Data breaches in cloud services
A data breach is the unauthorized access or disclosure of an organization’s data (such as business internal information, customer data, third-party data, and so on). This can result in the exposure of customers’ or employees’ personal data and lead to financial and reputational damage for an organization. Does this mean that storing our data in the cloud makes it more prone to data breaches? It depends on the cloud service model and the maturity of the cloud service provider (CSP). According to the shared responsibility model, when using an infrastructure-as-a-service (IaaS) solution, we (customers) oversee the implementation of most of the security controls over the OS.
In a platform-as-a-service (PaaS) context, we rely on the CSP in terms of OS hardening, patch management, and backups, but it is very common in a PaaS that we can review audit logs and set proper permissions for who has application-layer access to the service...
