3 ms·

If you're small, cloud may be better, but if you're large it often isn't.

• patcon 12y ago
  Large does not mean you have better security, as I understand. (see Sony)
  • rudolf0 12y ago
    Yes, but you at least have the money and resources available to have better security. If you choose to squander those resources and not dedicate a large enough budget to your security department, that's your fault. Small companies typically can't afford competent and professional security analysts, engineers, penetration testers, and auditors.
• dasil003 12y ago
  It's true that large will have more resources to do security right, but also they become a bigger target. If a small company self-hosts, they are less likely to be targeted than if they are a customer of a big cloud service where hackers might incidentally steal their data because it's there with thousands of other accounts. I guess what I'm saying is that regardless of who you are, there is no easily discernible best practice playbook, just a sea of tradeoffs generally made by people with a woefully inadequate grasp of the risks involved. Heck, even the best security people are at a disadvantage in the asymmetrical battle of infosec.