The cloud may sound heavenly, but organizations that neglect to secure their data there may find they have been breached. No matter which type of cloud models are being used, it is cloud customers who are responsible for securing their data.
The “cloud” is simply a data center, or a conglomerate of centers, that may be anywhere in the world. Your organization’s data could already be in one or more clouds with or without your knowledge, as employees could be using unsanctioned clouds, such as DropBox or QuickBooks. To secure data there, as well as in clouds you have sanctioned, you’ll need to use cloud tools and cloud services provided either by your cloud service provider (CSP) or by a third-party vendor.
