Should You Back Up Enterprise Data to the Cloud?

Joe McKendrick
Insurance Experts' Forum, August 18, 2014

For individual consumers, the value of cloud-based backup sites — such as Dropbox, Box, Carbonite, and Microsoft OneDrive — can become apparent very quickly, especially if one's PC hard drive crashes. The idea of backing up files and pictures in the cloud takes a way a lot of worries.

But is cloud backup a good bet for the enterprise? At first glance, it would seem like a logical choice, given the risks of maintaining critical data in one data center. However, security enters the equation, and there's often concern about what happens to data that is managed on someone else's site. It may not even be clear where the actual physical site is located. This can be problematic, because in some areas, such as the European Union, it's illegal to store data outside of the borders of the federation.

Data security is one risk, the other is the capabilities and the business viability of the cloud provider. If the cloud provider experienced a prolonged outage, or if it suddenly folded and went out of business, a lot of valuable and sensitive corporate data may go with it.

The best bet for on-premises data is to employ cloud as a back-up option. Conversely, the best bet for cloud-based data may be to back it up on-premises.

With these risk factors in mind, Bastiaan van Driel, who works for a cloud backup vendor himself (BackupAgent), provides a list of key questions every enterprise needs to ask before adopting cloud as a backup resource:

  • Is my backup secure? At a minimum, data should be encrypted and compressed, preferably before it goes to the outside site.
  • What happens when we reach the maximum storage capacity? This requires an upgrade of service, and customers need to be aware of the pricing boost that goes along with it.
  • Can I make a backup of several versions of my files? This requires some explaining. “Most online backup providers work with retention policies,” van Driel points out. “For example, if you make a backup once a day and retention is set on 30 days, the backup up data will have up to 30 versions. On the 31st day after the backup has run, the oldest version expires and is removed.”
  • How do we know whether a backup was successful? Customers should receive a notification if a backup isn't completed or it has failed.
  • Where is our data being stored? This may be an issue due to government regulations in various countries. The cloud provider should have multiple backup locations.
  • What happens when a cloud service is terminated? Not addressed in van Driel's overview is the matter of what happens to data in service agreement terminations. Contracts should call for data being turned over to customers within 30 days. However, there is a risk of the data being eliminated or locked away. This needs to be discussed up front.

Ultimately, as is the case with everything cloud, data security is the responsibility of the customer — it is not something that can be outsourced to the cloud. If a cloud backup storage provider can't guarantee security and availability, the onus is on the customer to either find a cloud provider who can offer such service, or bring it all back in-house.

Joe McKendrick is an author, consultant, blogger and frequent INN contributor specializing in information technology.

Readers are encouraged to respond to Joe using the “Add Your Comments” box below. He can also be reached at

This blog was exclusively written for Insurance Networking News. It may not be reposted or reused without permission from Insurance Networking News.

The opinions of bloggers on do not necessarily reflect those of Insurance Networking News.

Comments (1)

Thanks Joe for such a good write up and inspire people to think about cloud backup. But as an IT consultant, I have a different view to yours. I'm quite happy to encourage people adopting cloud backup, IF they use a correct tool to do so.

1. "Is my backup secure?" With a well developed backup software with good implementation of encryption feature, it can pretty much ensure the security of the data.

2. "What happens when we reach the maximum storage capacity?" If data is backed up the enterprise class cloud storage, such as Amazon S3, Google Cloud Storage, you won't need to worry about the ceiling of your storage, as there's is essentially no ceiling.

3. "Can I make a backup of several versions of my files?" A good backup software would provide with the versioning feature. Most of them would allow keeping unlimited number of versions.

4. "How do we know whether a backup was successful?" The software can tell you. Some software can perform data integrity checking for you. If you still worry about the successfulness of the backup, you can try restore the backed up data periodically for checking. But I wouldn't do so as I trust my selected software.

5. "Where is our data being stored?" Amazon S3 and Google Cloud Storage will let you know where their cloud servers are located and you can choose the geographical area that you preferred to store your backup data at.

6. "What happens when a cloud service is terminated?" The software I used allowed me to simultaneously back up to multiple cloud storage, so that even if Google Cloud Storage is terminated, I still have the data stored on Amazon S3. I can add other storage such as Microsoft Azure, or my FTP site as the destinations if I want, but currently backing to Amazon S3 and Google Cloud Storage is good enough to me.

Software such as Cloudberrylab, Zmanda and CloudBacko can do the things I mentioned here. But I finally settled with CloudBacko. Take a look at these solution and see if they can change your point of view. Cheers.

Posted by: Robert F | August 21, 2014 2:37 AM

Report this Comment

Add Your Comments...

Already Registered?

If you have already registered to Insurance Networking News, please use the form below to login. When completed you will immeditely be directed to post a comment.

Forgot your password?

Not Registered?

You must be registered to post a comment. Click here to register.

Blog Archive

The Pitfalls of Using Assembly Line Methods to Create Software

Most of the time, when the business needs IT, it is for custom software development, just like creating a concept car.

Wearables and Gamification in Life Insurance Goes Mainstream?

With so many U.S. households still uninsured, insurers are going have to try new things to re-position their product, focusing on consumer needs.

Will John Hancock Vitality Transform Insurance?

The Vitality program integrates this information directly into the rewards, giving you credit for the exercise, just by virtue of reporting it.

Why Customers Should Want Innovative Insurers

At a time when confidence in the insurance industry has been compromised, innovative companies can break the mold.

Five Ways to a Positive User Experience

The user experience can make or break an application. Here are five ways to measure whether it’s positive or negative.

Innovation & Insight Day Recap

The Insurance Team recognized fifteen model banks across five categories: Digital; Data Mastery; Legacy and Ecosystem Transformation; Innovation and Emerging Technologies; and Operational Excellence.