Electricity + Control December 2018

NOT TO BE MISSED

Moving safely to the clouds T he cloud presents opportunities for companies to improve the availability and accessibility to data resources. Cloud storage is also more scalable, allowing companies to accommodate ev- er-growing data volumes easily and cost-effectively. While cloud-based data centres are less risky than on-premises data centres from a security perspective, they are not without risk. “Cloud-based data centres require a similar approach to security as on-premises data centres, yet companies tend to neglect to secure their cloud-based services. There is a clear segregation of re- sponsibilities for cloud service providers and the companies using those services. Companies cannot rely solely on the service provider to secure their data in the cloud. “Similar to on-premises data centres, cloud-based services require configuration and should not be considered a plug-and-play solution. Authenticating the identity of users and managing their ac- cess privileges are also important. These aspects are the organisation’s responsibility and not the cloud service provider’s,” says Charl Ueckermann, CEO at AVeS Cyber Security. He continues: “Cloud-based data centres still have a physical base in a physical location some- where. Companies subscribe to the service providers that own these physical data centres. It is up to the cloud service provider to secure the CIA (Confidentiality, Integrity and Availability) of the physical data centre, wherever it may be. This includes securing the actual hardware such as the servers and routers against threats like theft, natural disasters like fires or floods, power failures, and unauthorised access. “In fact, there are various security and privacy standards that cloud providers must comply with in order to provide cloud services to markets across geographies and industries. Some of the more well-known standards include ISO27001, the EU’s GDPR, and the USA’s HIPAA. This serves as the assurance to companies that they have got their security covered. “It is then up to the subscribing company to ensure that the type of data and services housed in the cloud, as well as who has access to it and what type of access they have, is managed. Simply put, if you are using a cloud-based data centre, you need to have control over what type of data goes to the cloud, what type of services come from the cloud, and who can use it. It is recommended to conduct a comprehensive Hybrid Security Gap Assessment to find the security loopholes between your provider’s security measures and your own. This will help to direct you in addressing any secu- rity issues on your side.” Other considerations for the effective protection of data in the cloud include defining the types of devices and connections that users can utilise to access cloud-based resources. Accessing the data cloud via an unsecured Wi-Fi connection or using a public computer or one that does not have appropriate endpoint security can put data at risk. “It all sounds a little overwhelming, but it doesn’t have to be. Protecting data in the cloud is quite similar to securing information in a physical data centre onsite. It just cannot be neglected. And once you are up and running, cloud-

SAUPEC/RobMech/PRASA Conference 28 – 30 January 2019 Central University of Technology, Bloemfontein Advancing the knowledge and understanding of power. Enquiries: Gerda Geyer. Tel. +27 (0) 11 487 9043 or email gerdag@saiee.org .za Robotic Process Automation Conference 31 January 2019 Gallagher Convention Centre, Johannesburg The Robotic Process Automation Conference focuses on the Robotic Process Automation (RPA) technology, which is the next frontier for businesses looking to streamline processes, increase productivity and ultimately improve the bottom-line. Enquiries: www.rpaconferences.com

Mining Indaba 4-7 February 2019

Cape Town International Convention Centre Championing Africa’s sustainable economic growth. Enquiries: Visit www.miningindaba.com

Africa Automation Fair Ticketpro Dome, Johannesburg 4 – 6 June 2019

Africa Automation Fair will host the second edition of the Connected Industries conference in line with growing international focus on the ‘The Fourth Industrial Revolution and the ad- vanced, connected industries of the future. Enquiries: Tel. +27 (0) 11 549 8300 or email info@africaautomationfair.com

based data storage and services offer numer- ous advantages over on-premises options from accessibility, agil- ity, and performance perspectives, while remaining secure.”

32 Electricity + Control

DECEMBER 2018