A full round of tips and tricks to help you avoid the privacy, compliance and security hazards of cloud computing and guide you to the benefits of enterprise cloud.
Encryption
Winning Tactic #9: Do encryption right.
Do not store encryption keys in the software where you store your data. IT teams need to keep physical ownership of encryption keys, as well as vet the strength of the encryption techniques being used. And don't forget data in use. Data in use is, effectively, the data that has been loaded into a process and is in the memory of the program that is running. In general, this data is in the clear while being processed and is typically not protected by techniques such as the in-cloud-based encryption provided by the cloud service provider. Make sure you own the entire encryption process of your sensitive and regulated data.