More and more of business operations are being done on the web or ‘in the Cloud’ through online stores, and web-based email, accounting systems and CRMs. But what are the opportunities and where are the threats to managing these “Cloud” business solutions?
This interactive session will step you through how to develop the right strategies when implementing and managing Cloud business services which ensure you:
Maximise the cost and convenience benefits of the Cloud, while
Minimising the risks associated with Cloud services
8. Source: http://www.infoworld.com/d/cloud-computing/what-cloud-computing-really-means-031
A few ways of using the Cloud
1. Software as a Service (SAAS)
– Email and Word processing
– Accounting system
– Human Resource/Project Management
– Customer Service Management (CRM)
2. Platform as a service (PaaS)
– Operating Systems
– Web services
– Development Platforms
3. Infrastructure as a service (IaaS)
– Data storage
– Processing power
– Server virtualisation
9. Source: http://www.infoworld.com/d/cloud-computing/what-cloud-computing-really-means-031
A few ways of using the Cloud
1. Other Cloud services :
– Desktop as a service (DaaS)
– Network as a service (NaaS) (VPNs)
– Storage as a service (STaaS)
– Security as a service (SECaaS) (Authentication,
Antivirus, Intrusion Detection)
– Data as a service (DaaS)
– Test environment as a service (TEaaS)
10. Pros:
• Anytime, anywhere, any device
• Quickly ‘scale up’
• Stronger security
• External backup-storage/services
• Reduced license costs
• Outsource ICT services
• Collaboration
• Synchronisation
• Greener computing
Cons:
• Where is the data?
Ownership/Privacy/Security
• Need internet connection
• Interoperability (Open standards)
• Vendor lock-in
• Internet required
Why use the Cloud?
Image: ‘Open Sky’ by Vanguard Visions Consulting - http://www.flickr.com/photos/77018488@N03/8496879398
13. Identifying Cloud Opportunities
Source: Department of Finance and Deregulation
http://agimo.gov.au/2012/09/19/final-release-a-guide-to-implementing-cloud-services/
1. Assess suitability for
business needs
2. Consider timing and
drivers
3. Consider financial impacts
4. Consider organisational
capability
5. Manage change
6. Review governance
14. Implementing Cloud Services
Source: Department of Finance and Deregulation
agimo.gov.au/2012/09/19/final-release-a-guide-to-implementing-cloud-services/
1. Build a business model/case
2. Assess the risk
3. Determine requirements
• Functionality
• Standards
• Performance
• Manageability
• Security
• Compliance
4. Prepare an exit strategy
5. Determine contractual terms
6. Approach the market
7. Select a provider
8. Implementation / Maintenance
15. Cloud Computing
Security Considerations
Source: Department of Defence:
www.dsd.gov.au/infosec/cloudsecurity.htm
Maintaining Availability/
Functionality
1. Business data/functionality
2. Your Data back-up plan
3. Your continuity / disaster plan
4. Network connectivity
5. Impact of outages
6. Vendor continuity / disaster plan
7. Vendor guarantee
7. Service Level Agreement (SLA)
8. Compensation
9. Data integrity and availability
10.Data restoration
11.Scalability
12.Changing Vendors
16. Cloud Computing
Security Considerations
Source: Department of Defence:
www.dsd.gov.au/infosec/cloudsecurity.htm
Protecting data from
unauthorised access
1. Type of cloud computing service
2. Sensitivity of data
3. Legislative obligations (eg Privacy
Act, Archiving Act)
4. Countries which can access the data
(eg Patriots Act)
5. Data Encryption
6. Destruction of data
7. Remote monitoring / management
8. Data ownership
9. Gateway technologies /
certifications
10.Content filters
11.Security services
12.User authentication
13.Procurement processes
17. Why manage?
• Reduce possible risks
• Enables continuous improvement
• Informs planning/decision making
• Increases Stakeholder confidence
• Incorporates int/ext factors
• Identifies procedures/processes
• Ensures the right infrastructure
Barriers?
• Lack of commitment
• Lack of processes/planning
• Lack of resourcing/finances
• Others?
Managing your Cloud Business Solution
Image: ‘Dell in the Cloud Think Tank at the Skyloft, Millbank, London’ by DELL Inc - http://www.flickr.com/photos/dellphotos/8182050295/
27. Achievability
Image: Designing Learning in the Digital Age – Melb March 2013 – Vanguard Visions Consulting: http://www.flickr.com/photos/77018488@N03/8569652009/
Cloud computing is the use of computing resources (hardware and software) that are delivered as a service over a network (typically the Internet). The name comes from the use of a cloud-shaped symbol as an abstraction for the complex infrastructure it contains in system diagrams. Cloud computing entrusts remote services with a user's data, software and computation.(http://en.wikipedia.org/wiki/Cloud_computing)
What terms do people know – how are they using these?What will you do differently in your business?
One early SpiderOak Blue Private Cloud customer is the Department of Defense. Oberman says he can't discuss specifics of the deployment at the moment but notes that over 10,000 users are presently involved and that the deployment is likely to serve over 100,000 users eventually. "It's pretty significant," he said.http://www.informationweek.com/storage/data-protection/spideroak-encrypted-cloud-storage-dropbo/240005894
1. SaaSThis type of cloud computing delivers software applications through a browser to thousands of customers using a multitenant architecture. This means no upfront investment in servers or software licensing. EgSaaS"desktop" applications include Google Docs and Zoho Office2. Utility computingThisoffers online storage and virtual servers which you can access on demand. Useful for supplemental, non-mission-critical needs, and could replace parts of your computer storage needs. Eg Google Drive or Dropbox3. Platform as a serviceAnother SaaS variation, this form of cloud computing delivers development environments as a service. You build your own applications that run on the provider's infrastructure and are delivered to your users via the Internet from the provider's servers. These services are constrained by the vendor's design and capabilities, so you don't get complete freedom, but you do get predictability and pre-integration. 4. Other cloud servicesLike all ‘as a service’ (aaS) services, these other services are based on the concept that the product can be provided on demand to the user regardless of their geographic or organisational separation of provider and theconsumer.Source: http://www.infoworld.com/d/cloud-computing/what-cloud-computing-really-means-031http://en.wikipedia.org/wiki/Cloud_computing
1. SaaSThis type of cloud computing delivers software applications through a browser to thousands of customers using a multitenant architecture. This means no upfront investment in servers or software licensing. EgSaaS"desktop" applications include Google Docs and Zoho Office2. Utility computingThisoffers online storage and virtual servers which you can access on demand. Useful for supplemental, non-mission-critical needs, and could replace parts of your computer storage needs. Eg Google Drive or Dropbox3. Platform as a serviceAnother SaaS variation, this form of cloud computing delivers development environments as a service. You build your own applications that run on the provider's infrastructure and are delivered to your users via the Internet from the provider's servers. These services are constrained by the vendor's design and capabilities, so you don't get complete freedom, but you do get predictability and pre-integration. 4. Other cloud servicesLike all ‘as a service’ (aaS) services, these other services are based on the concept that the product can be provided on demand to the user regardless of their geographic or organisational separation of provider and theconsumer.Source: http://www.infoworld.com/d/cloud-computing/what-cloud-computing-really-means-031http://en.wikipedia.org/wiki/Cloud_computing
What business services do you currently use?Are any Cloud Services?What are the adv/disadv of both?Ask participants to undertake a Business Solutions Comparison (Handout) on computer based or Cloud Services (or hybrid)Business Solutions Comparison (Handout)Software/Service Computer/Server/Hard drive/USB Cloud Hybrid (Sync)Email XDoc Storage X X XDoc SharingOffice products eg Word, Excel etcAccounting SoftwareCRMHR/Personnel ManagementProject ManagementCalendarSpecialist SoftwareOthers?
Maintaining Availability / Functionality of Business ServicesBusiness data/functionality – what is mission critical for your business?Your Data back-up plan – what does this look like now? Your continuity / disaster plan – what does this look like now?Network connectivity – how reliable is it?Impact of outages - Vendor continuity / disaster plan Vendor guaranteeService Level Agreement (SLA)CompensationData integrity and availability - Data restoration - ScalabilityChanging Vendors
Protecting data from unauthorised accessType of cloud computing service – which would provide the best protection?Sensitivity of data – what will be the impact if data is accessed?Legislative obligations - Privacy Act, Archiving Act, Others? – how do they impact your business?Countries which can access the data (eg Patriots Act) – where is your data stored?Data Encryption – is this an imperative?Destruction of data – how is data removed from Vendor’s servers?Remote monitoring / management – can you have some control over your Cloud services?Data ownership – Who owns the data?Gateway technologies / certifications – what types of security measures does the Vendor have in place?Content filters – Will this impact your usage? Do they need to be strengthened?Security services – what are the Vendors policies/processes and technologies like?User authentication – what identity and access management systems are being used?Procurement processes – How can you verify the Vendor is legit and reliable?
Why manage your cloud business solution?Identify and reduce possible risks – likelihood vs consequences – whether physical, emotional or financial harm, environmentalEnables continuous improvementEnables businesses to achieve their goals through informed planning and decision-making Increases stakeholder confidenceIncorporates internal/external factors eg cultural (attitude/embedded/integral part of the business) and legislationIdentifies procedures and processes to communicate, monitor and review Creates infrastructure to analyse, evaluate and treat riskBarriers?Lack of commitmentLack of processes/planningLack of financesOthers?
Group analysis of internal/external factors and stakeholders for any existing or future Cloud Business Solutions
Group SWOT Analysis of implementing/managing a cloud business solution for your business
Complete the Risk Analysis table for 2 possible risks associated with using Cloud Services
How will the cloud service better meet your business needs / objectives and improve your business operations?How will it meet your customer needs?Will you be getting value for money / improved productivity?What will the ROI be in changing to a cloud service?
What security services does the vendor have?What security processes do you need to implement eg ‘password policy’?How will the service integrate with your existing systems/software?
Who owns the data?How will the data be backed up?How can you get your data out?What recovery plans does your vendor have?What recovery plans will you need?
What is the current track record of the vendor?Who else is using their services?
What change management processes will you need to deploy?What requisite skills will you / your staff / your customers / your suppliers need?
What will you investigate further and why?
Ask participants to complete the online workshop evaluation