Data ownership is another critical point for agencies to consider when researching a cloud solution. Almost all cloud service providers specify that the client owns the data. But IACP says to get that in writing. Also IACP advises agencies make it clear to the cloud provider that your data is off limits for any data mining or ancillary operations of that company. Finally, it's not enough for administrators to know their agencies retain full ownership of its data, they also need to know what the procedure is for migrating it to another service or back to your in-house servers.
As mentioned, security is probably the most important concern for any law enforcement agency considering a cloud solution. That's because not only does the agency want to protect its internal information, it also must protect confidential data from federal and state databases. Any computer system that can access such confidential data must comply with the security regulations set by the FBI's Criminal Justice Information Services (CJIS). This includes cloud solutions.
Donlan says Microsoft spent enormous resources on securing its Azure Government Cloud for law enforcement operations. "We did CJIS from the ground up. It was engineered into the Azure Government Cloud from the beginning, and we will attest to CJIS compliance on a state-by-state basis."
Donlan says the security built into Azure protects all aspects of the solution, including data storage and the dynamic software platform, which gives users the ability to send emails and produce documents in Microsoft's subscription software service Office 365.
Microsoft also ensures security beyond what some other cloud providers are willing to do for their law enforcement customers, according to Donlan. He says the Azure system is completely isolated from the company's other cloud solutions. Also, all of the employees who work on Azure have been vetted through CJIS background checks. "We were the first hyperscale cloud solution provider to do that," he says.