Securing your data is a key component and strong enabler in making a successful transition to the cloud. Your data in the cloud can come with significant risks that require a well thought-out strategy that will reduce the risk of a data breach.

Organizations thinking about migrating part of their operation to the cloud should develop a risk-based strategy to secure their data based on both leading security practices and regulatory requirements. If you are subject to regulatory compliance such as the Health Insurance Portability and Accountability Act (HIPAA), the Payment Card Industry Data Security Standard (PCI/DSS) and state data privacy laws to protect various types of information, you are responsible for meeting that regulatory requirement if it resides in the Cloud. The HITECH Act for HIPAA has specifically included the role the service provider with a responsibility to secure Protected Health Information (PHI). Trusted boundaries have moved, and customers are unsure where the boundary exists. Organizations should assess legal, organizational, operational, technical and security risks prior to placing information into the cloud. Knowing the geographic location of your provider’s servers and your data is critical to meeting your regulatory compliance requirements.