Saturday, July 30, 2016

80% of professionals say on-premisis security more mature than "cloud"


Courtesy Doug Cahill blog (ESG Research

Any company selling SaaS will recognize this type of customer concern. 

Of course the reality is that there is no one "cloud".  Maturity and capability will vary across all organizations and industries.  Unfortunately, many risk assessors mistake possession for security.

When assessing risk to adopt a SaaS product, consider..


SaaS provider VS on-premises

 

Technical control

  • Is meaningful encryption provided by the SaaS provider?  What about on-premises?
  • What methods exist to prevent exploitation at the SaaS provider?  How does this compare to on-premises?
  • How well will the SaaS provider profile and understand expected application behavior?  Are on-premises applications profiled and well understood?
  • How quickly can the SaaS provider implement service updates?  How quickly do you upgrade and patch complex on-premises applications?

Security Staff & Focus

  • What is the SaaS provider's incentive and capability to prevent a breach?  How does this compare with on-premises security commitment and capability?
  • What percent of the SaaS organization is devoted to security and control?  How about on-premises?
  • Is the SaaS provider staffed to monitor, defend, and respond to attacks?  On-premises?

Target & Incentive

  • What incentive might an attacker have to breach the SaaS provider?  How about on-premises?
  • What capability to detect or prevent advanced or targeted attack does the SaaS provider have?  How about on-premises?
  • If the SaaS provider is breached, will you be notified?  If on-premises is breached, will you be notified?

Businesses adopting a "Cloud" product are forging a strategic partnership.  The partner must be both capable and trustworthy.

No different than any other potential business partnership, it requires due diligence to ensure mutual alignment.

References:


Doug Cahill: Squirrel! What to chase at Black Hat 2016
ESG Research Report: The Visibility and Control Requirements of Cloud Application Security

12 comments:

  1. hhkkMarch 11, 2026 at 9:55 PM

    Interesting perspective on the common belief that on-premise systems are automatically more secure than cloud environments. Many organizations still assume that keeping data physically inside their infrastructure means better protection, but security really depends on how systems are managed, monitored, and updated. In fact, several studies have shown that many large data breaches actually occur within traditional on-premise environments rather than cloud platforms. Learning these modern strategies through a **Login360 digital marketing course Chennai** can also help professionals understand evolving digital technologies and security trends.

    ReplyDelete
  2. hhkkMarch 30, 2026 at 2:01 AM

    Clear and concise article. Checking out digital marketing training in chennai.

    ReplyDelete
  3. manojMarch 30, 2026 at 11:37 PM

    Great insight on cloud vs on‑prem security — totally agree that security isn’t just about location but mindset and execution! UI UX design course online

    ReplyDelete
  4. hhkkMarch 31, 2026 at 2:12 AM

    nformative and engaging article. I’ve also been researching digital marketing training in chennai</a

    ReplyDelete
  5. hhkkApril 1, 2026 at 1:38 AM

    Thanks for sharing such insights. Also check best digital marketing training institute

    ReplyDelete
  6. hhkkApril 2, 2026 at 1:45 AM

    Thanks for sharing this. It aligns with topics like Data Science or Data Analytics.

    ReplyDelete
  7. Pushpalatha April 9, 2026 at 4:32 AM

    Great read! Designers can improve their craft with the Figma UI/UX Course. Developers should also check out the Full Stack Developer Course in Chennai.

    ReplyDelete
  8. hhkkApril 10, 2026 at 12:26 AM

    Thanks for sharing this Social Media Marketing Course

    ReplyDelete
  9. hhkkApril 13, 2026 at 11:56 PM

    A simple and clear guide. Visit Best Web Design Course for Beginners

    ReplyDelete
  10. hhkkApril 22, 2026 at 2:45 AM

    Loved reading this. Adding these links: How to Become a Data Analyst | Best Digital Marketing Institute in Chennai.

    ReplyDelete
  11. LOGIN360May 5, 2026 at 11:12 PM

    Excellent information shared here. These days industry-ready learning matters a lot, and programs like Data Science Course with Placement with a professional Python course in Kochi can make a difference.

    ReplyDelete
  12. Pushpalatha May 19, 2026 at 4:10 AM

    Great insights shared in this article the discussion around on-premises security and evolving technology trends was really interesting to read. I liked how the content was explained in a simple and informative way without making it overly technical. Posts like these are always helpful for learners and professionals who want to stay updated with industry changes. Keep sharing more valuable content like this!

    Also sharing some useful resources for anyone interested in upgrading their tech and analytics skills:
    Data Science Training
    Data Science Course in Coimbatore
    Data Analytics Course in Coimbatore

    ReplyDelete

Share your thoughts.

Subscribe to: Post Comments (Atom)