Does moving to the cloud make us safer?

It can, for the parts the provider takes over, but it moves risk more than it removes it. A large provider patches its infrastructure, runs redundant data centres and employs security teams few mid-sized companies could afford, so physical security, hardware failures and basic availability usually improve. What does not move is responsibility for identities, configuration and data, and those become more exposed: a cloud admin account is reachable from anywhere on the internet, a storage setting can publish files to the world with one click, and a stolen password with no multi-factor authentication opens everything at once. Attackers have followed companies to the cloud, and many of the incidents they cause there start with a phished account or a leaked access key. Moving safely means MFA on every account, least privilege for admins, logging switched on and reviewed, backups you control, and someone who owns cloud configuration. Your office network still matters too: laptops, printers and servers left behind are often where an attacker first lands.

← All 25 questions on Cloud and SaaS securityAll topics