Eh, if my bank goes down or gets compromised then I will hold it against them regardless of if they are self hosting or using the cloud.
Re:I got pwned by my cloud costs
by InsomniacL on Tuesday January 25, 2022 @09:19AM
(#30072025)
Exactly, and using a SQL PAAS solution for example, it will always be patched without the bank having the expense of doing it themselves.
- Security Information and Event Management - exports, alerts, OS configuration
- OS/Application Hardening - Encryption, Password/keys rotation, CIS/other baselines, Drift Management
- Backup - Encryption, (don't forget your passwords/keys are changing), retention, data protection compliance, monitoring, alerting, test days
- High Availability - replication, synchronisation, monitoring, alerts, test days
This is just the tip of the ice berg, if you operate in an environment where Insurance, Reputation, Regulatory Compliance, certification, etc.. are important, then it's easy to see why PAAS solutions are desirable.