Secordit home
Contact

What is cloud computing?

Cloud computing means using services such as email, file storage or business software that run on a provider's computers and are reached over the internet. They are not only on a device or server you keep yourself. NCSC cloud guidance is written to help organisations choose, configure and use those services securely. 134

By Secordit. Last checked: 10 November 2026.

Go to the steps · All glossary terms

How it works

  1. Two ideas matter for small organisations. The service model is how much the provider runs for you and how much you run yourself. The deployment model is where the service stores and processes the work. 4
  2. NCSC explains this under the shared-responsibility model: some security work sits with the provider, and some remains with the customer. NCSC generally recommends preferring that the provider manage as much as is appropriate. 4
  3. NCSC notes that cloud is often the preferred option when organisations procure new IT, including under the UK government's Cloud First policy. That is context for organisations, not a recommendation that every reader must move to the cloud. 31

What UK guidance says

The NCSC cloud page points individuals looking for everyday advice to Cyber Aware advice. That leads to the NCSC's top tips for staying secure online. That is not the full enterprise collection. Organisation readers can use the NCSC cloud security principles pages. This page explains the shared-responsibility idea and points to that collection, rather than listing every principle. 125

If you use cloud storage as a separate copy of important files, see the backup page. Protect that account with a strong sign-in and 2-step verification. 4

Warning signs

  • A small firm treats the provider as responsible for every security task, or treats itself as having none. 4
  • An everyday user is pointed at the full enterprise cloud collection when they wanted household advice. The NCSC cloud page points individuals to Cyber Aware advice, which leads to the NCSC's top tips for staying secure online. 12
  • A comparison claims that the cloud is always safer, or always riskier, than a local device. This page does not make that claim. 34

What to do now

  1. If you run a small organisation, read the NCSC introduction to cloud security and the page on understanding cloud services, including shared responsibility. 34
  2. If you are looking for everyday advice on using online services securely, follow the Cyber Aware advice on the NCSC cloud page. That leads to the NCSC's top tips for staying secure online. 12
  3. If you use cloud storage as a backup, protect the account with a strong sign-in and 2-step verification. See the backup glossary page. 1

UK reporting and support

How to protect yourself

  • Understand which security work sits with the provider and which remains with you. 4
  • Protect cloud accounts with a strong sign-in and 2-step verification, especially where the account holds a backup of important files. 1
  • Use the NCSC's top tips for staying secure online, which the cloud page reaches through its Cyber Aware advice, for everyday advice. Use the NCSC cloud collection if you are choosing or configuring a service for an organisation. 124

Frequently asked questions

What is cloud computing, and who is responsible for keeping my data safe?

It means using services that run on a provider's computers and are reached over the internet. NCSC explains a shared-responsibility model: some security work sits with the provider, and some remains with the customer. 43

Does the UK government tell every organisation to use the cloud?

NCSC notes that cloud is often the preferred option when organisations procure new IT, including under the UK government's Cloud First policy. That is context, not a recommendation that every reader must move to the cloud. 31

Where should a household reader start?

The NCSC cloud page points individuals looking for everyday advice to Cyber Aware advice. That leads to the NCSC's top tips for staying secure online. That is not the full enterprise collection. 12

Matching kit

Account Lockdown Kit · £19 · Digital download.

A self-serve guide to securing email, phone and online accounts. It does not promise to stop every attack.

General information, not legal, financial or personalised security advice. Secordit is not a police or bank reporting service.

News Pulse

Account security, explained by email.

Read about News Pulse

Sources

  1. NCSC, Cloud security guidance. Accessed 10 November 2026 (Europe/London).
  2. NCSC, Top tips for staying secure online. Accessed 10 November 2026 (Europe/London).
  3. NCSC, Introduction to cloud security. Accessed 10 November 2026 (Europe/London).
  4. NCSC, Understanding cloud services. Accessed 10 November 2026 (Europe/London).
  5. NCSC, The cloud security principles. Accessed 10 November 2026 (Europe/London).
  6. Report Fraud, Report Fraud. Accessed 10 November 2026 (Europe/London).
  7. Report Fraud, Guide to reporting cyber crime and fraud. Accessed 10 November 2026 (Europe/London).
  8. Police Scotland, How to report a crime - Police Scotland. Accessed 10 November 2026 (Europe/London).
  9. Report Fraud, Reporting cyber crime and fraud or phishing attempts - Report Fraud. Accessed 10 November 2026 (Europe/London).