How safe is google docs?

[Bocaccio]

Here's the issue. I am looking to implement a qr code inventory system for a small business. I found an article describing how this is possible with Google docs. But I was asked to find a different solution involving office 365 because of the security flaws of Google docs. 

[sc302 Veteran]

I am not sure exactly what you are asking....would I trust pictures of my wife and kids doing normal wife and kids stuff?  sure

 

Would I trust my most secretive of secrets that bring me millions a month?  no

 

So what is it that you are asking?  inventory system, probably no big deal.....proprietary formula to create coca cola or the next intel chip design, no. 

[Bocaccio]

A catalog system for company equipment that can be accessed via any device connected to the web. They're saying they don't want to use Google docs. Would rather use office 365

[NeoWind]

Its not safe 

[Daedroth]

I work for a school and we use cloud storage services as a means to easily sync and transfer recorded student videos for student exam evidence. We have a duty of care when it comes to both our students' (and staff's) data, so we are doing everything by the book. We had been using Dropbox, however we learnt that it no longer complies with all of the UK and EU data security laws. Once we learnt of this, we researched (and obtained clarification from both Microsoft and Google), and both of these services comply with all of the data security laws for both the EU and the UK. We now use OneDrive to synchronise our tablets, which ties nicely into our Office 365 subscription, and we are happy with the security aspects and also the data recovery processes that are provided.

[techbeck]

  On 01/06/2016 at 19:05, Master of Alien said:

Its not safe 

Expand  

Elaborate....as a lot of business/schools use Google Docs with no issues.

[Bocaccio]

  On 01/06/2016 at 19:05, Daedroth said:

I work for a school and we use cloud storage services as a means to easily sync and transfer recorded student videos for student exam evidence. We have a duty of care when it comes to both our students' (and staff's) data, so we are doing everything by the book. We had been using Dropbox, however we learnt that it no longer complies with all of the UK and EU data security laws. Once we learnt of this, we researched (and obtained clarification from both Microsoft and Google), and both of these services comply with all of the data security laws for both the EU and the UK. We now use OneDrive to synchronise our tablets, which ties nicely into our Office 365 subscription, and we are happy with the security aspects and also the data recovery processes that are provided.

Expand  

One drive could be a solution since it meets his needs. I just have to figure how to use it with something that be uploaded using qr codes

[Tidosho]

Cue the tinfoil hat brigade.... Mr C. McGill sends his regards!

[sc302 Veteran]

  On 01/06/2016 at 18:52, Bocaccio said:

A catalog system for company equipment that can be accessed via any device connected to the web. They're saying they don't want to use Google docs. Would rather use office 365

Expand  

Not really proprietary data, more just data that helps your business.

 

Would you really care if you had eyes on that data...I would guess not.

 

Here is the thing with any cloud storage (I don't care if it is microsoft or anyone else)....You can never know exactly where your data is at or who has access to see it.  They can make promises that they will only see your data when you ask them to review, but being that they can only see your data when you ask them what makes you think that they can't see your data at any given time?   They own the system, they control the environment, they provide the controls in that environment, they control the logs that are associated with that environment....you put your data up there.  What exactly do you control in that scenario?  Can you honestly say that you have full control over your data, know who exactly has access to it at any given time, and know where exactly your data exists? 

 

Like I said, things that aren't proprietary no big deal...anything you want to keep private or in secret you should not have out there.

[Bocaccio]

  On 01/06/2016 at 19:23, Tidosho said:

Cue the tinfoil hat brigade.... Mr C. McGill sends his regards!

Expand  

I totally get the reference. But This is for an internship for a company and the owner uses 365 so im trying to find a solution to cater to his wants. I have a BA in computer forensics and he basically said he wants a safer solution and i should be able to come up with one. Thus what I'm trying to do. 

[Bocaccio]

  On 01/06/2016 at 19:25, sc302 said:

Not really proprietary data, more just data that helps your business.

 

Would you really care if you had eyes on that data...I would guess not.

 

Here is the thing with any cloud storage (I don't care if it is microsoft or anyone else)....You can never know exactly where your data is at or who has access to see it.  They can make promises that they will only see your data when you ask them to review, but being that they can only see your data when you ask them what makes you think that they can't see your data at any given time?   They own the system, they control the environment, they provide the controls in that environment, they control the logs that are associated with that environment....you put your data up there.  What exactly do you control in that scenario?  Can you honestly say that you have full control over your data, know who exactly has access to it at any given time, and know where exactly your data exists? 

 

Like I said, things that aren't proprietary no big deal...anything you want to keep private or in secret you should not have out there.

Expand  

With all that said.....I could inform him the only way it would be "more secure" is if he has his own cloud?

[sc302 Veteran]

safest, create your own data center.

safer, rent space in a data center to put your servers in and services.  rent another area in another data center to have replication between data centers and create your own cloud

safe, put it on site in your own server room

ok, put it on the cloud somewhere because you just need storage without the added expense.

 

 

  On 01/06/2016 at 19:28, Bocaccio said:

With all that said.....I could inform him the only way it would be "more secure" is if he has his own cloud?

Expand  

pretty much.

[+Mirumir Subscriber¹]

  On 01/06/2016 at 19:26, Bocaccio said:

I totally get the reference. But This is for an internship for a company and the owner uses 365 so im trying to find a solution to cater to his wants. I have a BA in computer forensics and he basically said he wants a safer solution and i should be able to come up with one. Thus what I'm trying to do. 

Expand  

 A simple dedicated or proprietary FTP server would work imho.

[Daedroth]

  On 01/06/2016 at 19:19, Bocaccio said:

One drive could be a solution since it meets his needs. I just have to figure how to use it with something that be uploaded using qr codes

Expand  

Maybe you could set up a synchronisation folder?

1) Set up a folder share on a workstation or server

2) Get the QR codes to be stored on this share

3) Install the OneDrive client on the workstation/server

4) Set OneDrive to syncronise that folder

 

That should work, though we did have a lot of issues configuring our setup, especially with using OneDrive or OneDrive for Business. I can't remember which we use at the moment, my colleague configured it and I'm off work this week.