4

My wife has been asking me to create a web application for her business and from what I've read using SQL Azure would be perfect. Except for a couple of small (really really big) gotchas.

  • She works in the financial industry and is HEAVILY regulated.
  • The data she works with is very sensitive and has to have a minimum risk of exposure.

So my question is, if I put her companies information on SQL Azure how secure will it be? I'm not asking about general SQL Server/Azure security. I'm talking about the fact that this is a shared space. How possible is it to hack into the data, bypassing the security that I put into place?

Improve this question

1 Answer 1

Reset to default
5

Irrelevant. Seriously. It is irrelevant how secure it IS - if she is in a regulated industry, the provider has to provide the necessary guarantees, whether he fullfills them or not.

And you will find that Azure tells you nothing in the contracts. It is thus not good to use them, regardless how good their factual security is.

Example answer:

https://stackoverflow.com/questions/11167152/hosting-a-pci-compliant-app-on-azure

about azure PCI compliance - the asnwer is: not.

Check:

https://www.windowsazure.com/en-us/support/trust-center/compliance/

for more information. This is what you are guaranteed - the factual implementation is then not your problem.

Improve this answer
2
  • Excellent point. I will certainly look into her requirements vs what Azure offers. However I'm still curious what the factual security is.
    – Kenneth Fisher
    Jul 31, 2013 at 20:30
  • +1 Last Azure convo w MS I had, they had no PCI compliant offering, but said it was planned.
    – Eric Higgins
    Jul 31, 2013 at 22:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.