• Link to Instagram
  • Link to LinkedIn
  • Link to Facebook
  • Support
  • Resource Center
  • News & Events
  • Blog
  • Pay Online
Cumulus Global
  • What We Do
    • Managed Cloud Services Provided by Cumulus Global
    • Cloud Computing Security, Privacy, Compliance, & Continuity
    • Collaboration, Productivity, & Transformation
    • Managed Infrastructure & Platforms
  • How We Do It
    • Understand & Assess
    • Cloud Computing Strategy & Planning
    • Cloud Migration & Deployment
    • Cloud Managed Services
    • Service & Support for Cloud and IT Solutions
    • Global Strategic Services
    • Guide, Educate, & Train
  • What We Offer
    • Managed Cloud Services
    • IT Admin, Service, and Support
    • Security CPR® Managed Security
    • Google Cloud Workspace / Education / Chrome / Voice
    • Google Cloud Platform Computing Services
    • Microsoft 365 and Office 365 Managed Services
    • Microsoft Azure
  • Who We Are
    • Our Mission
    • Our Team and Opportunities
    • Our Cloud Computing Partners
    • Our Reviews and Testimonials
    • Our Community
    • Our Sustainability
  • Click to open the search input field Click to open the search input field Search
  • Menu Menu

Tag Archive for: CloudLock

Posts

Pokemon Go is a Security Game?

August 19, 2016/in Education, General

No Pokemon Go
While the news coverage has trailed off, the Pokemon Go phenomenon continues as kids and adults continue to play, and the game expands to new locations.

Also in the news, but with less coverage, was the security hole that gave the companies behind Pokemon Go completely unfettered access to users’ Google Apps and Gmail accounts.  This access was not just to read your contacts so you can “share”, Pokemon Go had full read/write access to all user data.

In a short but sobering report, our friends at CloudLock assess and quantify the risk posed by Pokemon Go. Click here to access the report; it serves as a great example of the risks posed by 3rd party apps.


Contact us if you want to learn more about protecting Google Apps from 3rd party app risks.

 

0 0 Allen Falcon https://www.cumulusglobal.com/wp-content/uploads/2018/06/Cumulus-Global-logo-with-spacing.png Allen Falcon2016-08-19 10:00:502016-08-19 10:00:50Pokemon Go is a Security Game?

Pokemon Can Steal and Modify Your Data

July 12, 2016/in Education, General
Read more
0 0 Allen Falcon https://www.cumulusglobal.com/wp-content/uploads/2018/06/Cumulus-Global-logo-with-spacing.png Allen Falcon2016-07-12 08:22:012016-07-12 08:22:01Pokemon Can Steal and Modify Your Data

Not Using Google Drive? You Are Not Alone

September 30, 2015/in Education, General

google-drive-icon
CIO Magazine recently published a report claiming that 80% of Google for Work customers with more than 1,000 users are not utilizing Google Drive. The statistic is based on whether or not users worked with Drive at least once per month. This is disappointing given that studies show the powerful benefits realized when the collaborative features of Drive are fully utilized.

While the report does not discuss why Drive adoption is low, we have our suspicions.

Peer-to-peer file services do not scale — not without some help

In Drive (and oneDrive and other cloud file services), users create their own folders and share them with individual and teams. Each user “owns” their space and their files and to find a file, it helps to know who shared it with you. And, without central management, naming conventions, and other controls, it is difficult to control and manage access to sensitive information.  While these file services are not as challenging as Windows for Workgroups (circa 1992), they come pretty darn close.  Users familiar with a central file structure are easily frustrated with peer-to-peer sharing and file services.

“Security” is confused with “Sharing”

Yes, Google recently announced that Ernst & Young has verified the ISO 27018 cloud privacy standard for Google Drive. But when users think of security, they are concerned about sharing — or permissions — of their files. In any cloud file service, it can be difficult to fully understand who will have access to the file you are creating or uploading.  And, the nuances of Google Drive can take time to learn.

For example, when sharing a link for a Google Doc with a person that does not currently have permissions, you are prompted to allow anybody with the link to view (or comment, or edit) the document. If your intended recipient forwards the message, access is available to others outside your original intention.

In Drive, and other similar services, the relationship between exposure (who can see, view, edit the file with or without credentials) and explicit access permissions has a learning curve that is often overlooked.  People will avoid using Drive if they are worried about exposure and permissions.

The rules are a bit different

Google Drive is more flexible, and in many respects more powerful, than traditional Windows and Linux file shares. This power, however, can be distracting to end users. Having multiple documents with identical names in a folder, for example, throws many for a loop. It’s not intuitive given their experience and it can create confusion as to which document is correct or current.

Using Drive and other cloud file services is different, but you can take steps to ease the transition and improve adoption.

Train Your Users: 

Beyond the basic “clicks and drags” of Google Drive, help your users learn and understand how to use Drive effectively. Cover permission settings so they understand how to share safely and with confidence. Discuss document naming and version management, including how to upload new versions of documents without creating duplicates. Help them learn now to navigate drive, use the search bar effectively, and launch applications from within the web interface.

Create a Managed File Service:

With an affordable add-on, you can overlay a more traditional file server structure onto Google Drive. Tools like AODocs File Server, you can add the aspects of a traditional file server to Drive:

  • Central ownership and control of space, top level folders, and folder hierarchies
  • Distributed access and permissions from a central authority
  • Conversion of personal to central ownership of files uploaded to, or created, within centrally managed libraries
  • Inherited permissions
  • Audit trails

Yes, there is a cost, but the value for many companies is much greater.

Manage Your Permissions:

Permissions are not just about user settings.  Permissions should — and can — be driven by your privacy needs and the content of your documents. Tools like BetterCloud and CloudLock give you the ability to monitor and manage user access and permissions based on business rules and content as it is created or uploaded. Analysis for HIPAA, PHI, PCI, and other compliance requirements is built-in, with the ability to create customized rules for your specific needs.

 

With the right tools, and a knowledgeable workforce, you and your team will better adopt and utilize Drive.  And with adoption, comes results.


Please Contact Us if you would like information about any of the services mentioned in this post.


 

0 0 Allen Falcon https://www.cumulusglobal.com/wp-content/uploads/2018/06/Cumulus-Global-logo-with-spacing.png Allen Falcon2015-09-30 10:39:032015-09-30 10:39:03Not Using Google Drive? You Are Not Alone

Assessing Your Google Apps Security Threats

July 10, 2014/in Education, General

accept button
The power of Google Apps comes from the variety and scope of its collaboration features.  Unfortunately, the same tools we use to share and to work more efficiently can be used against us. When users set permissions, they may accidentally (or intentionally) over-share, resulting in data leaks, disclosures, policy breaches, and regulatory violations.

With the easy to select and connect 3rd party mobile and web apps to your Google accounts in just a few click, employees can easily and unintentionally grant access to non-trustworthy apps.

How do you protect your users from threats they do not know exist?

Assessing and managing information security within Google Apps warrants a multi-faceted approach.

  1. Education. Make sure employees understand your organization’s privacy and security policies, and any regulations and laws you must follow.
  2. Education. Make sure your users understand the basics of how permissions work within Google Drive and Sites, and how to use settings to comply with policies.
  3. Education. Make sure employees know that 3rd party apps can be dangerous and cause problems.

Beyond Education, many organizations look to deploy data protection and security solutions that support policies, that monitor the Google Apps environment for risks and violations, and that can respond and remediate potential data sharing violations.

Before you invest, however, understand your risk.  By reviewing Drive content and permissions and analyzing the inventory of 3rd party apps accessing your Google Apps domain, you can best assess if and when additional security and administrative tools are warranted.  While this can be time-consuming, tools and services exist that can automate the process of gathering and analyzing Google Apps security threat information.

—

Through September 30, 2014, Cumulus Global is partnering with CloudLock, the Google Apps collaboration security company, to offer a comprehensive Google Apps Security Health Check, which will analyze both Drive content and the risk from 3rd party mobile and web apps.  Normally a service costing $1,000 to $5,000, we are offering the assessment for $300 or less.

Click Here for more information and/or to speak with a Cloud Advisor.

 

https://www.cumulusglobal.com/wp-content/uploads/2018/06/Cumulus-Global-logo-with-spacing.png 0 0 Allen Falcon https://www.cumulusglobal.com/wp-content/uploads/2018/06/Cumulus-Global-logo-with-spacing.png Allen Falcon2014-07-10 10:00:572014-07-10 10:00:57Assessing Your Google Apps Security Threats

Cumulus Global Offers Solutions and Seminars at FETC 2014

January 20, 2014/in Education

FETC-2014Visitors to FETC in 2014  in Orlando later this month have a unique opportunity to learn how Google Apps for Education can serve as platform for robust administrative and classroom computing.

Cumulus Global (Booth #256) is hosting a series of in-booth seminars covering a range of topics from system administration, data protection, and security, to 1:1 program design and professional development for faculty.  Cumulus Global is webcasting the sessions as well, for those unable to attend FETC in person.

With more than a dozen sessions, Cumulus Global intends to offer attendees new perspectives on how schools can effectively Deploy solutions, Gear Up with the best devices and infrastructure, and Transform the learning process.

Session presenters include experts from Backupify, Bettercloud, CloudLock, Edsby, and Eduscape Learning.

Click Here for more information, or to register for one or more of the webcasts. Feel free to Contact Us with any questions.

As a featured exhibitor, Cumulus Global is able to offer the following discount codes for FETC 2014 attendees:

  • Register using code FREE974 for your free Exhibit Hall Pass and access to the Learning Labs, a $50 value.
  • Register using code EDUCATE to save $60 on FETC Full Conference Registration.
https://www.cumulusglobal.com/wp-content/uploads/2018/06/Cumulus-Global-logo-with-spacing.png 0 0 Allen Falcon https://www.cumulusglobal.com/wp-content/uploads/2018/06/Cumulus-Global-logo-with-spacing.png Allen Falcon2014-01-20 10:00:072022-12-21 21:17:06Cumulus Global Offers Solutions and Seminars at FETC 2014

The 5 Most Trusted & Banned 3rd Party Apps for Google Apps Domains

December 16, 2013/in General

CloudLock
One of the benefits of Google Apps is the ability to integrate third-party applications.  One of the risks when using Google Apps, is that some third-party applications may request access to information and privileges that you do not want them to have.

In addition to letting you identify, approve, and block third-party application access to Google Apps data, CloudLock Apps Firewall provides a trust rating.  The Trust Rating lets you know what percentage of Apps Firewall users allow or ban each application.

Here are the top five Trusted applications:

  • Google Drive
  • www.google.com
  • Picasa
  • Google Chrome
  • Android Calendar

Here are the top five Banned applications:

  • Mailbox
  • Dropbox
  • 8 Ball Pool
  • Angry Birds
  • Chrysalis Animation

 

https://www.cumulusglobal.com/wp-content/uploads/2018/06/Cumulus-Global-logo-with-spacing.png 0 0 Allen Falcon https://www.cumulusglobal.com/wp-content/uploads/2018/06/Cumulus-Global-logo-with-spacing.png Allen Falcon2013-12-16 09:30:352013-12-16 09:30:35The 5 Most Trusted & Banned 3rd Party Apps for Google Apps Domains

Tuesday Take-Away: 6 Ways to Protect IP within Google Apps

June 12, 2012/in General

While some remain suspect of security and privacy with cloud computing, Google Apps actually offers ways to help protect and preserve a company’s Intellectual Property (“IP”) that are not readily available in traditional, in-house systems.  Why worry about IP? Because as business becomes more electronic, your contracts, agreements, change orders, and work product are more likely to be written, reviewed, updated, and negotiated on-line. Protecting your documents, data, and information means protecting your business.

Let’s Get Technical

Google Apps’ underlying data management is Write Once; Ready Many (aka “WORM”). In other words, once information is saved in Google’s system it cannot be altered.  Unlike MS Exchange or a Windows File Server on which a Domain Administrator can alter any existing content anywhere, once data is saved in Google Apps, it cannot be modified.

Granted, you can reply to an email and modify the embedded copy of the original message. But, the original message is still saved as it was received.  Similarly, you can open a Google Doc and modify the content, but the revision history is there and you can go back to a prior versions.

The big risk to WORM is the power to delete … but we have a solution for that too.

Here are Six Ways To Protect Your IP with Google Apps:

 

1) Comments in Google Docs

Even if you switch to MS Word for your final formatting, draft your documents in Google Docs using the “Insert Comment” feature.  By keeping editing writes to yourself and giving comments only permission to your associates, you have full control of the document’s contents.  You associates — be they co-workers, a client, or opposing council — have the ability to highlight portions of the document and comment.  Whether they ask questions or suggest alternate wording, you can reply in-kind via comment as you edit the document.

Once final agreement is reached, you can “resolve” the comment.  While it disappears from view, it is part of the permanent history of the document.

Imagine two lawyers discussing and agreeing to the intent of a contract clause.  If an issue were to come up at some point in the future, any discussion of the ‘original intent’ of the clause would be cut short by the comment thread saved at the time.

2) Message Discovery (now); Google Vault (soon)

As noted above, the big risk to IP in Google Docs is deletion.  Google Message Discovery (GMD) available to all Google Apps users,  provide a secure, compliant archive of all inbound, outbound, and internal email messages with retention of up to 10 years.  The service provides search and e-discovery tools as well.

Imagine a client refusing to pay for work that was not “officially authorized”.  With GMD in place, you can produce the email thread discussing the work and providing the authorization.

Google Vault, available to new Google Apps customers now and all Google Apps users in the near future, extends the archiving ability of Google Apps in several ways.   Google Vault recognizes that you IP is not just in email and that your retention needs will vary.  Google Vault lets you:

  • Archive email, instant messages, and documents
  • Provide unlimited retention of archived information
  • Take advantage of the WORM underpinnings of Google Apps to maintain and protect your IP.

3) Google Drive and Docs

In our increasingly electronic world, more work gets done on the go.  By implementing Google Drive, your users have the ability to work locally while synchronizing and saving files automatically in Google Docs.  Beyond providing a convenient way to work — online or offline — Google Drive provides a level of protection for your IP from local hardware issues.  Combined with a backup/recovery strategy (see below), you have even better data protection.

Also, by adding additional space, you can also strategically create a secure file sharing structure where ownership of folders and files mimics traditional file server models.

4) Protected Folders

One way to protect IP is to ensure that final documents are tamper-proof and protected from deletion.  You can prevent critical documents from being editing or deleted by setting up protected folders.  These folders provide defined view permission, but will prevent users from tampering or removing critical information from within Google Docs.

CloudLock is one such service that lets you create protected folders.  In doing so, you can also determine who can add files to these folders, who can view folder content, and which administrative account manages the folders.

5) Backup / Restore

While Google Apps prevents data loss from hardware/software issues and provides version histories, Google Apps cannot prevent user mistakes or acts of malice.  Files not protected from deletion (see above) are vulnerable.  Additionally, you still need to protect against problems that can occur on any file server, such as uploading and sharing virus-infected files.

Given that in users have critical data in each of the Google Apps services, tools like Backupify offer a broad range of protection.  Backupify protects user content in email, calendar, contacts, docs, and sites.

6) Permissions Monitoring

Google Apps makes collaboration easy.  And, while you can restrict users ability to share to some extent, understanding the visibility of IP within and outside your business, and monitoring your documents for changes in exposure is an emerging best practice.

A key element of the CloudLock service are the ability to monitor changes in document permissions, the ability to change document ownership, and the emerging ability to set alerts based on keywords and business rules.

Wrap Up

When moving your data from in-house systems to Google Apps or other cloud services, you want and need to make sure that your data is at least, if not more, secure and private. Just as with in-house systems, you have tools and services available to manage and protect your intellectual property when using cloud solutions.  Google Apps provides a great foundation with an infrastructure designed to protect data with every save.  Integrated, third party tools like CloudLock and Backupify, along with new features in Google Apps itself, provide a manageable, secure, ecosystem.

https://www.cumulusglobal.com/wp-content/uploads/2018/06/Cumulus-Global-logo-with-spacing.png 0 0 Allen Falcon https://www.cumulusglobal.com/wp-content/uploads/2018/06/Cumulus-Global-logo-with-spacing.png Allen Falcon2012-06-12 21:58:272012-06-12 21:58:27Tuesday Take-Away: 6 Ways to Protect IP within Google Apps

Friday Thought: Google Drive – Yield Before Your Leap

June 1, 2012/in General

Google (finally) announced and began releasing Google Drive.  For those not in the know, Google Drive is cloud storage available as a stand-alone service or as a component of Google Apps.  The stand-alone version included 5GB of storage for free with affordable plans for more space — a direct competitive threat to services like Dropbox and Box.  Both versions include sync clients for PCs, MACs, and iPhone/iPad that give you standard desktop/folder access to your data in the cloud.

Google Drive for Business

Google Drive for Business is a new component to Google Apps for Business that will roll out to customers over the next several weeks.  While the business version shares the device sync tool with the consumer version, it offers much more to the business customer:

  • Control over which users can use the service and which users can download and use the sync clients.
  • Control over which, if any, users can purchase additional storage independently
  • The ability to centrally purchase storage and allocate storage to users as needed

Benefits

  • You can now more easily use and integrate Google Docs as your file service; users can more easily collaborate and share information.
  • Users can work locally using their current desktop applications and files will be saved and shared in their Google Docs folders.
  • Users can have secure access to files from computers, tablets, and smart phones without the overhead of a VPN service.
  • Storage for uploaded or sync’d files in “native” formats has increased to 5 GB per user.

Challenges

  • Unlike an on-premise file server, Google Drive does not lock open files.  While you have version tracking, if two individuals are locally editing the same file, the most recent copy to sync will be the current version.
  • Users may quickly fill up their 5GB of space; additional storage is affordable.
  • Because sharing is easy, businesses should have policies and processes in place to oversee and manage permissions.

Deployment Strategy

In our experience, your Google Drive deployment strategy will focus on how you decide to manage your storage.  While nice, 5 GB per user will not be sufficient for most businesses, particularly since the space is user-specific.  Adding space is affordable, and will be necessary.

When you add space to Google Docs and Drives, you are actually subscribing to the additional space on a per user basis.  Licenses range in size from 20 GB to 16 TB at a monthly cost of $0.10 per GB or less (with no bandwidth and get/put charges).  While this strategy works, it will require monitoring space usage on a per user basis.

Another approach is to add a user account to serve as your file service.  In doing so, you purchase additional storage only for this “user” and configure the space along the lines of a traditional file server.  You have the freedom to create and share your top level folders and folder trees, and users will be able to see the file service as “Shared with Me”.  Users can then move folders to “My Drive” if they want the information available locally on their PC or Mac.

A central storage strategy also enables additional storage management options.  Tools like CloudLock Vault — a tool to monitor permissions and create tamper-proof and protected folders — run best when the space is owned by a generic file service administration account.

Alternatives

Almost always, there is more than one option.  As an alternative to Google Drive, tools like SyncDocs provide the ability to sync Google Docs (with or without extra storage) to a local file structure.  In some ways, SyncDocs offers a better user experience.  SyncDocs has more options with respect to folder location, the ability to select which Google Doc folders to sync locally, and the ability to specify conversion preferences.

When looking at Google Drive and its alternatives, we recommend walking through a few use cases to see which piece of software best meets your needs.

Conclusion

Google Drive, combined with Google Docs and additional space, provides Google Apps users with more opportunity to simplify file services.  Moving file services to the cloud is a logical next step for many businesses, as it can further reduce and simplify your IT footprint well beyond replacing a file server.  The need for VPN and expensive remote access servers can be greatly reduced or eliminated.

If you want to learn more or join us for a demo, please let us know.

 

https://www.cumulusglobal.com/wp-content/uploads/2018/06/Cumulus-Global-logo-with-spacing.png 0 0 Allen Falcon https://www.cumulusglobal.com/wp-content/uploads/2018/06/Cumulus-Global-logo-with-spacing.png Allen Falcon2012-06-01 08:00:542012-06-01 08:00:54Friday Thought: Google Drive – Yield Before Your Leap

Recent Posts

  • 9.5 Questions to Answer for a Secure AI Foundation
  • Three Pillars of AI Security for SMBs and Schools
  • Secure Gemini AI in Google Workspace

Featured Blog Topics

  • Artificial Intelligence / AI
  • Managed Cloud Services
  • Cybersecurity

Read

  • Blog
  • Newsletter
  • Microsoft Cloud Monday
  • Google Workspace Wednesday

Watch

  • 3T@3 Series
  • Coffee and Clouds
  • Event Recordings
  • Cumulus Global Channel

Explore

  • Library
  • Events Calendar

Phone / Fax / Email

  • 866-356-1202
  • 508-948-4070
  • info@cumulusglobal.com

Headquarters / Boston

  • Street Address

    4 Bellows Rd / 2nd Floor
    Westborough, MA 01581

  • Mailing Address

    PO Box 1129
    Westborough, MA 01581-6129

Regional Offices

  • Southeast Office

    120 W Trinity Pl
    Decatur, GA 30030

Copyright © 2026 - Cumulus Global | Privacy Policy | Terms of Service | Disclaimer | Website by Cold Spring
Scroll to top Scroll to top Scroll to top