tials can be stolen while they are transmitted over the air. To avoid being hacked, companies require employees to log in with strong passwords and multi-factor authentication. An example of multi-factor authentication might be a password and a token that generates a unique code that users type into their computer when they log into the cloud. These organizations may also mandate encryption on transmissions sent from mobile devices. As a further step, organizations may lease security appliances (computer hardware with specialized software) or security software from companies such as Amazon and Alert Logic. In addition to its HMS security application, Amazon and other cloud security companies such as Threat Stack offer a software application with assessment tools to evaluate applications' vulnerability to hackers, anomalies in workflow, and compliance with industry standards. Finally, it's up to customers to monitor and update applications and browsers in the cloud to avoid possible security breaches. Customers can request reports in the www.TechnicalPDF.com form of security logs from their cloud provider SO that they or their consultants can audit their applications for security breaches. Logs that indicate spikes in usage may be indicative of a denial of service attack where overwhelming amounts of traffic are sent to a site, making it difficult or impossible for legitimate users to access these applications. Furthermore, hackers may introduce viruses that destroy data files in cloud-based applications or steal a company's private information via hacking attacks. Shadow IT-Departments Independently Signing up for the Cloud In large companies it's not unusual for staff in various departments to sign up for cloud services that fit the particular needs of their department without prior approval from the IT (Information Technology) staff. If the department stores intellectual property or confidential information in the cloud, they may not have the expertise to manage the security needed for access to the cloud. They