Harris Exits Cloud Hosting, Citing Fed Server Hugging

miller60 writes "Despite the publicity around the U.S. Government's 'Cloud First' approach to IT, many agencies are reluctant to shift mission critical assets to third-party facilities. That's the analysis from Harris Corp., which has decided to get out of the cloud hosting business and sell a data center in Virginia, just two years after it spent $200 million to build and equip it. 'It's becoming clear that customers, both government and commercial, currently have a preference for on-premise versus off-premise solutions,' said Harris' CEO."

Comments

Server Hugging

[stevegee58]

Have you hugged your server today?

Re:Server Hugging

[gstoddart]

That would be a real concern for me if using an American cloud hosting provider, as I am not located in the US. Do these companies have any choice but to bend over to the government when they are told?

You are correct, they have no choice.

The wording of the USA Patriot Act allows them to basically demand data from any US company (it might even be US owned). So, any data there you should consider to be essentially available to the Americans on a whim.

I've done some consulting for the Canadian government, and we legally can't store any data on any servers in the US or host certain data with US owned companies. Because, if the US authorities came in and demanded it, they'd have to hand it over and be legally bound to secrecy and not tell anybody it happened. Not a good situation for confidential government data with private information in it.

So, if you have data you don't want to be subject to US rules, the only solution is to not store it with them, and possibly not with anybody owned by a US company.

I believe the EU has encountered some situations in which companies can either be breaking the EU laws, or breaking the US laws ... it's not possible to be in compliance with both if one prevents you giving access, and the other insists they get it.

The only way to keep your data secure, is to keep it in-house.

Re:sorry, but nothing changed

[MightyMartian]

For some of us it's the simple reality that our data is out of our hands. Yes, we can encrypt, and that offers some security, but you're still left with the fact that you're going to need some sort of third site backup to truly make sure your data can survive a catastrophe (including the cloud provider being raided, its/your servers ending up in an evidence room for an indeterminate amount of time) that could destroy or make inaccessible critical business data.

I think there's a place for it, but in the type of business I'm in, where contractual and legislative obligations on securing of confidential data is quite stringent, the cloud just doesn't offer what we want. Data out of our custody is data out of our control.