February 20, 2013, 10:54 AM — As I discussed in last week's article, cloud computing systems and the data they contain are now valuable corporate assets. You can't take them for granted, either: They need to be managed and cultivated like any other corporate asset.
Although it's difficult to provide an assessment tool for every kind of cloud platform or application, you can tailor the following framework to the specific cloud services in your organization. Each question below gives you points. Like in golf, low scores win-the higher your total, the more you need to develop a get-well plan.
Give yourself 5 points for each "No" answer.
- Do you back up all data weekly?
- Are system audit trails turned on?
- Do you back up all metadata and administrative logs monthly?
- Are password-strength policies in place? This includes forcing password change on a quarterly basis.
- Is a document retention/destruction policy in place, and is there some sort of enforcement?
- Do you have data entry guidelines, particularly for personal confidential information. Again, is there some form of enforcement?
- Do you have active user accounts in the system for people who no longer work for your organization? (Here, give yourself 5 points if you say "Yes.")
Cloud Data Bogosity
Give yourself 1 point for each percentage point below.