Encrypt your backup data in the cloud, or risk losing it

In an era marked by the relentless expansion of global connectivity and the rapid evolution of technology, South Africa stands at the forefront of an unprecedented digital revolution. Insights provided by DataReport confirm this development as the number of internet users increased by 357,000 between 2022 and 2023, with internet penetration figures now sitting at 72.3% of the total population of the country. 

This shift, partly due to the need to push past geographical boundaries to engage in multi-national business operations, has led to an increase in the demand for cloud services. However, this surge in cloud adoption has exposed businesses to an escalating risk of cyberattacks, casting a stark light on the importance of securing data.

Understanding Data Vulnerability: The Leaky Bucket Metaphor

When we consider the vulnerability of data and the potential for data loss or compromise, it’s akin to dealing with a “leaky bucket”. In cybersecurity, this analogy conveys the notion that an organisation’s data can be likened to water contained in a bucket – the bucket representing the organisation’s security and defence measures, while the water is the organisation’s invaluable data. 

The holes signify the vulnerabilities and weaknesses within an organisation’s security infrastructure. These vulnerabilities, if left unaddressed, become a target for cybercriminals to gain unauthorised access to sensitive data. The analogy serves as a powerful reminder of the importance of identifying and patching these vulnerabilities, effectively plugging the holes. Neglecting these vulnerabilities can lead to catastrophic data leaks and security incidents.

No Organisation Is Immune to Leaks

A widespread misconception is that cloud services are inherently secure. While cloud service providers invest significantly in robust security measures and offer comprehensive tools to protect data, security in the cloud is a shared responsibility between the provider and the customer aka data owner. 

This misconception has led to a false sense of security, causing many organisations to neglect their own responsibilities in ensuring data protection. This in turn has contributed to cyber-attack spikes. In correspondence, the Veeam Data Protection Trends Report 2023 found that  85% of global organisations surveyed were suffering from at least one ransomware attack in the last 12 months, so that it is clear more must be done to protect and secure our cloud data to ensure resilience. 

Global cloud security breaches from companies such as Facebook and Alibaba serve as a stark reminder of the real-world consequences of cloud data breaches. To address security challenges effectively, the shared responsibility model is recommended. This approach mandates a clear delineation of roles and responsibilities between cloud providers and customers and the imperative that both parties understand and uphold their obligations to ensure comprehensive security.

The pace at which new services are adopted by businesses often leads to an eagerness to be the “first” to launch and adopt these technologies, but this eagerness can sometimes result in a neglect of best practices and security measures. Therefore, there exists an onus on business leaders to consistently prioritise the best course of action for protecting their cloud-stored data. It is only through this vigilance and commitment to data security that organisations can effectively thwart the leaks in their “buckets” and safeguard their invaluable digital assets.