What do you tend to trust?

Question

Backup

The question is based on the discussion in this post . It is not designed in the form of a survey because the format of the survey on Habré does not allow you to ask a question in detail.

Imagine that you are the head of a company whose main profile is not IT. You are offered to back up important data of your company to the data center of a certain company. Initially, you are afraid that this service is not secure, since the data may fall into the wrong hands, and you do not want this. Which offer are you most likely to take? Do you agree to it?

Important note: this issue is within your competence, there is no one to delegate it to (small company - you decide everything yourself, large - consider that you are not the head of the whole company, but only the IT department).

1) storing data in the data center is completely safe, because we provide a program that encrypts all data on the client side with a password that only the client knows

2) storing data in the data center is completely safe, because the data is even before being transferred to the data the center is encrypted with the AES-256 algorithm

3) data storage in the data center is completely safe, because the data is encrypted many times, only the client knows the password

4) data storage in the data center is completely safe, because there are no incidents in our data center, everything as secure as in a Swiss bank

5) storing data in the data center is completely secure, because your data is encrypted in the same way that the US government encrypts documents classified as "top secret"

6) storing data in the data center is completely safe! Among our clients are Gazprom, Sberbank and Russian Railways.

7) data storage in the data center is completely safe, besides, we have the lowest prices on the market.

8) storing data in the data center is completely safe, just trust us. We are honest!

Answer 1

Another such moment. Many will store illegal information with you. And no company can guarantee protection from law enforcement agencies, because. is obliged to cooperate with the authorities to any extent necessary. If the data is encrypted, it will be YOUR problem how to decrypt it and give it to the authorities in a form that suits them.

Answer 2

3 and 6 as head "manager";
2 as the head "sysadmin".
It's just that the leaders also turn out differently :)

Answer 3

Which offer are you most likely to take?
If you start only from the assurances of the service provider, then none.
If it is possible to reliably determine the veracity of p.p. 2 and 3 - I’ll think about it, although I personally would choose a provider who will give the source code of the client part so that I can build my own encryption.

Answer 4

2 and 3. Usually, encryption on the client side guarantees at least some control over the data, and gives it a feeling of greater reliability or something.

Answer 5

1 - I do not trust, because all security depends on the goodwill of one company.
2, 3 - I do not trust, there is not enough information to draw conclusions.
4 - baby talk. I don't trust Swiss banks either, they have been blown away and have not been reliable for a long time.
5 - baby talk, looks like wiring.
6 - a serious argument if there is a prooflink, it gives +5
7 - low prices are +1 in your favor, if it's cheap, then I will order encryption on the side for the saved money
8 - really honest? agree to a contract with full coverage of losses and fines of a million for each incident?

Answer 6

Here too offered such decision to a certain office. As a result, an external screw was chosen. How, they say, we will hand over our black oneness to someone on the side. Intimidated by fire and scored, their problems, our job is to warn.

Answer 7

What I would buy into is a large financial guarantee in case my data is lost or disclosed, perhaps even something like insurance. Well, and to prove that everything is encrypted at the client - that is, some kind of independent authoritative examination. And I like the point about the absence of incidents - is this actually the reason for using external storage? Yes, Gazprom, Russian Railways are great, they also contribute.
When I once wrote commercial proposals, I actually started with the benefits for the client, then with the product description, only then I moved on to the costs, which could already look insignificant compared to points 1 and 2 :) I mean what I think that it's not just about trust.

Answer 8

You forgot about very important points:
10) data storage in the data center is completely safe, besides, we will unfasten n percent for you every month
11) data storage in the data center is completely safe, I have already talked with the business owner, and you just need to sign Contract.