Cloud-Based Services: Making the Process Less Cloudy

When selecting a cloud-based service provider (CSP), it is vital to assess the reliability and capability of the provider that you plan to entrust with your organisation’s data. Finding the right fit for your organisation is essential.

Here, our Senior Associate Robbie Boyle shares a few things to consider when searching for and utilising a CSP…

What are cloud-based services?

Cloud-based service providers offer on-demand network access to a shared pool of configurable computing resources (e.g. networks, servers, storage, applications, and services). There are several types offered by providers such as Software as a Service (SaaS); a computing platform for developing or hosting applications known as Platform as a Service (PaaS); or an entire network or computer infrastructure known as Infrastructure as a Service (IaaS).

What are the possible risks of using a cloud-based service?

  • Data Integrity and Security: Data resides on third-party servers with the vendor being responsible for security.
  • Reduced control and visibility from the Sponsor: CSPs use pre-existing services rather than bespoke services for specific industries. Data stored in the cloud may be stored and moved through different countries which can add legal and regulatory obligations.
  • Change management: Cloud service can evolve and update through pre-approval processes and the compatibility of the sponsors’ existing applications may be compromised.
  • Data Backup: Providers may not perform backups for stored data.

How to make things less cloudy

  • Investigate the cloud-based system, know what security your CSP provides, risk assess the CSP, and identify gaps and specific regulatory, legal, and organisation requirements.
  • Mitigate and document any risks that are identified.
  • Validate. A CSP is a third party and will be subject to the sponsors’ vendor management programme

If you would like to find out more about how we can make the process less ‘cloudy’, contact us at