Customers of Google cloud services
who are concerned about security
better get used to being unable to check out first-hand how well their data is being protected, a Google spokesman told a high-tech leadership council recently. The technology pro's greatest enemies
Many customers worry about how well cloud providers protect customer data, and there is no satisfactory way for customers themselves to evaluate it, says Adam Swidler, a product marketing manager at Google speaking at the Mass Technology Leadership Council Security Summit.
"We won't let you audit to the degree that you would audit your own infrastructure," Swidler says. "It's never going to be the same as auditing your own infrastructure. You'll have to extend some level of trust to third-party verification."
As a practical matter cloud providers wouldn't have the time to let every customer check out data security, but also providers can't allow their security measures to become public so attackers can figure out how to circumvent them, he says.