🔒 Cybersecurity for lawyers

User Tools

Site Tools

Trace:
cloud

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
cloud [2019/08/16 16:39] – neilcloud [2021/07/06 09:26] (current) – external edit 127.0.0.1
Line 3: Line 3:
 ==== Key points: ==== ==== Key points: ====
   * [[cloud#"It's not the cloud; it's someone else's computer"|"It's not the cloud; it's someone else's computer"]]   * [[cloud#"It's not the cloud; it's someone else's computer"|"It's not the cloud; it's someone else's computer"]]
 +  * [[cloud#Check your professional conduct rules|Check your professional conduct rules]]
   * [[cloud#If you are not paying for online services, how are they making money?|If you are not paying for online services, how are they making money? ]]   * [[cloud#If you are not paying for online services, how are they making money?|If you are not paying for online services, how are they making money? ]]
   * [[cloud#Check if the provider has access to your data|Check if the provider has access to your data]]   * [[cloud#Check if the provider has access to your data|Check if the provider has access to your data]]
 +  * [[cloud#Encrypt files before uploading them|Encrypt files before uploading them]]
   * [[cloud#They may have much better security and resiliency than you could|They may have much better security and resiliency than you could]]   * [[cloud#They may have much better security and resiliency than you could|They may have much better security and resiliency than you could]]
   * [[cloud#Check if you can be locked out and prepare accordingly|Check if you can be locked out and prepare accordingly]]   * [[cloud#Check if you can be locked out and prepare accordingly|Check if you can be locked out and prepare accordingly]]
Line 30: Line 32:
  
 Check your local rules of professional conduct regarding the use of subcontractors generally and cloud computing specifically. Check your local rules of professional conduct regarding the use of subcontractors generally and cloud computing specifically.
 +
 +Although this wiki is definitely not about legal advice, you might need to draw your clients' attention to the use of cloud computing systems, and are likely to need to carry out due diligence on your providers' confidentiality and resiliency practices.
  
 ===Canada === ===Canada ===
Line 43: Line 47:
 The Law Society of England and Wales produced a practice note on cloud computing, but it appears to have been withdrawn. The Law Society of England and Wales produced a practice note on cloud computing, but it appears to have been withdrawn.
  
-Bar Council: [[https://www.barcouncil.org.uk/media/407878/cloud_computing.pdf|Cloud computing – security issues to consider +Bar Council: [[https://www.barcouncil.org.uk/media/407878/cloud_computing.pdf|Cloud computing – security issues to consider]]
- +
  
 ===USA === ===USA ===
Line 58: Line 60:
  
 Check that they way in which they operate is suitable for your needs. Check that they way in which they operate is suitable for your needs.
 +
 +====Encrypt files before uploading them ====
 +
 +If the cloud service you are looking at is a file storage service (e.g. Dropbox), encrypt your files before you upload them to the service. 
 +
 +That way, you are not reliant on their encryption or security, and your data should be safe from unwanted access if their servers are compromised.
 +
 +For example, [[https://cryptomator.org/|Cryptomator]] or [[https://www.boxcryptor.com/en/|Boxcryptor]].
  
 ====They may have much better security and resiliency than you could ==== ====They may have much better security and resiliency than you could ====
cloud.1565973570.txt.gz · Last modified: 2021/07/06 09:26 (external edit)