🔒 Cybersecurity for lawyers

User Tools

Site Tools

Trace:
cloud

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
cloud [2019/08/09 08:35] – neilcloud [2021/07/06 09:26] (current) – external edit 127.0.0.1
Line 2: Line 2:
  
 ==== Key points: ==== ==== Key points: ====
 +  * [[cloud#"It's not the cloud; it's someone else's computer"|"It's not the cloud; it's someone else's computer"]] 
 +  * [[cloud#Check your professional conduct rules|Check your professional conduct rules]]
   * [[cloud#If you are not paying for online services, how are they making money?|If you are not paying for online services, how are they making money? ]]   * [[cloud#If you are not paying for online services, how are they making money?|If you are not paying for online services, how are they making money? ]]
-  * [[cloud#"It's not the cloud; it's someone else's computer"|"It's not the cloud; it's someone else's computer"]] 
   * [[cloud#Check if the provider has access to your data|Check if the provider has access to your data]]   * [[cloud#Check if the provider has access to your data|Check if the provider has access to your data]]
 +  * [[cloud#Encrypt files before uploading them|Encrypt files before uploading them]]
   * [[cloud#They may have much better security and resiliency than you could|They may have much better security and resiliency than you could]]   * [[cloud#They may have much better security and resiliency than you could|They may have much better security and resiliency than you could]]
   * [[cloud#Check if you can be locked out and prepare accordingly|Check if you can be locked out and prepare accordingly]]   * [[cloud#Check if you can be locked out and prepare accordingly|Check if you can be locked out and prepare accordingly]]
Line 13: Line 14:
   * [[cloud#Check where are they storing your data|Check where are they storing your data]]   * [[cloud#Check where are they storing your data|Check where are they storing your data]]
  
 +===="It's not the cloud; it's someone else's computer" ====
 +
 +The term "cloud" conjures up a fluffy, amorphous place in the sky where your data are held. When you store your data in a "cloud" service, you are simply storing your data on someone else's computer (or, more likely, computers).
  
 ====If you are not paying for online services, how are they making money? ==== ====If you are not paying for online services, how are they making money? ====
Line 25: Line 29:
 To mitigate this risk, take regular backups of your data and store them somewhere else. Test those backups, and check they are in a format which you can import into another service or piece of software. To mitigate this risk, take regular backups of your data and store them somewhere else. Test those backups, and check they are in a format which you can import into another service or piece of software.
  
-===="It's not the cloud; it's someone else's computer" ====+====Check your professional conduct rules ====
  
-The term "cloud" conjures up a fluffy, amorphous place in the sky where your data are held. When you store your data in a "cloud" service, you are simply storing your data on someone else's computer (or, more likely, computers).+Check your local rules of professional conduct regarding the use of subcontractors generally and cloud computing specifically. 
 + 
 +Although this wiki is definitely not about legal advice, you might need to draw your clients' attention to the use of cloud computing systems, and are likely to need to carry out due diligence on your providers' confidentiality and resiliency practices. 
 + 
 +===Canada === 
 + 
 +British Columbia: [[https://www.lawsociety.bc.ca/Website/media/Shared/docs/practice/resources/checklist-cloud.pdf|Cloud computing checklist v. 2.0 [Updated May 2017]]] 
 + 
 +===New Zealand === 
 + 
 +[[https://www.lawsociety.org.nz/practice-resources/practice-briefings/Cloud-Computing.pdf|Cloud Computing Guidelines for Lawyers]] 
 + 
 +===United Kingdom === 
 + 
 +The Law Society of England and Wales produced a practice note on cloud computing, but it appears to have been withdrawn. 
 + 
 +Bar Council: [[https://www.barcouncil.org.uk/media/407878/cloud_computing.pdf|Cloud computing – security issues to consider]] 
 + 
 +===USA === 
 + 
 +[[https://abovethelaw.com/legal-innovation-center/2019/04/04/lawyers-and-cloud-computing-its-not-so-complicated-anymore/|Lawyers And Cloud Computing: It’s Not So Complicated Anymore]].
  
 ====Check if the provider has access to your data ==== ====Check if the provider has access to your data ====
Line 36: Line 60:
  
 Check that they way in which they operate is suitable for your needs. Check that they way in which they operate is suitable for your needs.
 +
 +====Encrypt files before uploading them ====
 +
 +If the cloud service you are looking at is a file storage service (e.g. Dropbox), encrypt your files before you upload them to the service. 
 +
 +That way, you are not reliant on their encryption or security, and your data should be safe from unwanted access if their servers are compromised.
 +
 +For example, [[https://cryptomator.org/|Cryptomator]] or [[https://www.boxcryptor.com/en/|Boxcryptor]].
  
 ====They may have much better security and resiliency than you could ==== ====They may have much better security and resiliency than you could ====
Line 86: Line 118:
  
 Depending on your local legal requirements, you might need additional contractual protection, beyond their normal terms of service. Depending on your local legal requirements, you might need additional contractual protection, beyond their normal terms of service.
- 
cloud.1565339736.txt.gz · Last modified: 2021/07/06 09:26 (external edit)