{"id":2209,"date":"2021-10-09T00:00:00","date_gmt":"2021-10-09T00:00:00","guid":{"rendered":"https:\/\/www.thermofisher.com\/blog\/analyteguru\/cloud-security-part-1-what-are-cloud-service-providers\/"},"modified":"2024-02-14T22:13:12","modified_gmt":"2024-02-14T22:13:12","slug":"cloud-security-part-1-what-are-cloud-service-providers","status":"publish","type":"post","link":"https:\/\/www.thermofisher.com\/blog\/analyteguru\/cloud-security-part-1-what-are-cloud-service-providers\/","title":{"rendered":"Cloud Security Part 1: What Are Cloud Service Providers\u2019 Responsibilities?"},"content":{"rendered":"
\n

\"091021<\/span><\/p>\n

“Is the cloud secure?” – The most frequently asked question by anyone thinking of moving an on-premise application to the public cloud.<\/p>\n

In much the same way an application like Thermo Scientific\u0084\u00a2 Chromeleon\u0084\u00a2 Chromatography Data System (CDS<\/a>) can be configured and operated in a secure and compliant way, the cloud can be configured to provide security. Cloud service providers (CSP) operate a shared responsibilities model, making it clear who is responsible for the security of different parts of the cloud. Responsibilities also depend upon the cloud delivery model used.<\/p>\n

\"\"<\/p>\n

Chromeleon\u0084\u00a2 CDS can be deployed in the cloud using Infrastructure as a Service (IaaS), where the CSP is responsible for the security of the cloud and you are responsible for the security of everything inside the cloud. For example, user access, data, applications and network traffic.<\/p>\n

However, CSPs are by no means washing their hands of you and your security. They offer best-practice advice, applications and services that can be used to manage identity and access controls, monitor activity and improve security.<\/p>\n

Security of the cloud<\/strong><\/h3>\n

Security of the cloud is like an onion or an ogre \u0080\u0094 they all have layers.<\/p>\n

\"\"<\/p>\n

When CSPs discuss \u0080\u009dsecurity of the cloud\u0080\u009d they don’t just mean the efforts they make to protect the cloud from hackers, they include all measures taken to prevent system failure, so you don’t lose access to their services.<\/p>\n

Perimeter security layer <\/strong><\/h3>\n

This is all about protecting the physical server farms where the cloud is hosted. There are no public tours of cloud data centers and they are generally housed in non-descript buildings. Security guard- monitored CCTV provides an outer layer of protection. Site access is controlled and logged so only authorized personnel are allowed in, and there is a record of who accessed a data center and when.<\/p>\n

Following the principle of least privilege, access to areas and information is restricted; individuals must have a legitimate business need to be granted specific privileges and physical access to server infrastructure.<\/p>\n

Sound familiar? This is the equivalent of what you can do with Chromeleon\u0084\u00a2 CDS administration. Defining roles and responsibilities giving the minimum privileges and access required to carry out legitimate tasks.<\/p>\n

Environmental layer<\/strong><\/h3>\n

Unlike Bond villains and criminal masterminds, CSPs don’t usually place their data centers inside active volcanoes. In fact, they try to select locations that mitigate environmental risks such as seismic activity, extreme weather, and flooding.<\/p>\n

Applications can be deployed across multiple availability zones within a single region so, if the worst does happen, you can continue to use your application from a different data center in the same region. After all, being a CSP doesn’t make you immune to disaster.<\/p>\n

Unsurprisingly CSPs have business continuity plans and regularly test these against \u0080\u009dwhat if\u0080\u009d scenarios.<\/p>\n

\n\n\n\n
\n

“Everything fails all the time, so plan for failure and nothing fails.”<\/em><\/span><\/strong><\/span><\/p>\n

— Werner Vogels, VP & CTO, Amazon.com<\/span><\/strong><\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Effective planning ensures that system failure is minimized and, if this does occur, then the means for quick recovery is possible.<\/p>\n

Infrastructure layer<\/strong><\/h3>\n

The infrastructure layer is a hardware life support system consisting of structural components like backup power, heating ventilation and air conditioning (HVAC) systems, and fire detection and suppression equipment.<\/p>\n

Infrastructure systems are routinely monitored, and preventative maintenance performed, minimizing downtime of both server and support infrastructure.<\/p>\n

Human resource <\/strong>layer<\/strong><\/h3>\n\n\n\n
\n

“Companies spend millions of dollars on firewalls and secure access devices, and it’s money wasted because none of these measures address the weakest link in the security chain: the people who use, administer and operate computer systems.\u0080\u009d<\/strong><\/span><\/em><\/p>\n

— Kevin Mitnick, cyber security consultant <\/span><\/strong><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

People are the weakest link in the security of any system, whether this is accidental or malicious. This is true for any organization, including CSPs.<\/p>\n

How many of us have received a phishing email? Did you recognize it and report it? Hopefully you don’t write your passwords down on a sticky note and place it on the bottom of your keyboard?<\/p>\n

This layer of cloud security attempts to address the human weak link. Examples of human resource security measures include:<\/p>\n