{"id":2351,"date":"2017-07-10T17:18:51","date_gmt":"2017-07-10T17:18:51","guid":{"rendered":"http:\/\/johncanning.net\/wp\/?p=2351"},"modified":"2017-09-01T10:13:19","modified_gmt":"2017-09-01T10:13:19","slug":"cloud-services-data-security-questions-for-researchers","status":"publish","type":"post","link":"https:\/\/johncanning.net\/wp\/?p=2351","title":{"rendered":"Cloud services: Data security questions for researchers"},"content":{"rendered":"

Services like Dropbox and Google Drive can be very useful for researchers conducting research across institutions to share their files and work on projects together. They are easy to use, are low cost, or even free \u00a0but some of the security aspects are overlooked. Some people keep their whole lives on one or another of these services.<\/p>\n

I've written before about the practical pitfalls of using the free services for collaborative projects (2GB+2GB does not equal 4GB but 2GB). Sharing your dropbox with others is more like moving extra people into your house rather than building an extension.<\/p>\n

Researchers working for universities and other institutions make strong commitments to participants about the security of their data, but we rarely stop to think about the security of the data we use. Electronic data security is much more complex than the days of locking up the data in a secure filing cabinet. \u00a0There are obvious advantages of electronic data shortage, mostly notably that the data is unlikely to be wiped out by an catastrophic event such as a fire.<\/p>\n

A few months ago I ran a session with a few colleagues on data security. I'm not a data security expert, but I know that security is important and \u00a0the consequences of a breach can be serious. In my session I asked my colleagues to look on the internet and find out the answers to each of these questions about a cloud storage service or any other service which relies on large amount of your data.<\/p>\n

All you have to do for this activity is allocate each person or group a service: For example one group could look at Dropbox, another at Google Drive etc. and then answer the questions about each one. \u00a0As well as cloud services we also looked at services such as the questionnaire service surveymonkey and Wordle, a service which produces pretty word frequency pictures.<\/p>\n

These are my questions if you wish to use them yourself (no special expertise required).<\/p>\n

<\/p>\n

Why might you choose this program\/service?
\nWhere (geographical location) is your data actually saved?
\nHow\/ how often is the data backed up?
\nUnder what legal jurisdiction is your data held?
\nWhat are the risks of using this program\/ service to maintain data?
\nWhat steps can be taken to mitigate these risks?
\nWhat are the risks of using this program\/ service to participants in our research?
\nAre there different risks for a free service compared to a paid service from the same provider?
\nHow easy was it to find the answers to these questions?<\/p>\n

Any other comments or questions?<\/p>\n

<\/p>\n

Websites you can look at include:<\/p>\n

Clouds (basic free + paid services ) Dropbox<\/a>, OneDrive<\/a>, GoogleDrive<\/a>\u00a0 iCloud<\/a>. These are the better known ones, but there are also lots of smaller providers<\/a>.<\/p>\n

Research service: Surveymonkey<\/a>, BOS online survey tool.\u00a0<\/a><\/p>\n

Project\/ file sharing Sharepoint<\/a>, Basecamp<\/a><\/p>\n

Home solutions\u00a0 Owncloud<\/a>, \u00a0 WD cloud<\/a><\/p>\n

Other stuff: Wordle<\/a><\/p>\n

No solution is going to be perfect on all counts, but knowledge about the various services is surely an ethicalnecessity as much as it is a practical problem.<\/p>\n

$\"Creative$ <\/a>
\nThis work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License<\/a>.<\/p>\n\n\n