When an organisation decides to operate on the public cloud, what does it lose?

 When an organization opts for public cloud services, it relinquishes direct control over many aspects of security and privacy. While the cloud service provider maintains the physical servers, the organization loses the ability to physically access these servers. This is a significant shift from traditional on-premises data centers where the organization would have complete control over and access to the physical infrastructure. In the context of the public cloud, the organization must rely on the cloud provider’s security measures and protocols to protect its data. However, it’s important to note that while physical access is lost, cloud providers typically offer robust security features and compliance certifications that can compensate for this loss12.

References: The information provided aligns with the principles outlined in the BCS Foundation Certificate in Information Security Management Principles, which emphasizes the importance of understanding the security controls and risks associated with different types of information security management environments3. Additionally, the National Institute of Standards and Technology (NIST) provides guidelines on security and privacy in public cloud computing, which discuss the shared responsibility model and the implications of losing physical control over servers2.