud can do for businesses has thrust it into the
limelight in recent years.
Mythbusted
Cloud technology is still in its infancy
Part of Capita plc

8. Myth #2
Physical security
keeps data safe
Part of Capita plc

9. It is a common misconception that having data stored
on-premise on your own servers is the best form of protection.
However, the location of data is not the only factor to consider.
The greatest form of defence you can deploy with cloud is a
combination of strict access rights, diligent data stewardship
and strong governance.
Mythbusted
Physical security keeps data safe
Part of Capita plc

10. Myth #3
Cloud security is the
provider’s responsibility
Part of Capita plc

11. A provider can have all the security certifications in the world,
but businesses still need to implement their corporate policies
to ensure compliance.
This is crucial, as many cloud end-users often ignore policies;
indeed, 60% of employees in organisations with cloud usage
policies admitted to ignoring them.*
Concerns around cloud security can stem from negligence
when enforcing rules – which is an area that providers are
unable to influence.
*Trustmarque, Office Worker Cloud Usage & Risk Report 2015
Mythbusted
Cloud security is the provider’s responsibility
Part of Capita plc

12. There is no doubt that cloud will underpin
business operations for many years to
come, and the speed at which it is
evolving can understandably cause a few
teething problems.
Part of Capita plc

13. It is the responsibility of providers and
clients alike to take ownership of their
own elements and apply security policies
which are right for their business, their risk
profile and the data which they hold.
Part of Capita plc

14. Working with an experienced partner can often
be a way of simplifying the journey to cloud.
If you’re looking for help with a cloud migration
contact Trustmarque on 0845 2101 500 and
talk to one of our experts to find out more.
Part of Capita plc