Security is the number one criterion for choosing the right cloud provider. Specifically, when evaluating a potential provider, you must ensure that all user access and activity can be monitored and verified. By tracking the use of cloud applications, you can see where most of the activity occurs and identify regular patterns.
A provider must be able to recognize user patterns and flow for those who access a cloud instance and thus alert and stop seemingly unauthorized attempts. It is important to evaluate your contract and know what security responsibilities will be handled by the supplier.
Examine its compliance with standards (for example, ISO 27000). Check your history and see if there are any recorded security breach incidents. In addition, as you progress through the legal and contract processes, make sure that the provider you select follows established cloud security standards. See how they are preparing for LGPD.
Although it is not mandatory for IT technicians to hold certifications, it would be beneficial if they have CompTIA certifications in Linux+, A+, CCNA or MCP. Knowledge of SQL and MAC and Windows OS is essential.
Pay attention to service levels
This consideration is essential when companies have strict needs in terms of availability, response time, capacity and support (which, let's face it, almost everyone does today).
Service level agreements (SLAs) in the cloud are an important element to consider when choosing a provider. It is vital to establish a clear contractual relationship between a cloud service customer and a cloud service provider. There is the cloud SLA and the managed service provider's SLA. They are different and complementary. Be aware of this, as some companies tend to mix the two. A partner who makes it clear what the response time and unavailability of one and the other in a transparent manner is someone who is playing for your success.
Special attention should also be paid to the legal requirements for the security of data hosted on the cloud service, mainly in light of the regulations of the General Data Protection Law (LGPD).
Comments
Post a Comment