Is your data safe in the cloud? - Arkivum

Blog / 22 Jun, 2021

Is your data safe in the cloud?

Regardless of industry or organisation size, a misconception we often hear is that an on-premises solution for data storage is safer than the cloud. We are speculating here, but broadly I think this can be put down to the notion of, if you can see it, you have more control over it.

Over recent years, organisations are generating increasing amounts of data and will likely continue to do so. As such, where and how this data should be stored has also grown complex. With different technology options available – all with seemingly great credentials, uses and benefits – how can you decide on the optimum choice for your organisation?

Throughout this blog, we’ll try to provide some clarity on these different approaches to data storage.

Let’s begin with on-premises

An on-premises solution involves physically storing your data and assets in their entirety within your organisation’s geographical or physical location. For some, holding data on-site will provide some peace of mind because it can feel like it’s more under their control than other options, whether that takes the form of the configuration, upgrades or system changes which also allows for customisation and added functionality, if desired.

Storing your data in this way can either be managed by your organisation or by a third party but it’s worth noting that this choice of deployment can be a costly approach in terms of both upfront costs and ongoing maintenance and upgrades.

An on-premises deployment also poses questions regarding security and long-term management of data:

  • How are you securing this system?
  • How are you maintaining it?
  • Will you need to upgrade hardware in the future? What would that cost?
  • If one of your discs fails in your data centre, who will change it and ensure data loss doesn’t happen?
  • How will you scale the solution as your requirements change?
  • How is it protected in that one location from natural disasters, such as flooding?
  • What processes do, or can you put in place to protect against data loss, corruption or file format obsolescence?

 
We would highly recommend organisations to challenge themselves to move away from an on-premises deployment unless it is absolutely essential. Below we will explore some of the other options available.

Will cloud become the only option?

Moving away from on-premises leads us onto the cloud. It’s worth noting that there are two options for a cloud-based solution, and they are the public cloud and private cloud but for intents and purposes of this article, we will drill down into public cloud for you.

  1. Public cloud is the most common type of cloud deployment. All of the infrastructure, hardware and software associated with cloud provision are owned by an external party (e.g. Microsoft Azure, Amazon Web Services (AWS) and Google Cloud Platform (GCP)) and is therefore maintained by them.
  2. A private cloud (also known as an internal cloud or corporate cloud) is dedicated solely to your organisation and can either be located at their on-site data centre or can be hosted by a third-party vendor. This shares many similarities with an on-premises deployment discussed above.

Benefits of public cloud:

Perhaps its prominent benefit is that it scales in line with data storage requirements. If you need to expand or reduce your data allowance, the cloud can scale accordingly, keeping your costs down, so you only pay for what you store – offering a Pay-as-you-go quality. Whereas, if you were to opt for on-premises, you could invest rather substantial CAPEX budget into your own servers and maintenance, and end up not needing all of that storage space.

Additionally, opting for a public cloud will also reduce costs as the maintenance and updates are conducted by your provider.  Not only will this negate the costs from being incurred by your organisation, but it will also be your vendor’s headache to sort out.

Other benefits include:

  • Quicker file recovery.
  • Any of your team can access the stored assets as long as they have an internet connection and permitted user access – which also makes it a fantastic tool for increasing cross-company collaboration.
  • Public cloud can sometimes offer better performance with improved speed and space capacity.
  • High reliability as providers will have a vast network of servers to protect against failure.

 
Cloud storage arguably is a much more sustainable approach. Cloud providers operate at a scale unobtainable by an individual organisation and hence are able to achieve greater efficiencies and savings. This is not to say all cloud providers are necessarily ‘green’, but many are moving towards a carbon neutral approach. If you would like to read more about the this, our CTO Matthew Addis wrote a more in-depth article for the DPC.

Challenges of public cloud:

  • You could potentially be required to purchase additional software to enable access to, and transfer of data (you should query this with your potential provider).
  • Challenges may arise when quick retrieval of data is required depending on the level of storage you’ve archived an asset under. For example, if you have stored a piece of data within deep storage because you didn’t think you’d need quick access to it and then for an unforeseen reason you need it asap, this may prove difficult.
  • Limited customisation options.

Perhaps a hybrid solution?

It may be that a hybrid approach is ideal, whereby on-premises infrastructure or private cloud is combined with public cloud. The main benefit in an organisation opting for this approach would be if they have particular requirements of which a private or public cloud could not guarantee.

As it utilises elements of public cloud, an organisation would still benefit from a scalable solution, cost-efficiencies and user access. Additionally, it would also benefit through its use of private cloud, namely that it provides a high level of security and privacy to data through firewalls and internal hosting. It also ensures that operational and sensitive data are not accessible to third-party providers.

However, a hybrid option also presents additional complexities, including:

  • It may prove challenging to keep on top of what is being stored where, and which cost can be attributed to which solution.
  • Infrastructure concerns can arise as you manage and operate a mix of private and public cloud architecture.

 
In relation to security, there is sometimes a misconception that because an on-premises solution is private (i.e. not connected to the outside world) it’s safer than public cloud but this isn’t necessarily the case. Just because something is inaccessible from an external network, doesn’t mean it’s 100% safe – someone could still gain access, or an employee could make a mistake or click on something and unwittingly provide access to an outsider. Cloud providers have their own security measures in place as well as industry certifications and accreditations to prove their systems have been developed with their customer and/or security at its centre (e.g. ISO certifications).

Decision time

Hopefully the above comparisons have shed some light on the pros and cons of each approach and have addressed data security concerns. Whilst we cannot make the decision for you, it’s worth reiterating that not only should your IT storage system be fit for purpose for your organisation’s requirements, but it should also be reliable, resilient and affordable.

Whichever solution you opt for, it must work with you and your team and make your processes easier, quicker and more efficient.

If you’d like to discuss your requirements in more depth, please contact us today.

Harriet Clark

To receive our latest news and blogs straight to your inbox, please enter your email address.

Follow us on