2 ms·
You have to look at it from a regulatory and compliance standpoint. While I agree from a technical standpoint that the average company's data is probably going
by rudolf0 12y ago
You have to look at it from a regulatory and compliance standpoint. While I agree from a technical standpoint that the average company's data is probably going to be safer at Slack than in some internal system, the accountability risk is just too high.
You can't prove your cloud provider is using security best practices, while you theoretically can prove (or disprove) the same internally. Few companies do proper auditing, reviews, and pentests, but they have the capability to do so.
- jedberg 12y ago> You can't prove your cloud provider is using security best practices But you don't have to. They do. Look at Amazon. They publish their security audit each year, and now every company that uses them doesn't have to do their own audit. They can point their auditor at Amazon's report and say "see our datacenter passes". Also, do you do a security review on your power company, or do you assume they've done it?