Who actually does have access to the data or the hardware the data is stored on Cloud?


This will be determined by the nature of the cloud service offering one select. A cloud service provider will almost certainly have access to the hardware on which data is stored, but one effect of virtualized storage is that access to hardware generally does not by itself provide logical access to stored data. It is the contracts with your preferred cloud service providers limit access to authorized personnel and provide for specific procedures to be followed (and strict limitations governing)  when preferred cloud service provider personnel or contractors access your data. No matter where your data is stored or accessible, it is always possible that a regulator or court of competent jurisdiction might attempt to access data (a) maintained on a service provided by a cloud service provider that is within its jurisdiction, (b) accessible by a cloud service provider or third party within its jurisdiction or (c) maintained on computing equipment within its jurisdiction.

In appropriate circumstances, where particularly sensitive data is involved, you may wish to consider encrypting cloud-based data using strong encryption with keys that you, rather than the cloud service provider  maintain. 

Comments

Post a Comment

Popular Posts

Citrix's XenConvert Software

Some known problems while using Citrix's XenConvert Software. This section describes known problems for the XenConvert software. Wherever possible, a workaround for the problem has been tried. Converting a Workload with Files in Use XenConvert cannot copy a file in use by another application or service. To ensure that the file is included in the conversion, stop the respective service before starting the conversion. It is not recommended to convert a workload executing a critical service that keeps critical files open that cannot be stopped (such as a Domain Controller with Active Directory service).Mapped Network Drive Can Interfere with Conversion If a network drive was mapped to the next available drive letter (e.g. F: when last local drive was E), then XenConvert is unable to get the drive letter for the new VHD that it just created, mounted, and formatted because Windows assigned it to the same drive letter as the network drive. See http://support.microsoft.com/kb/297694/ for ...
Read more

Information Security Enterprise Architecture

Image
We strive to focus on architectures, methodologies, best practices and the latest technologies designed for proactive strategies that can be used for reducing the IT security risks and meeting the new security challenges. Well, I decided to write this blog inspired by Gartner's information security model. Infrastructure Protection The technology infrastructure is a fundamental to security and it must be fundamentally secure. Enterprises must prevent and limit damage to their business operations by deploying policies, processes, and technologies to detect and block attacks – both internal and external. We endeavour to minimize the vulnerabilities that enable attacks. The enterprise threat environment is changing rapidly, as are the approaches, applications, and technologies enterprises use to engage customers and partners. Therefore, the strategies must change with them. I believe the right approach is to focus on the processes, technologies, and services needed to protect data, app...
Read more

Phishing Attacks Through Bot Nets to Steal Millions of Dollars Online

Rock Phish attacks account for 50 percent of phishing incidents and have stolen “tens of millions of dollars” from bank accounts. This is the first time crimeware has been used in a Rock Phish attack. The victims of these phishing attacks get their personal data stolen and are infected by the Zeus Trojan, which is even worst for victims. In 2004 it was the first (and, for a long time, they were the only) gang to employ bot-nets in its phishing infrastructure in order to make the attacks live longer and be more scalable. It also pioneered new techniques in its spam mails so the mail could more easily evade spam filters. Within the past few weeks there has been a new advance — the inclusion of identity theft malware (or Crimeware) into the Rock group’s phishing attacks. While the term "botnet" can be used to refer to any group of bots, such as IRC bots , the word is generally used to refer to a collection of compromised computers (called zombie computers) running programs, usua...
Read more

Vikas Sharma

Senior AI & Digital Transformation Advisor  |  AI Governance  |  Enterprise Architecture

🏠 Home LinkedIn Medium DigitalWalk X YouTube Email

sharma1vikas ©2026  |  Content for educational purposes only. Not professional advice. Information from public sources — verify independently. Views are author's own.