Upload
melina-worland
View
225
Download
2
Tags:
Embed Size (px)
Citation preview
BUSINESS RISK AND THE CLOUD
START WITH MAKING CLOUD LESS CLOUDY
© 2013 deRisk the Cloud / Beyond Solutions @deRisktheCloud
Buzzwords Blurred
© 2013 deRisk the Cloud / Beyond Solutions @deRisktheCloud
Applications Anywhere
Information &
Intelligence
Communicated &
Protected
Cloud delivers:
© 2013 deRisk the Cloud / Beyond Solutions @deRisktheCloud
Revenues Up
Costs Down
Growth Enabled
Brand Enhanced
The Silver Lining (Business)
© 2013 deRisk the Cloud / Beyond Solutions @deRisktheCloud
Revenues Up
Costs Down
Growth Enabled
Brand Enhanced
Behind the Business ‘Silver Lining'
Reliable,Available
Secure
Functional,Interoperabl
e
Delivered, now, at a lower cost
© 2013 deRisk the Cloud / Beyond Solutions @deRisktheCloud
the Common Denominators… and the Usual Suspects
© 2013 deRisk the Cloud / Beyond Solutions @deRisktheCloud
Reliable,Manageable
Reduced & Controlled
Costs
Barriers Removed (Securely)
Network as Critical Enabler
The Silver Lining (Technology)
© 2013 deRisk the Cloud / Beyond Solutions @deRisktheCloud
Reduced & Controlled
Costs
Barriers Removed (Securely)
Network as Critical Enabler
ReliableManageable
Scalable
Behind the Technology Silver Lining
Available Accessible
Secure Functional
© 2013 deRisk the Cloud / Beyond Solutions @deRisktheCloud
RISK is a 4 Letter Word
With Critical Touch-points Across the Business© 2013 deRisk the Cloud / Beyond Solutions
@deRisktheCloud
Pre-Cloud Planning QuestionsAre your requirements and targets clear and understood? What cloud services do you need; Which are you already using? For legacy moves or replacements, are migration plans in
place?What is the track record and customer base of the provider?
Where are their data centres / where will your data reside? What tier level Data Centre service am I getting? Can I speak with a current customer reference; Can I speak
with a customer who has exitied?On the subject of data, who owns it and controls it, legally and contractually?
How and where are Backups and Restores administered and managed?
How do I go about administering, managing and controlling my databases?
Tell me about your networks and the technology behind your cloud
Do you deliver over a resilient, diverse network?
Who is providing your network services? What type of kit are you running on; Can I see your technology roadmap?
Tell me about your approach to and offers in the Security space What security policies and controls are delivered as standard? In the event of a security breach, who will I be speaking with:
you or a third-party provider?Tell me about your support model for my business users, technical users and developers
Are your staff based in the UK or will they be accessing my system and data from other countries?
Will we have an account manager and, if yes, what does that mean?
Tell me about exiting How do I get my data back to change suppliers should a better answer become available?
What are the mechanisms to ensure a cost effective repatriation of applications and data (to either another provider or back into my own data centre); what are the costs and timings of such decommissioning?
And on to the Contract:
What is the term; Are there exit penalties? Up-front v. long term costs-to-scale ‘hidden costs’ around storage, memory and core upgrades,
data transfer, ongoing backup and archivingWhat are the service levels / What happens if my systems are unavailable?
In such an eventuality, with whom will I be speaking: you or a third party?
What should we expect if it doesn’t all ‘go to plan’, either on the way in or once we are there?
This is only a
preliminary Set
of questions!
© 2013 deRisk the Cloud / Beyond Solutions @deRisktheCloud
The Key Risks on the Way to the Cloud
Incomplete Definition of Requirements
Lack of thorough Planning
Lack of Clarity around Goals
Lack of a cross-Business Model of Risk
Lack of Organisational Commitment
Cloud Provider Selection & Contract
© 2013 deRisk the Cloud / Beyond Solutions @deRisktheCloud
The Key Risks Once You’re There
Data Security, Privacy and Ownership
Application Interoperability and Compatibility
Performance of Applications and Services (covering Networks, Processing, Collection and Storage)
Developer and Administrator Access & Support
Delivery to Service Levels / Systems Availability
And, of course, Risks when Changing Providers
© 2013 deRisk the Cloud / Beyond Solutions @deRisktheCloud
The Key Mitigation(s)
The right People
The right choice of Partner
Defined, Communicated Clear goals
The Plan and the Budget
And a closer look… from all angles!
© 2013 deRisk the Cloud / Beyond Solutions @deRisktheCloud