Posts

Moving to the Cloud: Privacy

 

Green_GaugeThis post is the fourth in a series addressing concerns organizations may have that prevent them from moving the cloud-based solutions.

Few topics related to cloud computing create more passion than privacy.  Knowing how well your organization’s information will be safe-guarded is key to trusting a service provider and the decision to go to the cloud in the first place.

Privacy, while closely related to security, differs in that security addresses access and protection of information, privacy addresses who can access data and how it may be used.

When considering privacy, organizations should start with three documents from the service provider:

  1. Terms of Service / Contract:  Most cloud providers provide clear terms and conditions related to privacy in their terms of service.  These include statements about content ownership and access rights; clauses covering confidential information; statements regarding the provider’s access to customer data and content; and terms related to how the service provider will respond to subpoenas and other third-party demands for data.
  2. Service Level Agreement:  Many cloud providers include terms related to privacy in their service level agreement.   In some cases, the SLA stipulates time frames for addressing privacy issues.
  3. Privacy Policy:  Most cloud providers now have one or more privacy policies.  These policies may be universal to the provider’s service, or may cover specific aspects of the services (such as use of the web site/portal).

When looking to choose a cloud solutions provider, look at all three documents.  Verify that they are comprehensive and clear.  Understand how they address any particular regulatory requirements for your organization.  Validate that they are consistent — that no conflicts or gaps exist that could lead to confusion or misunderstandings down the road.

Make sure the review of privacy policies and looks at the specific customer agreements and policies.  Many cloud providers offer “free” or “consumer” services with different terms and conditions than their paid (or free) solutions for business, government, education, and non-profits.   Many organizations spin their wheels and raise unwarranted concerns by not focusing on the specific, applicable agreements, and policies.

Finally, review the privacy performance of the service provider.  If they have had any sort of breach, or a privacy dispute, understand the nature, scope, and response.  Understand if the breach was provider-related or due to the actions or inaction of the customer.  Assess the appropriateness of the provider’s response given the nature of the issue.

Again, due diligence is key.  A small amount of research, a few questions, and an accurate understanding of how a service provider plans and manages privacy will help organizations determine if the provider meets the organization’s privacy needs and priorities.

Next Post in the Series:  Lock-In

 

Previous Post in the Series:  Provider Reliabilty

Cloud Solutions Drive Rapid Growth for Cumulus Global

BusSuccess.med

Cumulus Global today announced revenue growth exceeding 300% for 2012 as the company’s cloud solutions business continues to expand. Sales for 2012 surpassed $3.3 million dollars compared to $972,000 in 2011. Net income before taxes jumped over 400%, to more than $200,000 for 2012. This growth reflects increasing demand from Cumulus Global’s core small and mid-size business markets, as well as the company’s expansion into new market segments.

“In the last 18 months, we have helped more than 120 school districts migrate to Google Apps for Education, deploy Chromebooks for Education, and protect their networks and in-house data,” noted Allen Falcon, CEO and co-founder. “We see increasing opportunity in the educational market.”

The company also sees increasing demand from local, municipal, and county governments and agencies throughout New England and nationally. Falcon expects revenues from Google Apps for Government and related services to “more than triple over the next twelve to eighteen months.” Falcon attributes this growth to the migration, education, and support services offered, including the company’s participation in the FCC E-Rate program for schools and libraries.

Serving the needs of small and mid-size businesses, those with 1 to 1000 employees, remains a core market for Cumulus Global. According to Falcon, “Our core SMB market grew by more than 30% last year and we see that rate of growth accelerating.” Falcon attributes this growth to the company’s focus on solutions rather than technology.

“We do not sell hype or technology,” stated Falcon. “We work with our customers to identify if and how cloud solutions can improve efficiency, expand services, drive revenue, and lower costs. We bundle products and services that overcome challenges and enable growth.” Partnering with more than a dozen ISVs and solution providers, Cumulus Global can meet customers’ regulatory compliance, security, data management, and IT administration needs.

For companies, non-profits, government agencies, and schools interested in learning more, Cumulus Global conducts regular webcasts and Q&A sessions.

 

On-Premise IT: The Bad, The Good, and the Ugly

We do not hate or dislike Microsoft.  But, looking at the company and its products, Microsoft often provides us great examples for some of the issues with in-house systems for small and mid-size enterprises.

Case in Point: According to ComputerWorld, Microsoft will issue 12 security updates for 57 vulnerabilities across Windows, Office, and Exchange.  In an extremely unusual move, 2 of the updates are for Internet Explorer (IE) from version IE6 through IE10.

The Bad:  The scope and severity of these updates are the largest since April, 2011:

  • 5 of the updates are “critical”, the rest are “important”.
  • The vulnerabilities addressed are in every version of Windows from XP Service Pack 3 and Vista through Windows 7, Windows 8, and Windows RT.
  • Updates are needed for all current versions of MS Office and for MS Exchange.

The Good:  Microsoft is able to fix the vulnerabilities found, even though some of their products continue to fail security tests.

The Ugly:  While these updates make on-premise IT environments more secure, they come at a huge cost, particularly small and mid-size businesses.  Applying these updates means touching every server, workstation, terminal server, and Windows RT tablet — some more than once.   While larger companies may use images to update workstations, applying these updates still requires building and testing the image before distribution. Hours of work and multiple reboots mean time and money — even if the work is done after hours.

Perspective:  One of the major drawbacks of on-premise IT solutions for small and mid-size enterprises is exactly this kind of maintenance.  For hosted and cloud solutions designed for large-scale multi-tenancy, like Google Apps and others, pushing out updates is automated, fast, reliable.  And, these updates rarely if ever require local updates.

Moving to a cloud or hybrid computing environment can save you time, money, and aggravation, while providing a more secure, more reliable system.

Interested in learning more, read what companies that have moved to the cloud and Google Apps have to say in this white paper.

Live@edu Migrations Will Create Problems for Many Schools

Earlier this month, Microsoft announced the availability of Office 365 for Education and the end of the Live@edu service.   While Redmond Channel Partner reported that schools will have 12 to 18 months to migrate, the migration will pose problems for many schools.

From One Account to Two

According to Microsoft, after the migration, students, faculty, and staff will have two accounts.  SkyDrive and Instant Messenger services will require a personal Windows Live Account, meaning that these services (and others) will be outside of the security and management domain of the Office 365 account.

Loss of Features

The most significant loss of features in the move is the loss of supervision policies. Supervision policies are the rules used to filter “Bad Words” and to manage “Closed Campus” policies.  These feature, critical to how schools manage student accounts and adhere to school policies and regulations, can be recreated manually in Office 365 using PowerShell scripting and a range of admin console settings.

Rebuilding Features

Several features and settings will need to be completely rebuilt as part of the migration process, including:

  • Mailbox Plans, which are limited by license type in Office 365
  • Role Assignment Policies, which cannot be managed at the mailbox level in Office 365, requiring changes to global end user roles and policies that must them be assigned to specific mailboxes

Migration Process

The migration process itself will be problematic for many schools.  Microsoft’s best practice documentation recommends going through the upgrade process from Live@edu to Office 365 before fully configuring the Office 365 service.  The sequence of actions will result in downtime as well as the loss of existing custom URL addresses.

Additionally, individual end users have “before upgrade” tasks to complete that, if not done properly, will require IT staff to touch every machine as a local administrator.

Finally, Microsoft’s own FAQ site mentions that users and administrators may lose the ability to access certain on-page links, the Exchange Control Panel, and many Exchange Control Panel features “for a few days” after the migration.  This could leave users and administrators unable to move forward.

Conclusion

While not as bad as the (almost non-existent) upgrade process from BPOS to Office 365, the migration from Live@edu to Office 365 is demanding technically and with respect to planning, administration, and communication.    The effort to migrate is still comparable to moving from Live@edu to cloud solutions from other vendors, such as Google Apps for Education.

Friday Thought: Google Drive – Yield Before Your Leap

Google (finally) announced and began releasing Google Drive.  For those not in the know, Google Drive is cloud storage available as a stand-alone service or as a component of Google Apps.  The stand-alone version included 5GB of storage for free with affordable plans for more space — a direct competitive threat to services like Dropbox and Box.  Both versions include sync clients for PCs, MACs, and iPhone/iPad that give you standard desktop/folder access to your data in the cloud.

Google Drive for Business

Google Drive for Business is a new component to Google Apps for Business that will roll out to customers over the next several weeks.  While the business version shares the device sync tool with the consumer version, it offers much more to the business customer:

  • Control over which users can use the service and which users can download and use the sync clients.
  • Control over which, if any, users can purchase additional storage independently
  • The ability to centrally purchase storage and allocate storage to users as needed

Benefits

  • You can now more easily use and integrate Google Docs as your file service; users can more easily collaborate and share information.
  • Users can work locally using their current desktop applications and files will be saved and shared in their Google Docs folders.
  • Users can have secure access to files from computers, tablets, and smart phones without the overhead of a VPN service.
  • Storage for uploaded or sync’d files in “native” formats has increased to 5 GB per user.

Challenges

  • Unlike an on-premise file server, Google Drive does not lock open files.  While you have version tracking, if two individuals are locally editing the same file, the most recent copy to sync will be the current version.
  • Users may quickly fill up their 5GB of space; additional storage is affordable.
  • Because sharing is easy, businesses should have policies and processes in place to oversee and manage permissions.

Deployment Strategy

In our experience, your Google Drive deployment strategy will focus on how you decide to manage your storage.  While nice, 5 GB per user will not be sufficient for most businesses, particularly since the space is user-specific.  Adding space is affordable, and will be necessary.

When you add space to Google Docs and Drives, you are actually subscribing to the additional space on a per user basis.  Licenses range in size from 20 GB to 16 TB at a monthly cost of $0.10 per GB or less (with no bandwidth and get/put charges).  While this strategy works, it will require monitoring space usage on a per user basis.

Another approach is to add a user account to serve as your file service.  In doing so, you purchase additional storage only for this “user” and configure the space along the lines of a traditional file server.  You have the freedom to create and share your top level folders and folder trees, and users will be able to see the file service as “Shared with Me”.  Users can then move folders to “My Drive” if they want the information available locally on their PC or Mac.

A central storage strategy also enables additional storage management options.  Tools like CloudLock Vault — a tool to monitor permissions and create tamper-proof and protected folders — run best when the space is owned by a generic file service administration account.

Alternatives

Almost always, there is more than one option.  As an alternative to Google Drive, tools like SyncDocs provide the ability to sync Google Docs (with or without extra storage) to a local file structure.  In some ways, SyncDocs offers a better user experience.  SyncDocs has more options with respect to folder location, the ability to select which Google Doc folders to sync locally, and the ability to specify conversion preferences.

When looking at Google Drive and its alternatives, we recommend walking through a few use cases to see which piece of software best meets your needs.

Conclusion

Google Drive, combined with Google Docs and additional space, provides Google Apps users with more opportunity to simplify file services.  Moving file services to the cloud is a logical next step for many businesses, as it can further reduce and simplify your IT footprint well beyond replacing a file server.  The need for VPN and expensive remote access servers can be greatly reduced or eliminated.

If you want to learn more or join us for a demo, please let us know.

 

Friday Thought: Comfort with the Cloud Grows Rapidly Among Business Execs

As reported by Dow Jones via Fox Business News back in May, IBM published results of a bi-annual survey of more than 3000 CIOs.  The results indicate that adoption of  cloud computing will continue to grow rapidly.  Over the past two years:

  • The number of CIOs planning to use c loud computing has jumped from 33% to 60%
  • The number of CIOs stating that cloud computing is a top priority has jumped from about 33% to about 70%

What does this mean for you beyond “cloud computing is not going away”?

  • Mid-market and large enterprises will continue to demand enterprise-class features and capabilities from cloud computing solutions
  • PAR (performance/availability/reliability) concerns will continue to be addressed by vendors
  • Security architectures will continue to evolve to meet market demands.

Small and Mid-Size Businesses (SMBs) will benefit from the continuing, rapid evolution of cloud solutions.  As demonstrated by Google’s increasing rate of feature releases in Google Apps, evolution will rapidly close the gap between new, cloud solutions and traditional in-house systems.

SMBs should expect to re-evaluate current vendors and IT partners against new players in the market.  Avoid letting inertia keep your business on a path without fully exploring options.  Change may mean moving away from vendors uncomfortable with the growing role of cloud solutions.

At the same time, avoid moving to cloud solutions for the sake of being in the cloud.  Businesses should always map business objectives into IT initiatives and priorities, and then select the best solution.

Friday Thought: Is it Time to Move?

With the popular media focus on the economy, it is natural for the “Tech” press to report on the impact of current economic conditions on IT plans and spending.  Much of the discussion has focused on whether companies will spend on IT initiatives or will they hold off until the economy improves.

I prefer to ask a different question:

On what will you be spending your IT dollars?

For me, IT spending is not a matter of if, organizations should focus on what and when.

For many reasons, now is the time to move to cloud solutions.

  • Ability to Move: For many small and mid-size enterprises, boom times are too busy to upgrade IT systems.  During a slow-down, companies can allocate resources to IT projects more easily.  Successful IT projects are not just technical, they need the involvement and support of managers and end users.
  • OpEx vs CapEx: Upgrading traditional in-house systems requires up front capital, requiring many businesses to borrow or to use valuable cash on hand.  Given the current economy and credit markets, both options pose a challenge.  Cloud Solutions, on the other hand, are an operating expense.  You pay for what you use, when you use it.
  • Lower Costs: For most organizations, cloud solutions will save them money.  Not just in terms of dollars out the door, but in terms of improved communications and efficiency.
  • Stagnation: Organizations that fail to maintain and upgrade their technologies risk stagnation.  “Catch up” efforts always cost more than prudent maintenance and incremental updates.
  • Preparedness: When the economy turns around and growth returns, will you be ready?  Sound planning and effective improvements can prepare you for the next uptick in business and your next round of growth.

Interest in learning more about how cloud solutions might benefit your organization?  Contact me.  I am happy to explore opportunities and options with you.

Friday Thought: Who Do You Trust?

Recently, in one of my LinkedIn groups, a member asked folks about outsourcing and cloud computing.  Predictably, the cloud computing naysayers chimed in with their usual argument, which often sounds like “I would never put my data in the cloud because you don’t have control”.

To me, this sounds like an argument from past generations against putting your money in a bank.  The naysayers’ concern is not control, but trust. The naysayers don’t trust the cloud provider with their data.  They don’t trust that the cloud provider will really delete information when you hit the delete key.  They don’t trust that the administrators will not access data.

And yet, these same folks fail to look at their own environments in the same way.

In a Windows server environment, the “Domain Administrator” has complete access to everything — every piece of data, every piece of user information.  In most small and mid-size enterprises, everybody on your IT team as Domain Administrator privileges.  A disgruntled team member can not only destroy your data, but can destroy the backups you would need to recover.

Use an IT service firm or the services of an MSP?  Chances are, one or more of their employees have “Domain Administrator” or other rights that gives them access to some or all of your data.  How do you know that the help desk staffer at your IT provider will not get upset with his boss and seek revenge by destroying or stealing your data?

Clearly if you don’t trust an employee, you let them go.  And no business owner would sign up for outside services if they did not trust the vendor enough to also trust the vendors’ employees.  Cloud computing is no different. Well … maybe a little different.

Unlike your network administrator, the vast majority of cloud computing vendors have no access to your data.  They do not need access to provide you with service.  Reputable providers include data privacy and security clauses in their contracts and their service level agreements.

Unlike most in-house systems, cloud computing solutions are designed to keep everyone but you out of your data.  Google, for example, obfuscates every occurrence of every piece of data on every server.  Most SMEs cannot afford anything close to the levels of encryption and security included in the architecture of most cloud computing services.

Control and trust go hand in hand.  And, cloud computing may not offer the best solutions for every business, or even yours.  When assessing your options, consider the benefits and risk of the cloud with the real benefits and risks of your current network and systems.

Cumulus Global Launches Google Apps for Franchises

Delivers Integrated Email and Collaboration Services to
Franchisers and Their Franchisees

WESTBOROUGH, MA – August 08, 2011 – Cumulus Global is pleased to announce the launch of Google Apps for Franchises, an integrated product and service packages designed to improve communication and collaboration between franchisers and their franchisees.  With Google Apps for Business at its core, Google Apps for Franchises gives franchisers control over their domain and their brand while providing Franchisees with best-in-class email, communication, and collaboration tools.

“Google Apps for Franchises goes beyond providing domain-branded email service to Franchisees,” stated Allen Falcon, CEO of Cumulus Global.  “The package gives franchisers the ability to move documents and training materials out of the 3-ring binder and into secure portals, without having to buy and build an expensive infrastructure.”

Google Apps for Franchises includes creation of a secure franchisee portal that may be used to share documents, create on-online policy and procedure models, deliver training videos, and post announcements.  Using Google Docs and Google Sites, franchisers can setup systems for improved reporting and rolling up numbers.  The package also includes Cumulus Global’s Premium Support offering, including tier 2 end user support.

“We understand that franchisers have unique business issues when providing services to franchisees,” notes Falcon.  “Franchisers, for example, can direct us to invoice them centrally or invoice each franchisee.”

Franchisers interested in Google Apps for Franchises can get more information at Cumulus Global’s website directly or through the Google Apps Marketplace.

About Cumulus Global
Cumulus Global, formerly Horizon Info Services, helps small and mid-size businesses, non-profits, governments, and educational institutions thrive by delivering cloud computing solutions.  Serving clients from 1 to more than 1000 employees across numerous industries, we align technology with our clients’ goals, objectives, and bottom lines. We leverage our expertise, vendor relationships, and a diversified range of best-of-breed cloud services to create custom solutions with tangible value.

Google Apps for Franchises is the first in a series of industry specific cloud computing solutions from Cumulus Global.

Horizon Info Services, LLC Becomes Cumulus Global

New Name and Brand Reflects Company’s Growth

WESTBOROUGH, MA – June 13, 2011 – Horizon Info Services, LLC announced this morning that, effective immediately, the company is doing business as Cumulus Global. Allen Falcon, CEO, announced the change from the company’s booth at the Hartford Business Journal’s CT Business Expo.  With this new name, Falcon also launched the company’s new branding and web site at www.cumulusglobal.com.

As one of the original 20 Google Apps Authorized Resellers in North America, Cumulus Global will continue delivering innovative cloud computing solutions for email, communications, and collaboration.  The company has also quietly added a broad selection of cloud computing solutions relevant to small and mid-size organizations, serving North American companies with locations worldwide.

“Cumulus Global better reflects the scope of cloud computing solutions we offer to businesses, non-profits, educational institutions, and governments”, stated Falcon.  “While Google Apps remains the cornerstone of our cloud computing solutions, we understand that Google Apps is one piece of the IT puzzle.  We deliver solutions, not just products.”

Cumulus Global augments Google Apps with integrated applications for contact management, MS Office integration, data backup, document records management, email archiving and encryption, as well as custom development services.  The company provides a range of setup and migration services and offers on-going IT and end user support services not otherwise available.

“We are fairly unique among Google Apps resellers,” notes Falcon. “Unlike most Google Apps resellers, our focus is more than selling Google Apps licenses and services.  We focus on our customers’ business needs and objectives, and deliver cloud computing solutions accordingly.”

Beyond Google Apps, Cumulus offers a range of cloud computing solutions, including: spam/virus protection, archiving, encryption, and continuity services for in-house email systems; web security and filtering services; and online backup, restore, and recovery services.  The company will be rolling out Cloud Storage and Cloud Server solutions later this summer.

About Cumulus Global
Cumulus Global, formerly Horizon Info Services, helps small and mid-size businesses, non-profits, governments, and educational institutions thrive by delivering cloud computing solutions.  Serving clients from 1 to more than 1000 employees across numerous industries, we align technology with our clients’ goals, objectives, and bottom lines. We leverage our expertise, vendor relationships, and a diversified range of best-of-breed cloud services to create custom solutions with tangible value.