Cloud computing is becoming a popular IT tool for both business and personal use due to its productivity, security and economic advantages. Cloud computing offers IT applications, infrastructure and services over a network that is, in many cases, owned and operated by a third-party service provider. This service provider invests heavily in infrastructure and then shares its resources among many clients. This outsourcing helps reduce the cost and maintenance of IT services and infrastructure for businesses. Think of the cloud as a large data centre that hosts a variety of computing services to help facilitate IT and business operations. To simplify, cloud computing can be compared to public utilities that deliver commodities such as electricity. Instead of buying and running infrastructure itself, an organization buys computing power from a provider. Much like electricity in a home, cloud computing is on-demand and the consumer pays for what they use.
Canadians continue to demand IT-enabled government services. These increasing demands for technology can only be met by implementing relevant and practical solutions, such as cloud computing. The Government of Canada is keeping pace with emerging cyber trends by moving towards cloud-based technologies. The Government of Canada’s Cloud Adoption strategy bridges the gap between the supply and demand for cloud services, and provides a consistent approach to managing the risks of cloud adoption. The objective is to prepare the IT workforce for cloud adoption by making services more accessible and efficient for government departments and Canadians.
As with any IT service provider, organizations must be able to trust new technology before they integrate it into their daily operations. Leading cloud service providers build their business models around trust, with a focus on securing customer data. Although cloud providers follow security standards, it’s important to remember that those standards are not always Canadian and may not necessarily reflect the organization’s security needs here in Canada. Understanding the risks when choosing a new IT service provider and identifying business requirements can help organizations assess the acceptable level of risk with their cloud service provider. The Cyber Centre is working hard to make sure there are no gaps between cloud security standards and security requirements for businesses operating in Canada.
The adoption of cloud has progressed at a different pace in each department. In November 2017, the Government of Canada issued the Direction on the Secure Use of Commercial Cloud Services: Security Policy Implementation Notice and the Direction for Electronic Data Residency. These directions allow for Protected B data to be hosted in the public cloud.
Over the next few blogs, the Cyber Centre will take readers through a variety of different cloud-related topics, address the benefits and risks associated with cloud computing. This series aims to improve your understanding of cloud technology, its security features and how it can apply to everyday personal use and business operations.