Why is it suggested that public clouds aren’t as secure as on prem?

like
Posting as :
works at
You are currently posting as works at

That’s actually not exactly true, especially since public computing has advanced so drastically. Traditionally, anything you can control 100% has been considered “more secure.” Ironically though, many would argue that’s why it ISNT more secure...more room for error, less expertise, resources, etc.

like

The infrastructure may be more secure and the size/expertise of the cloud team more extensive, but it still comes down to the person/team rolling out the virtual systems/apps. No matter which model is your preference, you still need competent people at the controls.

like

This is the correct answer.

like

I would actually argue the opposite. The big cloud providers have armies of people and spend millions on securing their clouds. No way a private client could match that level of investment.

like

Due to unfamiliarity with the security models in place. This ultimately is a reflection of NIH syndrome and “if I can’t touch it, I don’t trust it” mentality.

like

All the capabilities and services to really secure your workloads are available in the public cloud but the problem is most companies / clients are too lazy to understand and apply them. Thus they end up in misconfiguration... leaving their infra or workloads exposed.

like

I specialize in Cloud Security at a large security vendor now. I can confirm what others have said. The cloud is not less secure, people just don’t know what they’re doing. There are different vectors to secure that people aren’t familiar with. A majority of breaches aren’t necessarily breaches but misconfigurations. Microsoft even had some of their own Azure infrastructure misconfigured recently. What I’m seeing is that people just aren’t trained well enough to build and operate in the cloud but there are tons of initiatives from top down to migrate to the cloud. I talk to CISO’s regularly and most are so lost when it comes to the cloud that it’s scary. Advice to everyone: drop what you’re doing and bust you’re ass learning the ins and outs of the cloud. It’ll pay off big time.

like

Thanks C1

It's the perception that "I have control of my network, but not the public cloud." One quick search of on premise data breaches easily disproves this perception

like

Ahh gotcha. Thought there was a technical reason that explained why this myth exists. Couldn’t it be that on prem resources could be paired with a private network? I know public services can create a software defined network.. but inevitably software can fail, correct?

like

“Private” networks are still software-defined. On-prem is usually an excuse to be lazy with security and stick to legacy familiar processes.

like

Also, I appreciate everyone’s responses.

like

The perception that the cloud is something floating around for anyone to grab vs on a machine I control. #stupid

like

Related Posts

Anyone else out there who’s spouse makes them feel worthless most days? I have got to get some kind of medication for this so I can keep working.

For fish in Europe, BCG Principal or Bain Associate Partner ?

Those who have undergone layoffs... Our fallen sisters and brothers... What are the plans now? Would be especially interested in hearing from those not planning to go to another consulting firm.

like

Hi, I'm a new member and I need help. I have 31 likes from my posts and replies but I'm still not able to DM others. I suspect it's the first love icon that needs to be 11. What is this love icon with a count of 10, and how can I earn 1 more?

Post Photo
likesmartupliftinghelpful

Anyone else think summer is the worst season? I like nice weather but hate the heat and sweating immediately. As a guy I also have very few clothing options to choose from.

likefunny

Hi! I started at a new company 2 months ago and while I’m really enjoying my job so far, I’m having a hard time gauging whether or not I’m doing a “good job.” My role seems to be always evolving, which is fine and I actually enjoy being a support to the greater marketing team, but I feel like I need better defined targets to make sure I’m meeting expectations. Also, when I ask my boss what they’d like to see, I don’t ever get a clear answer. (Cont’d in comments)

like

I am about to hand in my notice at a job I am pretty secure in, to go to a job for a relatively new company (with a significant salary increase). Any tips for:

1. Getting over the nerves that are as a result of taking a risk (I am late 30's)
2. The guilt of leaving a role where I have an amazing working relationship with all my colleagues and my boss

Any tips would be appreciated as I am a mess of nerves!!

like

Hi Folks,
Happy Sunday!

Can anyone let me know which companies are good for learning and working on DevOps profile?

Thanks.

like

Moved to Chicago recently, what are some restaurants that I should try?

When you left one Big4 and went to another, did your firm let you work your 2 weeks or make you leave immediately? I’m Tax staff at EY and I’m considering leaving soon; trying to plan accordingly

like

I have offers from both United Health Group and Atlassian for a Senior Financial Analyst position. Similar Comp (Atlassian slightly higher due to stock options). Coming from another healthcare company as a SFA, does anyone have experience at either company? In the long term, does Atlassian look better on a resume/work experience due to the Tech/Software space? Seems like their culture is great, but a much higher work load due to the nature of the company. Thanks! Happy to answer DM's too

like

I’m a junior associate in a corporate group with partners that work in several different industries. I’ve gotten work from every partner in the group. Any advice on how to approach specializing or should I not be concerned with that so early?

like

What is considered a “large” caseload in employment litigation? I work at a large L&E boutique law firm and handling about 14-15 active litigation cases in state/federal court or arbitration. Some of these matters are multi-plaintiff and multi-defendant cases, but none are class actions. This does not include any matters I am handling in the charge stage or in pre-litigation. Not sure if that’s a typical caseload or not?

like

What's a rule you are expected to enforce that you strongly disagree with or are indifferent to. Do you enforce it or take the risk? I move around as a tutor and am currently working with a school that has a ridiculously strict formal address policy. One of my second graders refers to me as "Miss Tutoring (my first name)" - it's about the cutest thing ever and doesn't bother me one bit. We are moderated sometimes and I'm more worried about her getting in trouble than me for not abiding.

like

What are equivalent designations at Deloitte, EY, and KPMG for Senior Associate and Manager (at PwC)

like

After how long we will hear back once online test compelted ?

McKinsey & Company Bain & Company Hi
I am currently looking for a job switch. I have worked for more than a year as a Data Analyst at a start-up. If anyone can help me out with a refferal it will be great.
McKinsey & Company Microsoft Boston Consulting Group Bain & Company Deloitte Deloitte USI

like

Need advice; current employer won’t file h1b extension and visa expires in 3/19. Got an offer and company filed h1b yesterday. Should I join based on receipt or wait for approval?

like

So...should the MLB take away the Atros 2017 title? I say yeah. The fans will still remember it. It just means that the Astros can't do any marketing with it in the future.

like

Additional Posts in Technology/IT Consultants

Anyone with IT project management experience in wealth management/financial services industry, please reach out. At least 3-4+ years of experience

like

Anyone have a recommendation on a good portable monitor to connect to my laptop? Preferably no power cord required and a decent resolution to use with spreadsheets, pptx etc. Thanks!

like
like

EY senior Conusltant in Data Analytics vs ZS Decision Analytics AC. Thoughts on which one would be better, both roles based out of New York. EY is paying more money compared to ZS
for now.

like

Anyone know how DLP software on laptop works in Big4.

Serious question, when does deloitte do annual reviews and promotions?

Hi, I’m in need of some salary negotiation advice (continued)

What Big 4 practices offer the same services as KPMG's CIO Advisory?

like
like

PWC SAP Manager, what is the salary range for 10+ experience. What is the signing bonus?

Anybody pass the AWS Sys OP exam? Any tips?

What tech companies like to hire former tech consultants as Product Managers?

like

I’m constantly switching between the client laptop and firm’s laptop .And every time i have to unplug and plug monitors keyboard and what not. I was thinking of getting a hub for ease. Any recommendations?

like

Are 60 hour work weeks regular for you guys. I personally don’t like putting in anything over 45. What’s the average for different companies and practices

Is oracle cloud selling well? Vs Sap? Vs other cloud ERP?

like
likefunny

Best advice when entering the world of SAP.

Anyone from Deloitte who works on GCP/AWS ML/AI? Would really love to chat and get to know more. Analyst rolling off in the upcoming months.

like

Agile 101 - Seeking tips and advice on a good Agile book, website or deck - I’m helping a group of non-tech people learn about agile and would appreciate suggestions. TIA

like

GDPR/Privacy fishes. In your experience, the DPO team have links/integration with IT or Security depts?

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Send download link to your phone

OR

Scan your QR code to download
Fishbowl app on your mobile

By continuing you agree to Terms of Use and Privacy Policy.

Messaging rates may apply

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal