Don't expect to peer into Google cloud services security

Customers of Google cloud services who are concerned about security better get used to being unable to check out first-hand how well their data is being protected

Customers of Google cloud services who are concerned about security better get used to being unable to check out first-hand how well their data is being protected, a Google spokesman told a high-tech leadership council recently.

The technology pro's greatest enemies

Many customers worry about how well cloud providers protect customer data, and there is no satisfactory way for customers themselves to evaluate it, says Adam Swidler, a product marketing manager at Google speaking at the Mass Technology Leadership Council Security Summit.

"We won't let you audit to the degree that you would audit your own infrastructure," Swidler says. "It's never going to be the same as auditing your own infrastructure. You'll have to extend some level of trust to third-party verification."

As a practical matter cloud providers wouldn't have the time to let every customer check out data security, but also providers can't allow their security measures to become public so attackers can figure out how to circumvent them, he says.

The best Google can do is let customers see the control objectives of Google's security, but only after signing a non-disclosure agreement, he says. "It lets you see some of what we do and look at it without violating Google security," he says.

He does say that Google uses proprietary measures that it believes are in the best interests of its customers. Industry-recognized audits such as SAS 70 and compliance with Federal Information Security Management Act (FISMA) requirements could give customers some assurance. But he also acknowledges they aren't ideally suited to evaluating cloud security.

"There really aren't a strong set of cloud security standards," Swidler says. But the guidance set by the Cloud Security Alliance does offer some criteria that customers might want to consider, he says.

During his keynote talk at the security summit, Swidler urged customers to grill cloud providers on how they can get their data out of the provider's network should they decide to switch providers. Knowing ahead of time that it can be done can prevent getting locked in to one provider, he says.

He says Google expects that most businesses won't trust all their data to the cloud, "but we will enable it for those who want to shift." The most reasonable expectation is that there will be a spectrum from users who do entrust all their applications to the cloud to those who trust none of them to the cloud. "Very few will be all in the cloud," he says.

Cost savings and collaboration benefits are the most compelling reasons businesses have for switching to cloud services, he says

Swidler acknowledges that customer service for Google Apps has been a problem for customers. One attendee at the summit says he noted that the more a business relied on Google Apps, the more problems it ran into.

"We have some opportunity to improve the service we give, particularly to small and medium businesses," Swidler says. Those improvements will include better search tools for businesses seeking help and Google supported user communities in which customers can help each other out with problems, he says.

Read more about data center in Network World's Data Center section.

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags cloud computinginternetGoogleData Centerhardware systemsConfiguration / maintenanceGoogle cloud security

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Tim Greene

Network World
Show Comments

Brand Post

Most Popular Reviews

Latest Articles


PCW Evaluation Team

Aysha Strobbe

Microsoft Office 365/HP Spectre x360

Microsoft Office continues to make a student’s life that little bit easier by offering reliable, easy to use, time-saving functionality, while continuing to develop new features that further enhance what is already a formidable collection of applications

Michael Hargreaves

Microsoft Office 365/Dell XPS 15 2-in-1

I’d recommend a Dell XPS 15 2-in-1 and the new Windows 10 to anyone who needs to get serious work done (before you kick back on your couch with your favourite Netflix show.)

Maryellen Rose George

Brother PT-P750W

It’s useful for office tasks as well as pragmatic labelling of equipment and storage – just don’t get too excited and label everything in sight!

Cathy Giles

Brother MFC-L8900CDW

The Brother MFC-L8900CDW is an absolute stand out. I struggle to fault it.

Luke Hill


I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Featured Content

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?