I wholeheartedly agree with John Rostern's argument that credit unions need to be intently focused on security when outsourcing sensitive enterprise data ["Audit Specialist Raises Concerns in the Cloud," cutimes.com, Sept. 26.] 

However, Rostern's concerns are mostly based on the use of large, public clouds that outsource to fourth- or fifth-party repositories. In my view, financial institutions need more than what a public cloud can offer.

Institutions should not accept anything less than a provider that stores subscriber data directly on its own redundant servers located in geographically disparate venues and offers automatic disaster recovery as part of its core service. These should be considered mandatory characteristics of the provider's core offering, not add-on features. It also helps to work with a provider that has successful experience working with financial institutions and understanding their unique needs.

Complete your profile to continue reading and get FREE access to CUTimes.com, part of your ALM digital membership.

  • Critical CUTimes.com information including comprehensive product and service provider listings via the Marketplace Directory, CU Careers, resources from industry leaders, webcasts, and breaking news, analysis and more with our informative Newsletters.
  • Exclusive discounts on ALM and CU Times events.
  • Access to other award-winning ALM websites including Law.com and GlobeSt.com.
NOT FOR REPRINT

© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.