Just the other day I was speaking with a small cloud provider, who had pretty good answers for most of my questions, but what was unsaid was the fact that this was the equivalent of a mom and pop cloud provider, which was most likely one car accident away from dissolution of the cloud company. That could pose a big risk for our organization, especially if this was a critical cloud service.
An IT director in Schertz, Texas, Myles Clauser, recently shared a list of questions to ask cloud providers, before deciding if their service is right for your organization. This is a pretty tough set of questions and you may be willing to accept a variety of answers, depending on what the particular service is, nonetheless this is a great set of questions to help vet the rapidly expanding list of cloud services:
Questions and considerations for using cloud providers:
1. Ownership of all data must be spelled out. Many cloud providers specify that using their services means relinquishing ownership of the data.
14. If the vendor is contacted by an outside party (i.e.: subpoenas, open records requests, etc.) to provide information contained in one of our documents, how do they respond? If we are required to hold data for litigation purposes do they have a mechanism / system in place to do so or are we on our own?
15. What provisions have been made to protect our data if the vendor closes its doors or is sold
This blog entry is cross posted with the great folks at SchoolCIO