Azure and security trust

2015-02-24 Thread Greg Keogh
Folks, I have a demo SQL database in Azure and it's working nicely, but now we have to consider how to get it into production use. My demo DB doesn't contain any real names and addresses, but the live DB will have information about hospital patients, and you can imagine how confidential that is! I'

Re: Azure and security trust

2015-02-24 Thread Craig van Nieuwkerk
Did Snowden get his secrets off the cloud? What Snowden shows is that the biggest risk to your data and business is rouge employee's not where your data is stored. For every dollar a business loses due to cloud security issues I would wager they lose 100 due to internal pilfering. Craig On Wed, F

Fwd: Azure and security trust

2015-02-24 Thread Greg Keogh
FYI - I just found this at http://azure.microsoft.com/en-us/support/trust-center/compliance/ It specifically mentions "healthcare", but I'd like to know if any major hospitals are using Azure storage -- *Greg K* Australian Government Information Security Registered Assessors Program (IRAP) Azure

Re: Azure and security trust

2015-02-24 Thread Mark Hurd
I /haven't/ followed these links, but I assume the biggest issue for Australian-based cloud services -- that this sort of data should not go offshore -- is covered somewhere in there. -- Regards, Mark Hurd, B.Sc.(Ma.)(Hons.) On 25 February 2015 at 14:06, Greg Keogh wrote: > FYI - I just found t

RE: Azure and security trust

2015-02-24 Thread Nathan Fisher
Mark Azure has an Australian Data Centre (in Sydney and Melbourne I believe) so keeping the data onshore should be a problem. Regards Nathan Fisher

RE: Azure and security trust

2015-02-24 Thread Nathan Fisher
Sorry to clarify keeping the data onshore should **not** be a problem -Original Message- From: Nathan Fisher Sent: Wednesday, 25 February 2015 4:12 PM To: 'ozdotnet@ozdotnet.com' Subject: RE: Azure and security trust Mark Azure has an Australian Data Centre (in Sydney and Melbourne I be

Re: Azure and security trust

2015-02-24 Thread Andrew Tobin
One alternative that I haven't looked into much at all, so take this with a grain of salt - is to have anything identifying on a local network, firewalled, and accessible via a site-to-site VPN connection to an Azure hosted server. Like I said, I haven't looked at what an implementation would take