1. Impact of SaaS and Cloud
The future isn’t what it used to be
Martijn.Kriens@iCrowds.net

2. In the news…
novem
ber 2009
OV
ontregeld
door
landelijke
storing
m
obiel netwerk
HD Traffic
service
onbruikbaar
na
netwerkstorin
g
m
aart 2009
Kapotte
router
oorzaak
urenlange
landelijke
storing
betaalautom
aten
September 2011
DigiNotar-hackersblijken 531 certificaten
te hebben vervalst
September 2011, Computerworld
Dutch struggle to
revoke DigiNotar
SSL certificates
SaaS and
Cloud: new
possibilities
and new
vulnerabilities

3. (1 − z3 / 6) / (z − z2 / 2)2 + c
Simple
variables,
complex
consequences

4. The basics
• (Unlimited) Scalability
– IT becomes a scalable cost
• (Ubiquitous) Communication
• Transactions in milliseconds
• (Seamless) Cooperation
– Opening up internal systems for partners
• Anytime, Anywhere
– Instantaneous as well as a-synchronous
• (Maximum)Transparency
– Digital trust through access to data and certificates

5. Double edged
• New possiblities
– Opportunities
– Disruptive innovation
• Complexity
– Risks
– Chaos in prediction outcomes

6. opportunities

8. 800 million Digital Friends

9. Digital marketplace

10. Digital hardware

11. Building
blocks
of the Internet

12. 12
Convergence
Software
producer
Software
producer
Service
producer
Service
producer
Product
quality
Service
quality
Combination
of services ad
software
creates new
added value

13. 13
Basisregistraties
Combination
leads to new
added values

14. PAAS Research Questions
• Convergence
– “What is the business
convergence
phenomenon?”
– “What is a appropriate
business model to gain
substantial competitive
advantages?”
• Multi-Tenancy
– “How to support
variability in a multi-
tenant software-as-a-
service environment?”
– “How to organize hybrid
product and service
organisation”

15. Risks

16. Building
blocks
of the Internet

17. Building
blocks
of the Internet

18. Mashup
In mashup normally more than 80%
is reuse of existing services
and less than 20% is new software
Testability
No clear test
environment
for full
application

19. 19
Basisregistraties
Combination
leads to new
single points
of failure

20. “Hidden”
relations
between
environments

21. Lazy use of
security

22. Centralised De-CentralisedDistributed
Rand
In a distributed environment control can
not be imposed from the top

23. Trust

24. as·sur·ance
A statement or indication that
inspires confidence
Level of proof to build confidence
Trustworthy > adequate proof of trust
Confidence in the capabilities to realize promises …

25. TTISC Research questions
• Q1: What are the risk elements
• Q2: What are the risk control patterns
• Q3: What is the integrated model of risk and controls
• Q4: How to achieve assurance in SaaS chains

26. 26
Macromyopia
We overestimate
the short term results
of technology
and underestimate
the long term results
Jaron Lanier