Opens in a new tab
vmblog logo 2024 wht (updated)

Effective data protection calls for a shared responsibility model

Share: 

David Marshall | Published: January 10, 2024

By Dave Russell, Vice President of Enterprise Strategy, Veeam and Rick Vanover, Senior Director Product Strategy, Veeam

In an era marked by the relentless expansion of global connectivity and the rapid evolution of technology, today’s enterprises stand at the forefront of an unprecedented digital revolution. According to Gartner, 91 percent of organizations are engaged in some form of digital initiative with 87 percent of senior business leaders say digitalization is a priority. This shift, partly due to the need to push past geographical boundaries to engage in multinational business operations has led to an increase in the demand for cloud services. However, this surge in cloud adoption has exposed businesses to an escalating risk of cyberattacks, casting a stark light on the importance of securing data.

Understanding Data Vulnerability: The Leaky Bucket Metaphor

When we consider the vulnerability of data and the potential for data loss or compromise, it’s akin to dealing with a “leaky bucket.” In cybersecurity, this analogy conveys the notion that an organization’s data can be likened to water contained in a bucket – the bucket representing the organization’s security and defence measures, while the water is the organization’s invaluable data.

The holes signify the vulnerabilities and weaknesses within an organization’s security infrastructure. These vulnerabilities, if left unaddressed, become a target for cybercriminals to gain unauthorized access to sensitive data. The analogy serves as a powerful reminder of the importance of identifying and patching these vulnerabilities, effectively plugging the holes. Neglecting these vulnerabilities can lead to catastrophic data leaks and security incidents.

No Organization Is Immune to Leaks

A widespread misconception is that cloud services are inherently secure. While cloud service providers invest significantly in robust security measures and offer comprehensive tools to protect data, security in the cloud is a shared responsibility between the provider and the customer.

This misconception has led to a false sense of security, causing many organisations to neglect their own responsibilities in ensuring data protection. This has resulted in numerous data breaches, which underscore the shared responsibility model’s significance. With 85 percent of organizations suffering from at least one ransomware attack in the last 12 months, it is clear more must be done to protect and secure our cloud data to ensure resilience.

Global cloud security breaches from companies such as Facebook serve as a stark reminder of the real-world consequences of cloud data breaches. To address security challenges effectively, the shared responsibility model is recommended. This approach mandates a clear delineation of roles and responsibilities between cloud providers and customers and the imperative that both parties understand and uphold their obligations to ensure comprehensive security.

The pace at which new services are adopted by businesses often leads to an eagerness to be the “first” to launch and adopt these technologies, but this eagerness can sometimes result in a neglect of best practices and security measures. Therefore, there exists an onus on business leaders to consistently prioritize the best course of action for protecting their cloud-stored data. It is only through this vigilance and commitment to data security that organizations can effectively thwart the leaks in their “buckets” and safeguard their invaluable digital assets.

##

ABOUT THE AUTHORS

Dave Russell 

Dave Russell: Dave Russell is Vice President, Enterprise Strategy at Veeam Software. Dave has 33 years of experience in the backup/recovery and storage management industry as a developer (IBM), industry analyst (Gartner) and strategist (IBM and Veeam). At Veeam, Dave is responsible for driving strategic product and go-to-market programs, spearheading industry engagement, and evangelizing Veeam’s vision for Modern Data Protection and Veeam in the Enterprise at key events across the globe.

Rick Vanover 

Rick Vanover: Rick Vanover is a Senior Director of Product Strategy at Veeam. Rick’s passion for challenges led to his commitment to educate and communicate at all levels-engaging those new to availability technologies as well as those who are experts. As a blogger, podcaster and active member of the IT community, Rick builds relationships and spreads excitement about Veeam solutions.