Companies sometimes spend large sums of money on developing and improving their operating processes. This makes it difficult to abandon the existing infrastructure that has been expanded over the years and the associated investments and development work. Introducing a new technology can be very stressful for everyone involved and requires a well-thought-out strategy. There are also many organisations that persist with old technologies because they are not broken - so why fix or replace them? It's important to remember that not all data needs to be moved to the cloud in one go, as a 'lift and shift' migration where existing systems are moved to the cloud virtually unchanged can bring additional costs and challenges that are usually underestimated. Ideally, a cloud migration should be an agile process. A gradual replacement of existing systems and transfer to a new cloud-based infrastructure enables a smoother migration and gradual further development and optimisation of analyses. The step-by-step approach also provides sufficient time to optimally implement the systems set up in the cloud according to the latest findings, while data protection and data security is an issue that every company working with cloud technologies must be aware of. The use of cloud technologies is often rejected because data losses have been reported by other companies. However, the cloud is no less secure than a data centre outsourced to an IT service provider, provided the necessary precautions are taken and adhered to.
When it comes to data security (backups), the cloud makes it easier to prevent serious failures. If local backups are kept in the same building as the physical infrastructure, devastating data loss, for example in the event of a serious fire, is almost inevitable. Migrating to the cloud makes it easy to move backups to another data centre, reducing the likelihood of a serious outage. Of course, this additional protection is not free, but the shorter lead time and elimination of hardware investments mean that it can be implemented much more quickly.
When it comes to data protection, i.e. preventing unauthorised access and the outflow of stored information, the same principles must be followed as for an on-premise installation. Access must be restricted and the data must be protected against unauthorised use. The European General Data Protection Regulation (GDPR) and the Swiss Data Protection Act require at least encryption of the stored data for personal and health data (PII, PHI). Always remember that the cloud service provider (e.g. Microsoft Azure) is responsible for the availability of the platform. However, the customer is always responsible for protecting the data processed on it. However, with the correct configuration of the available mechanisms, this protection can be adequately implemented.