Storing sensitive data in a Cloud service

The University IS advice states that you must encrypt any medium or high risk data if you are going to upload it to a cloud service however there is still risk in this so we do not recommend using cloud services for anything other than low-risk data and would still recommend encrypting this also.

Apart from data security and legal worries, users have found complications when using cloud sharing clients with shared network filesystems such as our AFS home directories.

Further reading

• Storing data securely
• Data storage options
• Iain Rae's blog articles:
  • Is there a hole in your Dropbox?
  • Dropbox drops the box?
• The University's guidance on information security.
• The University's data protection policy.