The Cloud and Encryption
I've been commissioned with the task of review cloud based software for a client. While their needs are not out of the ordinary, at every turn I keep running into roadblocks. In the last week I have spoken with several large companies who provide the type of software which suits the needs, and have been amazed at how lacking security is with all of these systems so far.
At the core of the issue is that information which will be held on in the system could contain PII (Personally Identifiable Information) and other confidential data. They require the cloud as several staff members work from multiple locations.
When I ask about encryption I get blank stares, ok not literally as I can't see...