Digital security protocols in an architects practice

[Christiaan]

What security protocols do you use in your practice? We recently received a cyber security questionnaire from our PI insurer and while it doesn't have an effect on our premiums (yet) it has prompted a discussion and review of our own protocols, particularly in our case around cloud computing and wifi access.

[elepp]

Yeah, we are very wary of the Vectorworks Cloud Service. While it provides some nice features, that we test with some unimportant files, we would not use it for our general projects. Being not sure where the information resides and who has jurisdiction over it. (Same goes for Google Drive, Amazon Cloud, Microsoft OneDrive, etc.) Recently there was a discussion here in Germany, that we need our own cloud services, because even if Microsoft or Amazon are promising to keep the data of german customers on german servers, the CLOUD Act still forces these providers to comply with requests form the american government to release information hosted abroad. And we have no way of knowing if our information was accessed and shared.