Re: Missing the Point?
It will be interesting to see how one can audit against GDPR requirements...
I recall having a robust discussion about why we (the company I worked for) need to be careful about transitioning our accounts package into the cloud. Partly about the risks of multi-tenanted environments and certainly about access controls to our data.
Sadly (for them as it turned out) costs efficiencies won the day (short term). In a strange twist it was an outage issue that did for them.