Data protection in the Cloud and optimal Vendor Fit

Many organisations work from the Cloud. This allows employees to work independent of location and time, economies of scale are realised and it is no longer necessary to have all the technical knowledge in-house. Working with a Cloud solution is a form of outsourcing where all data, software and hardware are stored on a server instead of on your physical computer. This server can be located anywhere in the world, giving you browser-based access to your data. Only an internet connection is required.

But how do you ensure that the sensitive data that customers share with your organisation remains protected? And how do you demonstrate that you are in control? Data security is the main risk of working in the Cloud. What legislation applies to your data if the data centre is located in another country? Do you retain ownership of your data if it is managed elsewhere? And how do you ensure no one has access to your data?

With Cloud solutions, it is essential to think carefully about these issues before selecting a vendor and signing the contract. This concerns the Technical Fit. Think about ownership, but also about recording agreements made in a Service Level Agreement (SLA) and a timely exit strategy.

For example, consulting firm Improven selects on the basis of a 'use case methodology' at all times. This is a pragmatic approach, which consists of both the Technical Fit and the Organisational Fit focusing on processes, users, strategy, supplier, price and data. Prior to a selection process, Improven carries out an assessment to support the requested Business Case.

Questions about data security? If so, please contact Kevin Hermes at kevin.hermes@improven.nl or 06 83 06 45 01.