An article by Raimund Konz, system administrator at TFU
Edward Snowden’s revelations have raised a great deal of awareness—and also a great deal of uncertainty—about IT security. The topic is a hot issue right now, but is the issue itself really that important?
Data security is an ongoing process and should certainly not be addressed on an ad hoc basis. This is probably perfectly clear to many of those responsible. The real challenge lies in maintaining a sufficient attention to detail and consistently addressing the issue over the long term.
Snowden’s descriptions of the capabilities of U.S. authorities and their internationally coordinated approach show that this is not a matter of leaks in our systems, but rather a sieve-like seepage of details leaving our networks.
And it is precisely this fact that shows that this is not just a hot-button issue, but an ongoing concern that must be addressed from the ground up and in a sustainable manner in the planning of our information systems. Relying on the services of an untested cloud provider simply because of cost considerations or time pressure can quickly backfire once you realize which routes and connections are used for data transmission.
That’s why it’s advisable to rely on our own systems: ones that are organized locally or at least nationally and are in line with our legal system. IT isn’t as location-independent as people think. A foundation of trust isn’t built on promises in glossy brochures that lack substance, but through actual interactions with real people.
Here, you benefit from the collaborative advantages offered by the TFU. By utilizing our shared network and our well-established practice of running servers in-house—right here in our own basement—we are able to devote greater attention to network operations and develop a deeper understanding of IT than would be possible on an individual basis.
For over 10 years, TFU has been providing all partner companies with network access that combines static IP addresses with high symmetrical bandwidth. This makes it possible to effectively utilize a local database in a highly mobile small- and medium-sized business environment. Storing and transmitting data via U.S. servers can only be avoided in a competitively neutral manner if the company’s own infrastructure also enables a comparable quality of service.
So the answer is: “No, it’s not a hot-off-the-press issue, but an important one that we shouldn’t just shelve right away.” This calls for strategic planning with a long-term perspective, not a rash, spontaneous reaction to a current event making headlines in the media.
We should, however, be grateful to Edward Snowden for exposing these abuses with great courage and dedication. Regardless of whether his claims are true or false, they provide a good opportunity to carefully examine our own position, our options for action, and the risks we face.
