Protecting Information in the Cloud

Insurance Networking News, January 2, 2013

James Kaplan, Chris Rezek, and Kara Sprague

Nonetheless, the democratized nature of cloud purchasing and usage constitutes risks that automated guidelines cannot fully address. The proliferation of wireless devices that can access cloud computing anytime and anywhere, for instance, extends the reach of the company’s information infrastructure, but by doing so, the information also becomes more vulnerable to breaches. Among the risks: lost or stolen devices with sensitive data stored on them. This means that the mind-sets and behaviors of line staff and managers can have great impact on cybersecurity. As a result, companies must drive risk awareness across the organization and provide risk orientation for new and lateral hires. Linking compliance to compensation through clear metrics reinforces the culture shift.

The cloud in its many forms is an exciting development for enterprise IT, but it also creates new types of challenges in protecting sensitive information assets. A business-focused risk-management approach enables large institutions to strike the right balance between protecting data and taking advantage of more efficient and flexible technology environments.

This article was originally published in McKinsey Quarterly. Copyright (c) 2012 McKinsey & Company. All rights reserved. Reprinted by permission.

For more information on related topics, visit the following channels:

• Data Management