Using web-based business solutions in the Cloud offers your business greater efficiency, the ability to expand without the up-front costs, while being able to work from anywhere.
But:
what Cloud business solutions will best suit your business?
what Cloud security considerations should you be thinking about?
This interactive workshop will help you with implementing Cloud business solutions in your business.
This workshop will provide you with the top tips of protecting your online business operations through a few simple and effective cyber-safety steps.
3. Session Overview
• What is the “Cloud”?
• Managing your Cloud Business Solutions
• Critical success factors of managing a cloud
business solution
• Where can you seek advice?
• What will you investigate further?
• Workshop evaluation
9. A few ways of using the Cloud
1. Software as a Service (SAAS)
–
–
–
–
Email and Word processing
Accounting system
Human Resource/Project Management
Customer Service Management (CRM)
2. Platform as a service (PaaS)
– Operating Systems
– Web services
– Development Platforms
3. Infrastructure as a service (IaaS)
– Data storage
– Processing power
– Server virtualisation
Source: http://www.infoworld.com/d/cloud-computing/what-cloud-computing-really-means-031
10. A few ways of using the Cloud
1. Other Cloud services :
–
–
–
–
Desktop as a service (DaaS)
Network as a service (NaaS) (VPNs)
Storage as a service (STaaS)
Security as a service (SECaaS)
(Authentication, Antivirus, Intrusion Detection)
– Data as a service (DaaS)
– Test environment as a service (TEaaS)
Source: http://www.infoworld.com/d/cloud-computing/what-cloud-computing-really-means-031
12. Why use the Cloud?
Cons:
• Where is the data?
Ownership/Privacy/Security
• Need internet connection
• Interoperability (Open standards)
• Vendor lock-in
Image: „Open Sky‟ by Vanguard Visions Consulting - http://www.flickr.com/photos/77018488@N03/8496879398
15. Identifying Cloud Opportunities (& Risks)
Business
needs
Timing and
triggers
Financial impacts
Cloud
opportunities
and risks
Governance
Organisational
capability
Change
management
Security
Source: Department of Finance and Deregulation, A Guide to Implementing Cloud Services
Better Practice Guide (Sept 2012): finance.gov.au/policy-guides-procurement/cloud
16. Implementing Cloud Services
1. Build a business case
2. Assess the risk
3. Determine requirements
•
•
•
•
•
•
4.
5.
6.
7.
8.
Functionality
Standards
Performance
Manageability
Security
Compliance
Prepare an exit strategy
Determine contractual terms
Approach the market
Select a provider
Implementation / Maintenance
Source: Department of Finance and Deregulation, A Guide to Implementing Cloud Services
Better Practice Guide (Sept 2012): finance.gov.au/policy-guides-procurement/cloud
17. Cloud Computing
Security Considerations
Source: Department of Defence:
asd.gov.au/infosec/cloudsecurity.htm
Maintaining Availability/
Functionality
1. Business data/functionality
2. Your Data back-up plan
3. Your continuity / disaster plan
4. Network connectivity
5. Impact of outages
6. Vendor continuity / disaster plan
7. Vendor guarantee
7. Service Level Agreement (SLA)
8. Compensation
9. Data integrity and availability
10.Data restoration
11.Scalability
12.Changing Vendors
18. Cloud Service
Functional Requirements Matrix
Cloud Service A
Integrates with other
services
Allows multiple users
Military grade security
24/7 reliability
Scalability
Back-ups / Exporting
Intellectual Property
Compliance
Others???
Cloud Service B
Cloud Service C
19. Cloud Computing
Security Considerations
Source: Department of Defence:
asd.gov.au/infosec/cloudsecurity.htm
Protecting data from
unauthorised access
1. Type of cloud computing service
2. Sensitivity of data
3. Legislative obligations (eg Privacy
Act, Archiving Act)
4. Countries which can access the data
(eg Patriots Act)
5. Data Encryption
6. Destruction of data
7. Remote monitoring / management
8. Data ownership
9. Gateway technologies /
certifications
10.Content filters
11.Security services
12.User authentication
13.Procurement processes
20. Managing your Cloud Business Solution
Why manage?
•
•
•
•
•
•
•
Reduce possible risks
Enables continuous improvement
Informs planning/decision making
Increases stakeholder confidence
Incorporates int/ext factors
Identifies procedures/processes
Ensures the right infrastructure
Barriers?
•
•
•
•
Lack of commitment
Lack of processes/planning
Lack of resourcing/finances
Others?
Image: „Dell in the Cloud Think Tank at the Skyloft, Millbank, London‟ by DELL Inc - http://www.flickr.com/photos/dellphotos/8182050295/
30. Achievability
Image: Designing Learning in the Digital Age – Melb March 2013 – Vanguard Visions Consulting: http://www.flickr.com/photos/77018488@N03/8569652009/
31. Overview – Risk Considerations
•
•
•
•
•
•
•
•
•
Business interruption
Disaster recovery
Security / Protection
Back ups
Terms and Conditions /
Guarantees
Reliability
Compatibility
Portability
Capacity (Vendor / You/Your
business)
Info Source: Enterprise Connect:
www.enterpriseconnect.gov.au/ecservices/tkc/Pages/ITCloud.aspx
Image: By Ali Davis - http://alidavies.com/wp-content/uploads/2010/03/Taking-a-Risk.jpg
33. Seek further advice from:
•
•
•
•
•
•
•
Industry Association
Accountant / Lawyer
Business Enterprise Centres
Small Business Advisory
Enterprise Connect
Cloud Implementation Specialists
Business Development
Consultants
Image: “Designing Learning in the Digital Age - Melbourne, March 2013” by Vanguard Visions Consulting - www.flickr.com/photos/77018488@N03/8569658553/
36. Want to know more?
More info: digitalcapability.com.au
Register for eUpdates: bit.ly/digitalcapability
Follow on:
Twitter - twitter.com/digitalcapabili
Facebook - facebook.com/digitalcapability
LinkedIn - bit.ly/DCLinkedIN
Google+ - bit.ly/DCGoogleplus
Pinterest - pinterest.com/vanguardvisions
37. Allison Miller
0400 732 270
allison@vanguardvisions.com.au
vanguardvisionsconsulting.com.au
vanguardvisionsconsulting.com.au
Notes de l'éditeur
iPadsWifiSurvey at end
Cloud computing is the use of computing resources (hardware and software) that are delivered as a service over a network (typically the Internet). The name comes from the use of a cloud-shaped symbol as an abstraction for the complex infrastructure it contains in system diagrams. Cloud computing entrusts remote services with a user's data, software and computation.(http://en.wikipedia.org/wiki/Cloud_computing)
There are three types of cloud servicesPublic - services which are accessed over a network that are open for public use.Private – services operated for a single organisation Hybrid - a combine of private and public eg public cloud storage plus an organisation privately ‘rents’ components of the Cloud infrastructure
1. SaaSThis type of cloud computing delivers software applications through a browser to thousands of customers using a multitenant architecture. This means no upfront investment in servers or software licensing. EgSaaS"desktop" applications include Google Docs and Zoho Office2. Utility computingThisoffers online storage and virtual servers which you can access on demand. Useful for supplemental, non-mission-critical needs, and could replace parts of your computer storage needs. Eg Google Drive or Dropbox3. Platform as a serviceAnother SaaS variation, this form of cloud computing delivers development environments as a service. You build your own applications that run on the provider's infrastructure and are delivered to your users via the Internet from the provider's servers. These services are constrained by the vendor's design and capabilities, so you don't get complete freedom, but you do get predictability and pre-integration. 4. Other cloud servicesLike all ‘as a service’ (aaS) services, these other services are based on the concept that the product can be provided on demand to the user regardless of their geographic or organisational separation of provider and theconsumer.Source: http://www.infoworld.com/d/cloud-computing/what-cloud-computing-really-means-031http://en.wikipedia.org/wiki/Cloud_computing
What business services do you currently use?Are any Cloud Services?What are the adv/disadv of both?Ask participants to undertake a Business Solutions Comparison (Handout) on computer based or Cloud Services (or hybrid)Business Solutions Comparison (Handout)Software/Service Computer/Server/Hard drive/USB Cloud Hybrid (Sync)Email XDoc Storage X X XDoc SharingOffice products eg Word, Excel etcAccounting SoftwareCRMHR/Personnel ManagementProject ManagementCalendarBulk email softwareSpecialist SoftwareOthers?
Identifying Cloud Opportunities:Assess suitability for business needsConsider timing and driversConsider financial impactsConsider organisational capabilityManage changeReview governance
Build a business caseAssess the riskDetermine requirementsFunctionalityStandardsPerformance – availability, reliability, recoverability, responsiveness and throughputManageabilitySecurityCompliancePrepare an exit strategyDetermine contractual termsApproach the marketSelect a providerImplementation / Maintenance
Maintaining Availability / Functionality of Business ServicesBusiness data/functionality – what is mission critical for your business?Your Data back-up plan – what does this look like now? Your continuity / disaster plan – what does this look like now?Network connectivity – how reliable is it?Impact of outages - Vendor continuity / disaster plan Vendor guaranteeService Level Agreement (SLA)CompensationData integrity and availability - Data restoration - ScalabilityChanging Vendors
What are your ‘cloud services’ needs??
Protecting data from unauthorised accessType of cloud computing service – which would provide the best protection?Sensitivity of data – what will be the impact if data is accessed?Legislative obligations - Privacy Act, Archiving Act, Others? – how do they impact your business?Countries which can access the data (eg Patriots Act) – where is your data stored?Data Encryption – is this an imperative?Destruction of data – how is data removed from Vendor’s servers?Remote monitoring / management – can you have some control over your Cloud services?Data ownership – Who owns the data?Gateway technologies / certifications – what types of security measures does the Vendor have in place?Content filters – Will this impact your usage? Do they need to be strengthened?Security services – what are the Vendors policies/processes and technologies like?User authentication – what identity and access management systems are being used?Procurement processes – How can you verify the Vendor is legit and reliable?
Why manage your cloud business solution?Identify and reduce possible risks – likelihood vs consequences – whether physical, emotional or financial harm, environmentalEnables continuous improvementEnables businesses to achieve their goals through informed planning and decision-making Increases stakeholder confidenceIncorporates internal/external factors eg cultural (attitude/embedded/integral part of the business) and legislationIdentifies procedures and processes to communicate, monitor and review Creates infrastructure to analyse, evaluate and treat riskBarriers?Lack of commitmentLack of processes/planningLack of financesOthers?
Group analysis of internal/external factors and stakeholders for any existing or future Cloud Business Solutions
Group SWOT Analysis of implementing/managing a cloud business solution for your business
Complete the Risk Analysis table for 2 possible risks associated with using Cloud Services
How will the cloud service better meet your business needs / objectives and improve your business operations?How will it meet your customer needs?Will you be getting value for money / improved productivity?What will the ROI be in changing to a cloud service?
What security services does the vendor have?What security processes do you need to implement eg ‘password policy’?How will the service integrate with your existing systems/software?
Who owns the data?How will the data be backed up?How can you get your data out?What recovery plans does your vendor have?What recovery plans will you need?
What is the current track record of the vendor?Who else is using their services?
What change management processes will you need to deploy?What requisite skills will you / your staff / your customers / your suppliers need?
What will you investigate further and why?
Ask participants to complete the online workshop evaluation