How secure is Google Apps?

Are you wary of using web-based systems for your business? If so, you’re not alone.

What if the vendor goes out of business? What if their servers get hacked? What if they steal my data?

These are important questions. (They are also ironic questions if you are a Facebook user and share all your personal information with the world.)

It’s true that different systems offer different levels of security. But it’s a bit rich for this PC World article about Google Apps for Government to claim this:

“…just because Google Apps has been declared secure enough for government data does not mean that SMBs [small and medium businesses] should jump on the Google bandwagon without some due diligence.”

Yes, the author puts in his ‘without some due diligence’ caveat. And yes, for some industries (such as law firms), electronic data is subject to specific legal and regulatory requirements.

But to present this as an across-the-board issue for small and medium businesses is not helpful. Can your business really justify the time and resources needed for an in-depth due diligence on the security risks posed by Google Apps? Is it a real issue that’s worth that kind of investment?

Google provides detailed security and privacy information for interested parties. But for your average small business owner, the fact that Google Apps is used at Motorola and in government agencies like the City of Los Angeles is far more important than its SAS70 Type II and FISMA certifications.

Who would you trust to keep your data secure? Google with its information security team, external security audits, and continuously updated technology. Or the suburban IT guy who tries to patch the server in your office every month or so?