OpenBrighton - The Cloud and your business

Open Source, Cloud and your Business – 11/14 – Brighton - #OpenBrighton
The “Cloud” and your Business
Understanding Cloud, benefits and risks

Background informationBackground information
Paolo Vecchi
– CEO of
• Omnis Systems Ltd (UK)
• Omnis Systems Srl (Italy)
– Scouting for and distributing Open Source and Linux based
solutions.
– Passionate about Linux, Open Source and security.

Omnis Systems is the only distributor
specialised in Open Core and
Open Source solutions
Background informationBackground information

What is “Cloud”?What is “Cloud”?

Some say...Some say...

……but actually ...but actually ...

…… it's a lot of blinking lightsit's a lot of blinking lights

NIST definition of Cloud ComputingNIST definition of Cloud Computing
On-demand self-service
Log-in & buy
Broad network access
Access from any device
Resource pooling
Shared resources
Rapid elasticity
Assign & release resources automatically
Measured service
Pay as you go
Characteristics

Software as a Service (SaaS)
Just use pre-deployed software
Email/Office365/Google Apps/Zarafa
Platform as a Service (PaaS)
Application environment
Develop & deploy your apps
Infrastructure as a Service (IaaS)
Processing power, storage, networking
Using hardware without owning it
Service Models

Private cloud
Hardware reserved to customer
Shared connectivity/in-house deployment
Public cloud
Hardware shared with other users
Shared infrastructure
Hybrid cloud
Mixed provisioning in-house/datacentre
Moving workload when necessary
Deployment Models

Already seen it somewhere?Already seen it somewhere?
For the past 20 we had:
Outsourcing
Hosting
Housing
CDN (content distribution networks)
But now we have:
Better tools
Better connectivity
Better marketing

Cloud, what is it good for?Cloud, what is it good for?
Marketing
A lot easier to sell “Cloud”
than the NIST definition
or as JBOS
(Just a Bunch Of Servers)
with very good management software & resiliance

Cloud, a lot more than JBOSCloud, a lot more than JBOS
Multiple, redundant, self-replicating datacentres

Understanding what you getUnderstanding what you get
The Cloud service models

But this is not CloudBut this is not Cloud
These are services or hosted applications

Public Cloud can be a risky business
Not all fluffy things are nice

Our view about Public “Cloud” servicesOur view about Public “Cloud” services
What are the major “Cloud” players doing?

Did anybody say “Safe Harbor”?Did anybody say “Safe Harbor”?
US-EU Safe Harbor principles:
Notice - Individuals must be informed that their data is being collected and about how it will be used
Choice - Ability to opt out of the collection and forward transfer of the data to third parties
Onward Transfer - Transfers of data to organizations that follow adequate data protection principles
Security - Reasonable efforts must be made to prevent loss of collected information
Data Integrity - Data must be relevant and reliable for the purpose it was collected for
Access - Individuals must be able to access information held about them, correct or delete it if it is inaccurate
Enforcement - There must be effective means of enforcing these rules.

Lack of control as cloud clients may no longer be in exclusive control of their data
Lack of availability due to lack of interoperability (vendor lock-in)
Lack of confidentiality there is a risk that personal data could be disclosed to (foreign)
law enforcement agencies without a valid EU legal basis
Lack of intervenability due to the complexity and dynamics of the outsourcing chain
Lack of isolation: A cloud provider may use its physical control over data from different
clients to link personal data
The EU view about Public “Cloud” servicesThe EU view about Public “Cloud” services
The Data Protection Working Party was set up under Article 29 of Directive 95/46/EC.
It is an independent European advisory body on data protection and privacy.
Data protection risks of cloud computing
(extract from the EU Data Protection Working Party document WP 196)

More small issues about Public “Cloud”More small issues about Public “Cloud”

Public “Cloud” can be a dangerous placePublic “Cloud” can be a dangerous place
How is our data being used?
As a private users you have a choice.
But when your data is shared by your Council?
Inconsistent privacy laws
Or UK Parliament with Office365?

So, is Cloud secure?So, is Cloud secure?
Security is not like installing an antivirus
Methodologies and procedures should be in place
All employees should be trained for security
Credentials are one of the many weak links
Any connected device can be an entry point
Any software running in your Cloud can contain vulnerabilities
When a breach will happen, how will you know?
Remedies?
Use a provider you can sue, they'll work harder to keep your data secure
As much as your PC

Cloud security mattersCloud security matters (most of the times)(most of the times)
Are you a potential target for industrial espionage or deal with valuable data?
Then you may have to look at the many aspects of data security.

Decentralising the InternetDecentralising the Internet
?
Taking back control of our data and applications
Alternatives are available and costs can be even lower

Cloud can be good for you
but read the small print

Cloud can be usefulCloud can be useful
Enabling IoT Provides “burstable” resources
Good for mobile workers Interconnecting devices globally

Cloud can be usefulCloud can be useful
Large workloads
Email marketing
Primary MX
AV/Anti-Spam
Distributed users
and offices
Some examples of Cloud use
Disaster recovery
Web services
Backup
Data synchronisation
… and many other services but...
check what you put in the Cloud
You are the data controller

So, is Cloud for me?So, is Cloud for me?
Distributed workforce
Web services
Need flexible computing power
Increase resiliency
Move from CAPEX to OPEX
Verify requirements

Does Cloud save money?Does Cloud save money?
Startups needing computing power
Businesses with no internal IT
Temporary pay as you go services
Internet facing services
Shared services (Public sector)
Some large infrastructures
Reducing tech support costs (employees)
Yes, no, maybe...
Must evaluate short term saving with long terms benefits

Open Source can cost less than generic Cloud services
Disadvantages:
- No control over the technology
- No control over future services & features
- Security issues
- Requires additional infrastructure for secure communications
- Loss of data and complex migration to other solutions
- Difficult to integrate local and legacy services

Open Source can cost less than generic Cloud services
Additional benefits:
- Open Source based solution and infrastructure
- Low cost/low maintenance in-house solution
- Reduced storage usage thanks to attachments deduplication
- It can be integrated with DMS/ECM and Cloud based storage

First of all, check what you haveFirst of all, check what you have
Is this the optimal configuration? Consolidate first
Some move to Cloud services because of complex infrastructures
Cloud still useful?

Do you need a global service?Do you need a global service?

Look at your “Cloud” in the eyesLook at your “Cloud” in the eyes
Your Cloud provider could be just around the corner

Questions?Questions?

Disclaimer:
The information included in this presentation may not be complete and could be misinterpreted as more information and explanation was provided during the event.
The Open Source, Cloud and your Business event included several sessions that looked at how Open Source and Cloud could help businesses and public sector organisations be more efficient
with presentations from various Open Source and Cloud services providers.
If you think some of the data is incorrect or depict your organisation in a way you don't like we are happy to discuss your concerns at our next public event.
Images used are believed not to be covered by copyright or any restriction when used in public presentation. If you believe any of the content should not be used in this presentation please let us
know and we'll act on your request promptly.
Logos, names and trademarks are propriety of their respective owners.

OpenBrighton - The Cloud and your business

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (13)

Ähnlich wie OpenBrighton - The Cloud and your business

Ähnlich wie OpenBrighton - The Cloud and your business (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

OpenBrighton - The Cloud and your business