This is why cloud security is better

Business data security awareness is quite low at Hungarian small and medium enterprises (SMEs). Most of the companies simply use a basic firewall and antivirus system - says Arthur Keleti, T-Systems Hungary Plc.’s IT security strategist. - At the same time access rights, i.e. who has access to which data, are not clear either and the same applies to data, i.e. who works with which data.

More focus on operational security

keleti_arthur_v2_252x142It is very hard for Hungarian SMEs to react on security incidents because the necessary expertise is generally missing. It is already a great step forward if these companies hire a security expert. According to Keleti the companies in question are characterized by operational concerns in the first place, in other words their concerns are focused on the loss or destruction of the information stored in their IT systems. As a result the important thing for them is to have a copy of the data although - says the expert - they generally start to fear only when data loss have already taken place.

And how could you attract these market players to cloud-based solutions? “They should try to forget that perfect data protection equals to having their own server and database in their own premises. Any cloud-based solution is safer than that” - says Keleti. At the same time the service culture in Hungary is relatively low and it is especially low in IT. In more developed Western European countries it is an every day practice that companies’ IT background is provided as a service - he added.

Security trio from the cloud

It is a trend already in Hungary that more and more companies are willing to transfer their data to the cloud, however, it is still an open question whether they use additional security services besides general cloud solutions. Admittedly, we do not have enough data yet to make a conclusion on this matter. The current general practice is that companies use basic cloud services and upgrade them with security features. At the same time it also happens that the given company does not use general cloud solutions but orders cloud-based security services. "We do have a service where we provide various security features from the cloud. In the case of such services the data do not have to be stored in the cloud it is enough if they go through our system” - explained Keleti.

T-Systems Hungary offers three special IT security and data protection services. One of them is the so-called Managed Border Protection which is a combined security service. The Managed Border Protection offers firewall, virus,- spam,- spyware protection and content filtering functions within a single service.

The InstantSecurity package provides protection against DDoS (Distributed Denial of Service) attacks. (Distributed Denial of Service (DDoS) attacks are launched simultaneously from several hundreds of thousand of clients and their primary objective is to overload and collapse the attacked server.)

"We have a solution within the package with which we analyze log data collected from various IT systems even through connecting to the analyzing tool of the customer's system - says the expert. Log analysis and the DDoS solution are a good choice for big companies or those that provide internet services. However, nowadays most companies do not monitor security incidents continuously and the analysis is performed only in emergency cases. The Managed Border Protection is a solution that can be best customized to the SME sector.

Compliance requirements

Trust towards cloud solutions can be enhanced if the cloud service provider fulfills the customer's expectations with a firm background and in a properly complex way. In the case of T-Systems the former is ensured by the company’s owners: Magyar Telekom and Deutsche Telekom. In the case of the latter the company has a strong compliance background with sophisticated documentation systems and processes with outstanding expertise in drawing up policies, regulations. "In addition we comply with many important standards, certifications which means that we are accountable for our activities" – emphasises Arthur Keleti.

Arthur KeletiThere can be compliance requirements towards employees who work in data centers and those who work very closely with customer data. Unlike in the case of companies that employ their own IT staff that can be sanctioned by dismissal or reduction of the remuneration the cloud service provider is more accountable and in given cases can be charged with compensation for damages or the given contract concluded with the cloud service provider can be terminated.

“Security is a matter of trust that can be achieved in many ways, one can refer to standards and can properly design and document processes. At the end of the day the most important think will be to decide with whom you work and to what extent you trust your partner. Last year it was the 20th anniversary that we started to work with security services and many of those employees are still around. In a small market like Hungary if an IT security expert makes a mistake that has serious consequences the news spreads in seconds” - points out the expert.

Besides security, supervision is also important to ensure business continuity. Cloud is a future oriented solution because business continuity is provided from the start of the process with a strong focus on security and incidents can be solved with well defined processes - summarizes the above Arthur Keleti.

Source (in Hungarian):

 T-Systems Hungary


T-Systems Hungary

Press Relations

Save business card with QR code