--- title: Understanding The Risks of Public Cloud description: A lot of organisations are turning to public cloud environments, but are they aware of the risks and preparing for them? In this article, we discuss the top risks surrounding public cloud. image: https://info.cloudcarib.com/hubfs/shutterstock_379513618.jpg --- [![Cloud Carib](https://info.cloudcarib.com/hubfs/Cloud%20Carib%202018%20Template/cloud-carib-logo-white.svg)](https://www.cloudcarib.com/) +1 800 390 2806 [Client Portal](https://www.cloudcarib.com/support/)[Contact us](https://www.cloudcarib.com/contact-us) Menu - [About us](https://www.cloudcarib.com/about-us/why-cloudcarib/) - [Services](https://www.cloudcarib.com/services/) - [Data Centre Services](https://www.cloudcarib.com/services/data-centre-services/cloud-facilities/) - [Cloud Facilities](https://www.cloudcarib.com/services/data-centre-services/cloud-facilities/) - [Virtual Data Centre](https://www.cloudcarib.com/services/data-centre-services/virtual-data-centre/) - [Managed Services](https://www.cloudcarib.com/services/data-centre-services/managed-services/) - [Network Services](https://www.cloudcarib.com/services/data-centre-services/network-services/) - [Managed Backups](https://www.cloudcarib.com/services/data-centre-services/managed-backups/) - [Professional Services](https://www.cloudcarib.com/services/data-centre-services/professional-services/) - [Security & Business Continuity](https://www.cloudcarib.com/services/security-business-continuity/managed-security/) - [Managed Security](https://www.cloudcarib.com/services/security-business-continuity/managed-security/) - [Intrusion Detection and Prevention](https://www.cloudcarib.com/services/security-business-continuity/intrusion-detection-and-prevention/) - [Disaster Recovery](https://www.cloudcarib.com/services/security-business-continuity/disaster-recovery/) - [Mobility & Productivity](https://www.cloudcarib.com/services/mobility-productivity/enterprise-mobility-management/) - [Unified Communications](https://www.cloudcarib.com/services/mobility-productivity/unified-communications/) - [Voice Services](https://www.cloudcarib.com/services/mobility-productivity/voice-services/) - [Carib365](https://www.cloudcarib.com/services/mobility-productivity/carib365/) - [Enterprise Mobility Management](https://www.cloudcarib.com/services/mobility-productivity/enterprise-mobility-management/) - [Solutions](https://www.cloudcarib.com/solutions/) - [Resources](https://www.cloudcarib.com/resources/news-centre) - [News centre](https://www.cloudcarib.com/resources/news-centre/) - Blog - [Whitepapers](https://www.cloudcarib.com/resources/whitepapers/) - [Case studies](https://www.cloudcarib.com/resources/case-studies/) - [Tools](https://www.cloudcarib.com/resources/tools/) - [Partners](https://www.cloudcarib.com/partners/) - [Our Partner Network](https://www.cloudcarib.com/partners/) - [Become A Partner](https://www.cloudcarib.com/partners/become-a-partner/) - [Refer A Client](https://www.cloudcarib.com/partners/refer-a-client/) Blog ** # Understanding The Risks of Public Cloud ** As companies continue to ways to become more agile in their business environments, the adoption of cloud technology has continued to be the mainstay of the new landscape. According to **[RightScale's annual report on the State of the Cloud survey](https://info.flexera.com/CM-REPORT-State-of-the-Cloud), ** the year-over-year spend on the adoption of new cloud technologies increased to 53% over the 38% recorded in 2021. Of the more than 700 cloud decision-makers surveyed, approximately 47% already have significant workloads running in cloud environments. An additional 30-33% of those companies currently run some workloads in the cloud while 10-11% are currently experimenting with cloud concepts. Every year the number of users turning to the public cloud is increasing. Public cloud **[has lots of benefits](https://info.cloudcarib.com/blog/comparing-hybrid-private-and-public-cloud-computing-options),** but there are several risks that organisations need to understand in order to protect their organisation and appropriately mitigate these risks.  ## 1. Public Cloud = Limited Control  The public cloud offers users limited control using a **[multi-tenant environment.](http://whatis.techtarget.com/definition/multi-tenancy)** This means that a single environment serves many customers or tenants. This shared environment ensures that public cloud customers are not given access to the hypervisor and prevents customers from customizing their environments. Because public cloud companies own the hardware and software, they're able to make changes (low-level changes or big changes) at their choosing, without consultation with their customers beforehand. Public cloud providers also choose the authentication, authorization, and access control processes and software of their choosing. As a customer, your organisation has no control over which methods they use or the procedures governing these methods. If your organisation has strict security policies in place, it may be hard to ensure these policies are followed when using a public cloud environment.  ## 2. Thinking You're Fully Protected... When You're really Underprotected Many organisations make the mistake of assuming that their data is fully protected because they're using the public cloud to store their files. To their own detriment, organisations may disregard other backup methods or disaster recovery plans. While major providers claim to have redundancy built into their infrastructure, there have been countless instances of redundancy failures and prolonged system outages.  Having a backup or disaster recovery plan in place is critical to ensure you still have access to your data when your public cloud provider is inaccessible, or a mistake is made and files are lost. In [**2021, AWS suffered three major outages**](https://www.datacenterdynamics.com/en/news/aws-has-another-east-coast-cloud-outage/) that impacted everything from Hulu to Peleton.  These incidents sadly happen, and relying on your public cloud storage for your only source of data is dangerous. Ensure your organisation has another backup and also utilizes disaster recovery to minimize the impacts.  ## 3. Lack of Security in Public Cloud As previously noted, public clouds are a multi-tenant environment. Such environments come with their own inherent security threats with the potential to make the entire environment vulnerable. **[Multitenancy exploits may allow one tenant or hacker to view all the data or assume the identity of another client](https://www.blumira.com/top-cloud-security-threats/)**. Due to security vulnerabilities that can impact your public cloud, your organisation should carefully consider any specific compliance regulations which your company follows as this will directly impact how you use the cloud environment.  The already limited control customers experience in the public cloud environment can prove to be an added security risk making difficult to enforce your specific security policies. ## 4. Ownership of the Data An equally important risk to consider is data ownership. If you're operating within a public cloud then your cloud provider actually owns your data.  Be sure to carefully review your **[SLA](https://info.cloudcarib.com/blog/3-reasons-why-you-need-to-have-an-sla-with-your-service-provider)** to determine that your organisation holds the rights to your data. Many of the world's biggest cloud providers have contractual clauses that lay claim to customer data. Not only does it act as legal protection but many providers earn big bucks by your selling the data.  For organisations with a commitment to their clients to ensure their data is kept private, this presents a series of very specific challenges but crafting an airtight SLA with your provider is one way to safeguard against data loss. You may also consider storing only non-confidential material in the public cloud or simply choose a provider that allows you to retain ownership.  The Public cloud can be a great tool. Managing it properly and ensuring you're only using it for non-confidential data is critical to ensuring its safe usage. For many businesses, the best approach is a **[hybrid approach](https://info.cloudcarib.com/blog/infographic-how-hybrid-cloud-delivers-the-best-of-both-worlds)**, utilizing an approach that leverages the best of each model.  ## **Looking For a New Cloud Service Provider?** If you're thinking about switching cloud service providers, consider Cloud Carib. Headquartered in Nassau, the Bahamas, Cloud Carib is a cutting-edge, cloud, and managed service provider that offers private and hybrid cloud solutions. If you're looking for tailored cloud solutions from a reliable provider, **[contact us](http://www.cloudcarib.com/contact)** to speak with a cloud specialist. [![Cloud Carib](https://no-cache.hubspot.com/cta/default/546812/871e7ecc-d49e-446d-8d28-dab8dbb66ce6.png)](https://cta-redirect.hubspot.com/cta/redirect/546812/871e7ecc-d49e-446d-8d28-dab8dbb66ce6)         ### Posts by Topic - [Cloud Computing 36](https://info.cloudcarib.com/blog/topic/cloud-computing) - [Disaster Recovery 33](https://info.cloudcarib.com/blog/topic/disaster-recovery) - [data security 32](https://info.cloudcarib.com/blog/topic/data-security) - [Cyber Security 28](https://info.cloudcarib.com/blog/topic/cyber-security) - [Caribbean 19](https://info.cloudcarib.com/blog/topic/caribbean) - [Government 20](https://info.cloudcarib.com/blog/topic/government) - [Public Sector 19](https://info.cloudcarib.com/blog/topic/public-sector) - [Cloud Security 16](https://info.cloudcarib.com/blog/topic/cloud-security) - [Data Backup 15](https://info.cloudcarib.com/blog/topic/data-backup) - [Cloud Solutions for Legal Firms 15](https://info.cloudcarib.com/blog/topic/cloud-solutions-for-legal-firms) - [Data Sovereignty 15](https://info.cloudcarib.com/blog/topic/data-sovereignty) - [Business Continuity 14](https://info.cloudcarib.com/blog/topic/business-continuity) - [Cloud Computing for Financial Institutions 14](https://info.cloudcarib.com/blog/topic/cloud-computing-for-financial-institutions) - [Security 11](https://info.cloudcarib.com/blog/topic/security) - [Managed Cloud Services 10](https://info.cloudcarib.com/blog/topic/managed-cloud-services) - [Cloud Services 9](https://info.cloudcarib.com/blog/topic/cloud-services) - [Choosing a Cloud Service Provider 8](https://info.cloudcarib.com/blog/topic/choosing-a-cloud-service-provider) - [Hurricane Season Preparation 7](https://info.cloudcarib.com/blog/topic/hurricane-season-preparation) - [Hybrid Cloud Computing 6](https://info.cloudcarib.com/blog/topic/hybrid-cloud-computing) - [Compliance 5](https://info.cloudcarib.com/blog/topic/compliance) - [Data Economy 5](https://info.cloudcarib.com/blog/topic/data-economy) - [Small Business 5](https://info.cloudcarib.com/blog/topic/small-business) - [Business Agility 4](https://info.cloudcarib.com/blog/topic/business-agility) - [COVID-19 4](https://info.cloudcarib.com/blog/topic/covid-19) - [Cloud Computing for CEOs 4](https://info.cloudcarib.com/blog/topic/cloud-computing-for-ceos) - [Multi-Factor Authentication 4](https://info.cloudcarib.com/blog/topic/multi-factor-authentication) - [Containerization 3](https://info.cloudcarib.com/blog/topic/containerization) - [Containers 3](https://info.cloudcarib.com/blog/topic/containers) - [GDPR 2](https://info.cloudcarib.com/blog/topic/gdpr) - [MFA 2](https://info.cloudcarib.com/blog/topic/mfa) - [Data Breach 1](https://info.cloudcarib.com/blog/topic/data-breach) - [Healthcare Industry 1](https://info.cloudcarib.com/blog/topic/healthcare-industry) - [SOC2 1](https://info.cloudcarib.com/blog/topic/soc2) Show more #### Get in touch with an expert, find your nearest office location, or send us a note about your next project. [Get in touch](https://www.cloudcarib.com/contact-us/) ## Recent posts From our privately owned equipment in Nassau, and through strategic global partnerships. [View all posts](https://info.cloudcarib.com/blog/all) [![](https://assets.bwbx.io/images/users/iqjWHBFdfxIU/iVkwvb.BrCKs/v0/-1x-1.webp)](https://info.cloudcarib.com/blog/backups-arent-recovery-plan) [Disaster Recovery](https://info.cloudcarib.com/blog/topic/disaster-recovery) ### [The Continuity Gap: Why Backups Aren't a Recovery Plan](https://info.cloudcarib.com/blog/backups-arent-recovery-plan) [![](https://info.cloudcarib.com/hs-fs/hubfs/All%20Hands/Backup%20And%20Running/Pegasus.png?width=370&height=245&name=Pegasus.png)](https://info.cloudcarib.com/blog/from-eurostack-to-caribstack) [Government](https://info.cloudcarib.com/blog/topic/government) ### [From EuroStack to CaribStack: How the Caribbean Can Build Digital Sovereignty](https://info.cloudcarib.com/blog/from-eurostack-to-caribstack) [![](https://info.cloudcarib.com/hs-fs/hubfs/The-Storm-Proof-State-How-the-Bahamas-Built-a-Sovereign-Cloud-Against-the-Odds.webp?width=370&height=245&name=The-Storm-Proof-State-How-the-Bahamas-Built-a-Sovereign-Cloud-Against-the-Odds.webp)](https://info.cloudcarib.com/blog/the-storm-proof-state-how-the-bahamas-built-a-sovereign-cloud-against-the-odds) [Government](https://info.cloudcarib.com/blog/topic/government) ### [The Storm-Proof State: How the Bahamas Built a Sovereign Cloud Against the Odds](https://info.cloudcarib.com/blog/the-storm-proof-state-how-the-bahamas-built-a-sovereign-cloud-against-the-odds) #### Sign up for our newsletter and get great content delivered straight to your inbox. Cloud Carib - [About us](https://www.cloudcarib.com/about-us/why-cloudcarib/) - [Services](https://www.cloudcarib.com/services/) - [Solutions](https://www.cloudcarib.com/solutions/) - [Resources](https://www.cloudcarib.com/resources/news-centre) - [Partners](https://www.cloudcarib.com/partners/) - [Contact Us](https://www.cloudcarib.com/contact-us/) Data centre services [Facilities](https://www.cloudcarib.com/services/data-centre-services/cloud-facilities/) [Virtual Data Centre](https://www.cloudcarib.com/services/data-centre-services/virtual-data-centre/) [Managed Services](https://www.cloudcarib.com/services/data-centre-services/managed-services/) [Network Services](https://www.cloudcarib.com/services/data-centre-services/network-services/) [Managed Backups](https://www.cloudcarib.com/services/data-centre-services/managed-backups/) [Professional Services](https://www.cloudcarib.com/services/data-centre-services/professional-services/) Security & Business Continuity [Managed Security](https://www.cloudcarib.com/services/security-business-continuity/managed-security/) [Intrusion Detection and Prevention](https://www.cloudcarib.com/services/security-business-continuity/intrusion-detection-and-prevention/) [Disaster Recovery](https://www.cloudcarib.com/services/security-business-continuity/disaster-recovery/) Mobility & Productivity [Unified Communications](https://www.cloudcarib.com/services/mobility-productivity/unified-communications/) [Voice Services](https://www.cloudcarib.com/services/mobility-productivity/voice-services/) [Carib365](https://www.cloudcarib.com/services/mobility-productivity/carib365/) [Enterprise Mobility Management](https://www.cloudcarib.com/services/mobility-productivity/enterprise-mobility-management/) © 2018 Cloud Carib | Designed and Developed by [okto.](https://www.oktodigital.com/) Facebook Twitter LinkedIn