Just as ARMA developed a “Standard records storage agreement” this is where RM’s should step up Or maybe it it the IG group.  But trying to review all these Cloud vendors to see if they meet your needs is a waste of time because they will not change for one company.  But if a group of companies said “We will not accept any software agreement that does not include this language..”

I keep having software vendors send me updates and I have to agree each time with no ability to resist.  RM’s and IG’s should join together to define the security needs.  This would be a huge win for the RM’s and IG’s to show they made the Cloud adhere to their rules and not just acquiesce each time.

> From: PeterK <[log in to unmask] <mailto:[log in to unmask]>>
> Subject: What companies face involving cloud computing and data security
> 
> 
> Adequate investigation of the cloud-based service provider before entering
> into an agreement is essential. Sophisticated providers will understand the
> data security requirements in the customer’s industry, have adequate
> security measures in place, have independent audits conducted that confirm
> the environment is secure, offer 99.9%-plus availability and have easily
> accessible support. Companies in multiple locations should also evaluate
> the location of the stored data and how the services are structured to
> avoid problems with data transfer restrictions and the system’s processing


Hugh Smith
FIRELOCK Fireproof Modular Vaults
[log in to unmask]
(610)  756-4440    Fax (610)  756-4134
WWW.FIRELOCK.COM
List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]