a top 100 law firm managing data risks in the cloud frank jennings
TRANSCRIPT
A Top 100 Law Firmwww.dmhstallard.com
Managing data risks in the cloud
Frank Jennings
www.dmhstallard.com DMH Stallard LLP
Key questions
Where is the data going?
What should be put in place?
Who can access it?
How can you restrict access?
www.dmhstallard.com DMH Stallard LLP
Concerns over cloud computing
• Data privacy – 69%
Source: Cloud Industry Forum “UK Cloud adoption and trends for 2013”
• Data security – 82%
• Data sovereignty/ jurisdiction – 33%
www.dmhstallard.com DMH Stallard LLP
Benefits of controlling data
Reputation
Security
Fines
• Sony PlayStation Network
• JSF-35 data
• UK ICO & FSA
• 2012 - Apple IDs
• 2011 - Sony PSN
• 2012 - Blizzard data
• 2009 - F35 JSF• 2012 - NHS
£325k
• 2009 - HSBC £3m
www.dmhstallard.com DMH Stallard LLP
Where is the data going?
www.dmhstallard.com DMH Stallard LLP
Who has the data?
Private cloudHybrid cloud
Public cloud
Cloud provider
Customer
www.dmhstallard.com DMH Stallard LLP
Who can access it?
Customer
Cloud provider
Governments
Third party IT consultants
Mobile networks
Cloud channel reseller
www.dmhstallard.com DMH Stallard LLP
How can you restrict access?
• Levels of access for different data
• Manage data proactively
• Payment / security measures
• Keep key data in hybrid cloud?
www.dmhstallard.com DMH Stallard LLP
What should you put in place?
Data strategy
Identify cloud
Segregate data
Need to know
Audit the data
www.dmhstallard.com DMH Stallard LLP
For more info, see our report
www.dmhstallard.com DMH Stallard LLP
Questions?Frank Jennings, Partner, DMH Stallard LLP
020 7822 1523
www.dmhstallard.com
@frjennings