Tag Archive for: Cloud Computing

Posts

Tuesday Take-Away: New Security Standards for Cloud Computing

/in

It is common for cloud computing vendors often promote their security credentials, and doing so gives prospective customers valuable information about the vendors’ security operations and capabilities.

If your vendor is still promoting their SAS 70 Type II certifications, however, they are a little bit out of date.

As of June 15, 2011, the American Institute of CPAs replaced SAS 70 with SSAE 16, a much more rigorous standard for service provider security audits and attestations.  SSAE 16 is also in line with a separate, international security audit and attestation standard, ISAE 3402.

If you use Google Apps, Google Postini Services, Google App Engine, and/or Google Apps Script, you are in good shape.  Google is one of the first cloud computing vendors to move to the new, more rigorous, standards.

Google has attained SSAE 16 Type II and ISAE 3402 Type II certifications for these services.  SAS 70 Type II certifications are still valid for audits conducted before June 15, 2011.

While third party audits are part of the security and compliance benefits of Google Apps and Google App Engine products.  Google’s security efforts go well beyond audit requirements.  You can learn more about Google’s security by reviewing the current security white paper and watching this data center video tour.

Want to know more?  Contact us.  We would be happy to discuss your needs.

Friday Thought: Is BYOD Right for Your Business?

/in

A new trend is emerging in corporate IT that may make sense for small and mid-size businesses:  BYOD, or Bring-Your-Own-Device.  Companies with BYOD policies allow workers to pick their own smartphones, tablets, and, in some cases, laptop computers.  Most BYOD policies provide a fixed stipend for each type of device with employees free to spend more personally for a better device.

Recent articles in the New York Times and on SmarterTechnology.com have focused on this trend.   For large companies, BYOD policies …

  • Save money on purchases as employees often pick up part of the cost for better devices
  • Reduce demand on IT staff as BYOD employees often turn to other sources for help
  • Overcome the “my technology at home is better than at the office” syndrome

The challenge, of course, is security.  Not just access control, but virus and malware protection require standards and verification.

As more small and mid-size businesses move into the cloud, BYOD will make sense for smaller businesses as well.  Cloud computing solutions are more likely to be device independent, enabling users to pick their preferred smartphone, tablet, or laptop.  Google Apps, for example, provides native support for Android, iPhone, and Blackberry devices.

With BYOD, users pick the device or platform that works best for them, helping them be more productive.  As the recent articles note, colleges and universities have supported BYOD programs for some time with good results.  Users pick devices that best serve their needs, IT facilitates connectivity and support.

BYOD shifts some of the responsibility for support to the end user, so IT departments would be wise to ensure that end user support is available from key software and cloud solution vendors or resellers.   End users may turn to Apple for help with their iPad 2, but will need guidance from IT for issues of connectivity to applications and services.  Tier 2 support from the vendors or resellers should be a cost effective means to reduce demand for IT support.

The IT team needs to be prepared to help users navigate vendor support and, more importantly, configure devices to keep business and personal accounts separate.   And, if necessary, new SSO and identity management tools are available for smartphones and tablets.  While these tools add cost and a management layer, they can provide provide a level of security that may be appropriate whether the device is owned by the company or the employee.

Finally, a solid “usage” policy should be in place governing the use of company computing resources and how personal equipment and software may and may not be used for company business.  Having a policy in place sets guidelines and boundaries that will keep a BYOD program from getting out of hand.

With a sound set of usage policies and a reasonable stipend, BYOD can help small and mid-size businesses increase productivity.

Friday Thought: Cloud Computing Changes IT Roles

/in

Jason Hiner recently kicked off the annual TechRepublic Live 2011 event in September by asking “What will the IT department look like in 2015”?  His conclusion is that larger centralized IT departments will give way to leaner teams with more IT consultants.  He also states that IT departments will focus resources on software, the cloud, and mobile devices.

What is really changing, however, is the roles IT will need to play, particularly as organizations move services to the cloud.   Rather than focusing on IT services, such as server maintenance, email, and other core/infrastructure services, IT departments will be able to focus on services that are closer to the business and end user needs.

As businesses implement cloud computing solutions, the need for hardware and software administration drops to near zero.  Time consuming activities such as managing patches, updates, and revision upgrades will almost vanish.  Backups, disaster recovery, spam/virus protection, and many other tasks will no longer require the time and attention they do today.

Instead, IT departments will be managing software systems.  IT departments will need to understand business processes and models and the software and data that support them.  In-house or in the cloud, IT staff will be expected to be able to help businesses manage and use its data, and ensure that applications support how users work.

While Mr. Hiner sees the IT pros that perform these tasks losing their jobs and being replaced by consultants that can bridge the gap between business and applications, I see a different path.

Smart IT pros will update their skills as companies migrate into cloud solutions.  These skills will develop over time as the migration happens, particularly in mid-size and small businesses where so many IT roles are often left unfulfilled.

I see network administrators that used to spend time managing email, spam/virus, and backup servers getting trained as database administrators and gaining skills in data management and reporting.  I see help desk teams learning to respond to business application requests as the number of “it’s not working/infrastructure” requests decline.

The move to cloud computing will change the role of IT professionals, but does not necessarily correlate to job loss.  Organizations use consultants when they do not have the skill set or resources in house.  IT pros that “get” cloud computing will migrate their expertise from infrastructure and toward the business.  In the process, they will become more valuable to the organization.

 

Cumulus Global CEO to speak at SpiceWorld 2011

/in

Allen Falcon, CEO of Cumulus Global (www.cumulusglobal.com) will be speaking at the SpiceWorld  2011 on October 20, 2011 in Austin, Tx.  SpiceWorld is the annual Spiceworks IT User Conference. The keynote panel discussion, “The Cloud: Should I Stay or Should I Go?”, will focus on decision points for IT professionals considering moving their organizations to cloud computing solutions.

“This panel reflects an evolutionary change in thinking about cloud computing,” notes Falcon.  “In past conferences, events focused on the ‘what’ and ‘if’ of cloud computing.  This panel focuses on the ‘how’.  Businesses are moving to the cloud, the challenge is to find the best path forward.”

For more information on the panel discussion and Spiceworld 2011, visit the News and Events page on the Cumulus Global website at: https://www.cumulusglobal.com/news-events/ or visit www.spiceworks.com/spiceworld/2011.

About Cumulus Global
Cumulus Global, formerly Horizon Info Services, helps small and mid-size businesses, non-profits, governments, and educational institutions thrive by delivering cloud computing solutions.  Serving clients from 1 to more than 1000 employees across numerous industries, we align technology with our clients’ goals, objectives, and bottom lines. We leverage our expertise, vendor relationships, and a diversified range of best-of-breed cloud services to create custom solutions with tangible value.

About Spiceworks
Globally, over 1 million companies and 1.6 million IT professionals at small and mid-size businesses use Spiceworks to monitor and manage the IT systems.  Spiceworks is free to users and is funded by advertising to spiceworks members.

Friday Thought: All Outages are Not Equal

/in

Last week Google Docs experienced an outage lasting about 30 minutes.  Almost immediately, the “reconsider the cloud” articles and blogs began to appear.   Articles like this one on Ars Technica, immediately lump the Google Docs outage with other cloud outages, including Amazon’s outage earlier this year and the on-going problems with Microsoft’s BPOS and Office365 services.

And well no outages are good, they are not all the same.  In most cases, the nature of the outages and their impact reflect the nature of the architecture and the service provider.

  • The Google Docs outage was caused by a memory error and was exposed by an update.  Google acknowledged the error and resolved the issue in under 45 minutes.
  • Amazon’s outage was a network failure that took an entire data center off-line.  Customer that signed up for redundancy were not impacted.
  • Microsoft’s flurry of outages, including a 6 hour outage that took Microsoft almost 90 minutes to fully acknowledge, appear to be related to DNS, load, and other operational issues.

Why is it important to understand the cause and nature of the outage?  With this understanding, you can provide rational comparisons between cloud and in-house systems and between vendors.

Every piece of software has bugs and some bugs are more serious than others.  Google’s architecture enables Google to roll forward and roll back changes rapidly across their entire infrastructure.  The fact that a problem was identified and corrected in under an hour is evidence of the effectiveness of their operations and architecture.

To compare Google to in-house systems, Microsoft releases bug fixes and updates monthly which generally require server reboots.  Depending on the size and use of each server (file/print, Exchange, etc), multiple reboots may be necessary and reboots can run well over an hour.  In the last two years, over 50% of all “patch Tuesday” releases have been followed up with updates, emergency patches, or hot-fixes with the recommendation of immediate action.  Fixing a bug in one of Microsoft’s releases can take from hours to days.  Comparatively, under an hour is not so shabby.

When looking across cloud vendors, the nature of the outage is also important.  Amazon customers that chose not to pay extra for redundancy knowingly assumed a small risk that their systems could become unavailable due to a large error or event.  Just like any IT decision, each business must make a cost/benefit analysis.

Customers should understand the level of redundancy provided with their service and the extra costs involved to ensure better availability.

The most troubling of the cloud outages are Microsoft’s.  Why?  Because the causes appear to relate to an inability to manage a high-volume, multi-tenant infrastructure.  Just like you cannot watch TV without electricity, you cannot run online services (or much of anything on a computer) without DNS.  That Microsoft continues to struggle with DNS, routing, and other operational issues leads me to believe that their infrastructure lacks the architecture and operating procedures to prove reliable.

Should cloud outages make us wary? Yes and no.  Yes to the extent that customers should understand what they are buying with a cloud solution — not just features and functions, but ecosystem.  No, to the extent that when put in perspective, cloud solutions are still generally proving more reliable and available than in-house systems.

 

 

Friday Thought: Is it Time to Move?

/in

With the popular media focus on the economy, it is natural for the “Tech” press to report on the impact of current economic conditions on IT plans and spending.  Much of the discussion has focused on whether companies will spend on IT initiatives or will they hold off until the economy improves.

I prefer to ask a different question:

On what will you be spending your IT dollars?

For me, IT spending is not a matter of if, organizations should focus on what and when.

For many reasons, now is the time to move to cloud solutions.

  • Ability to Move: For many small and mid-size enterprises, boom times are too busy to upgrade IT systems.  During a slow-down, companies can allocate resources to IT projects more easily.  Successful IT projects are not just technical, they need the involvement and support of managers and end users.
  • OpEx vs CapEx: Upgrading traditional in-house systems requires up front capital, requiring many businesses to borrow or to use valuable cash on hand.  Given the current economy and credit markets, both options pose a challenge.  Cloud Solutions, on the other hand, are an operating expense.  You pay for what you use, when you use it.
  • Lower Costs: For most organizations, cloud solutions will save them money.  Not just in terms of dollars out the door, but in terms of improved communications and efficiency.
  • Stagnation: Organizations that fail to maintain and upgrade their technologies risk stagnation.  “Catch up” efforts always cost more than prudent maintenance and incremental updates.
  • Preparedness: When the economy turns around and growth returns, will you be ready?  Sound planning and effective improvements can prepare you for the next uptick in business and your next round of growth.

Interest in learning more about how cloud solutions might benefit your organization?  Contact me.  I am happy to explore opportunities and options with you.

Horizon Info Services, LLC Becomes Cumulus Global

/in

New Name and Brand Reflects Company’s Growth

WESTBOROUGH, MA – June 13, 2011 – Horizon Info Services, LLC announced this morning that, effective immediately, the company is doing business as Cumulus Global. Allen Falcon, CEO, announced the change from the company’s booth at the Hartford Business Journal’s CT Business Expo.  With this new name, Falcon also launched the company’s new branding and web site at www.cumulusglobal.com.

As one of the original 20 Google Apps Authorized Resellers in North America, Cumulus Global will continue delivering innovative cloud computing solutions for email, communications, and collaboration.  The company has also quietly added a broad selection of cloud computing solutions relevant to small and mid-size organizations, serving North American companies with locations worldwide.

“Cumulus Global better reflects the scope of cloud computing solutions we offer to businesses, non-profits, educational institutions, and governments”, stated Falcon.  “While Google Apps remains the cornerstone of our cloud computing solutions, we understand that Google Apps is one piece of the IT puzzle.  We deliver solutions, not just products.”

Cumulus Global augments Google Apps with integrated applications for contact management, MS Office integration, data backup, document records management, email archiving and encryption, as well as custom development services.  The company provides a range of setup and migration services and offers on-going IT and end user support services not otherwise available.

“We are fairly unique among Google Apps resellers,” notes Falcon. “Unlike most Google Apps resellers, our focus is more than selling Google Apps licenses and services.  We focus on our customers’ business needs and objectives, and deliver cloud computing solutions accordingly.”

Beyond Google Apps, Cumulus offers a range of cloud computing solutions, including: spam/virus protection, archiving, encryption, and continuity services for in-house email systems; web security and filtering services; and online backup, restore, and recovery services.  The company will be rolling out Cloud Storage and Cloud Server solutions later this summer.

About Cumulus Global
Cumulus Global, formerly Horizon Info Services, helps small and mid-size businesses, non-profits, governments, and educational institutions thrive by delivering cloud computing solutions.  Serving clients from 1 to more than 1000 employees across numerous industries, we align technology with our clients’ goals, objectives, and bottom lines. We leverage our expertise, vendor relationships, and a diversified range of best-of-breed cloud services to create custom solutions with tangible value.

 

Horizon offers Support for Chromebooks Now

/in

In an interview with CRN, published today, Horizon Info Services confirmed that we are prepared to help organizations plan for, deploy, and support Google Chrombooks.   While organizations must currently purchase Chromebooks directly from Google, Horizon’s professional services team can assist with the planning, deployment, and support efforts.

Once trusted partners are able to offer the Chromebooks directly, Horizon will also resell and support them directly.

Delegate Google Apps Administration

/in

While most computer environments have at least one network administration account with unrestricted access, many administrators have moved to segment administrative responsibilities across different individuals and departments.

Last week, this capability was added to Google Apps control panel.

Google Apps now has two (2) levels of administrators:

Super Administrators have complete access to the Google Apps administrator control panel and can perform all administrator actions.

Restricted Administrators are given the ability to manage specific tabs in the control panel.  For each tab, you can allow/restrict certain administrative functions.

Both Super and Restricted Administrators have the ability to:

  • The ability to view and edit other users’ Google Sites
  • Rights to use the Google Apps administrative APIs, such as the Provisioning API
  • The ability to log into the Google Apps administrator control panel

Details of the available admin functions and how you can restrict functions can be found here.

Please note that distribution of administrative capabilities is not available by organization unit at this time. Administrators granted access to a control panel tab have the ability to manage those functions for all users.

IT Departments can now segment administrative responsibilities by function, providing many organizations with the ability to segment responsibilities.  The change also supports common division of responsibilities between Help Desk and “Tier 2” support staff.   Help desk staff can not be empowered to change passwords, for example, without giving them the ability to create new users.

The impact of this change is significant as this capability has been often requested by mid-size and enterprise IT departments.

How Do You Know if You Are Cloud Ready?

/in

We understand the Google Apps may not be the best fit for all companies, but the solution is certainly worthy of serious consideration.   For most businesses, however, the question is really “Are YOU Cloud Ready?”

Being Cloud Ready is more than a willingness or desire to move IT infrastructure services, such as email, into cloud-based services.  You need to assess how the cloud solution will work for you.  Beyond the basics of email, calendar, and contacts, this means you should understand the following …

  • Does the cloud solution fit with your business processes and usage patterns?  Or, will users need to change how they use these applications?
  • Can you estimate how many users should see productivity gains by moving to the cloud solution?
  • Can you calculate and compare accurate Total Cost of Ownership estimates for your current systems and your cloud solutions?
  • Do you understand how many of your users rely on basic features versus your power users?
  • Do you have usage patterns that add could complexity to your migration if not identified in the planning phase?

Fortunately, answering these and other questions is getting easier as new tools come to market.

We have partnered with Exoprise to offer CloudReady RAPID and CloudReady PRO assessment services for MS Exchange environments.  With a non-intrusive analysis tool and expert analysis, we can provide you with the data and information you need to understand if you are ready to move from MS Exchange to Google Apps.

If you want to know more, please email me directly.