Are You Comfortable With Storing Sensitive Data in Third-Party Environments?
Credit: Ivan Walsh
The web has become a playground for hackers and malcontents eager to phish, defraud and steal wherever and whenever they can. Policing this landscape is a logistical nightmare, and battle lines are being drawn and redrawn many thousands of times a day – which perhaps hints at why many of us are still uncomfortable with the idea of storing sensitive data in third-party environments.
That unease is only likely to have increased following the recent data breach in Sony’s PlayStation network, which compromised the personal data of more than 100 million customers of the Japanese electronics giant. This and other high-profile security snafus, such as a massive outage at Amazon’s cloud computing centre, have caused some businesses to put the brakes on plans to move their operations into the cloud.
Read Related News: Is the Cloud Up in Smoke?
In a 2010 report by the Ponemon Institute in California, a mere 33 percent of the 1000 IT professionals surveyed trusted the security of cloud-hosting data centres. What’s more, such skepticism seems justified: in a more recent study released last month, Ponemon found that providers of cloud computing resources are not focused on security in the cloud. Rather, their priority is delivering the features their customers want, such as low-cost solutions with fast deployment that improve customer service and increase the efficiency of the IT function. “As a result,” says the report, “providers in our study conclude that they cannot warrant or provide complete assurance that their products or services are sufficiently secure.”
Such findings highlight a concern many technology executives share: will external software providers have the firm's best interests at heart?
Nonetheless, given that a report published by the Centre for Economics and Business Research suggests cloud computing will allow financial services business to break free from the shackles of old legacy IT, generate some US$250 billion and create a staggering 207,000 jobs, technology and finance executives – along with their colleagues in legal, business and other related departments – will need to work together to eliminate such concerns. Much of this work has already begun: CEBR’s Cloud Dividend report predicts that 60-80 percent of all businesses in the banking, financial and business services sector will have adopted some form of cloud computing by 2015.
As such, as technology evolves – and despite the potential for further security breaches in future – comfort levels with the cloud environment are likely to increase in time as security concerns are addressed. “
Scott, too, is optimistic that these are just kinks that will work themselves out with time.

Ensuring security in a cloud-based environment will no doubt be top of the list of issues delegates will be discussing at the FST Summit Europe Summit 2011, which takes place from 4-6 October at The Oitavos, Cascais in Portugal. This closed-door summit, hosted by GDS International, attracts some of the leading voices in the European financial services technology sector; previous summits have featured insight from the likes of Thierry Pecoud, Global CIO of Equities and Commodities Derivatives at BNP Paribas; Guido Ravoet, Secretary General of the European Banking Federation; and Markus Schulz, Chief Compliance Officer Global Life and Group Head of Financial Crime at Zurich Financial Services.
Along with information security, other key topics for discussion include enterprise fraud management, mobile financial services, the changing role of the CIO in financial organisations and how to handle market data.
FST Summit Europe 2011 is an exclusive C-level event reserved for 100 participants that includes expert workshops, facilitated roundtables, peer-to-peer networks and co-ordinated meetings.