Majority of Small Businesses Don't Necessarily Follow Mandatory Cloud Storage Security Regulations

WASHINGTON, Nov. 29, 2017 /PRNewswire/ -- More than 60% of small businesses that store customer credit card and banking information in cloud storage say they do not follow industry regulations to secure their cloud storage, according to a new survey from Clutch, a B2B research, ratings, and reviews firm.

Among small businesses that store medical data, 54% say they don't follow cloud storage industry regulations. The finding suggests that small businesses may be putting sensitive consumer data at risk.

Two industry regulations – the Payment Card Industry Data Security Standard (PCI DSS) and the Health Insurance Portability and Accountability Act (HIPAA) – are required for businesses that store banking information or medical data. Businesses found to be non-compliant with these two regulations can be fined millions of dollars.

Despite the risks, 90% of small businesses are either "very" or "somewhat" confident in their cloud storage's security, a 3% increase from 2016.

Small businesses can improve their cloud storage security by adding additional security measures. Over half of small businesses surveyed use encryption (60%), employee training (58%), or two-factor authentication (53%) to protect their cloud storage.

Experts point out that nearly all small businesses should be using additional security measures though.

Ghazanfar Ghori, CTO of 10Pearls, a software and mobile app development agency, said some small businesses' security measures aren't used effectively. For example, a company password policy, requiring complex passwords with regular updates, can be compromised by negligent employees.

"People will write [the new password] down on a sticky note instead and stick it on their locker for everyone to see," said Ghori.

Ghori recommends that companies strive for seamlessly integrated security plans to minimize employee error. Security measures such as two-factor authentication and encryption cannot be compromised easily by employee error.

Patrick R., Head of Strategy at Intuz, a mobile app development and cloud solutions company, discussed the strength of encryption.

"Encryption provides security to data at all times. Encryption works during data transport or at rest, making it an ideal solution no matter where data is stored or how it is used."

Despite the potential risks, cloud storage offers numerous benefits for small businesses, said experts. When used properly, cloud storage can even provide more effective security for small businesses than an on-premise solution.

Cloud storage simplifies security for small businesses with limited resources, says Istvan Lam, CEO of Tresorit, an end-to-end encrypted cloud storage provider for businesses.

"The integrated features and security features that come with cloud storage [are valuable], like two-factor authentication being offered out-of-the-box," said Lam. "How would a small business set that up for their employees with their on-premise system?"

The Clutch survey included 300 IT decision makers at U.S. small businesses that currently use cloud storage.

Review the complete report and source the survey data https://clutch.co/cloud/storage/resources/cloud-storage-providers-security-survey-2017.

For the raw data, a comment on the findings, or an introduction to the industry experts featured in the report, contact Riley Panko at [email protected].

About Clutch
A B2B research, ratings, and reviews firm in the heart of Washington, DC, Clutch connects small and medium businesses with the best-fit agencies, software, or consultants they need to tackle business challenges together and with confidence. Clutch's methodology compares business service providers and software in a specific market based on verified client reviews, services offered, work quality, and market presence.

Contact
Riley Panko
(202) 899-2779 
[email protected]

SOURCE Clutch