Posts

Friday Thought: 3 More Reasons Google Apps is Secure

In addition to SAS 70 Type II Certification, here are 3 more reasons Google Apps is secure.

  1. Custom Operating System. Google Apps runs on a custom version of the LINUX operating system (OS).  Services and ports that are not needed, a common entry point for hackers, are not simply disabled, they have been removed.  As important, hackers cannot buy a copy of Google’s custom OS and use it to find vulnerabilities.
  2. Data is Unreadable, at least by humans.  When you save data in Google Apps, it is broken into little pieces that are each saved in different servers across multiple data centers.  Each piece is then obfuscated using encryption and other methods.  Even if somebody was able to break in, or a Google employee gained access to your data, they would first need to find all of the pieces and then figure out how to decrypt each piece. In comparison, your MS Exchange administrator can read every email in the system.
  3. Google is the second largest target for Hackers. Only the US Department of Defense has more attacks by hackers.  Google, therefore, has built an extremely robust defense against hackers.  With a security team of thousands on the job, led by some of the foremost security experts in the world, Google has built protection from hackers that greatly exceeds what most businesses can technically do, or even afford to do.

Does this mean your data is perfectly secure?  No!  Security can never be perfect.  It does mean that your chances of losing data in Google Apps is negligible when compared to most businesses’ network security and the actions of their employees (sharing passwords, stolen laptops, lost USB drives, and so on…..).

Friday Thought: What does SAS 70 really mean?

When talking about security of cloud solutions, we often mention that Google Apps is SAS 70 Type II certified.  While it sounds impressive, what does it really mean.

SAS 70 is an accounting audit standard for operational policies and procedures.  To achieve certification, you …

  1. Must have best-practice policies and procedures in place
  2. Must be able to prove that you follow policies and procedures
  3. Must have an independent 3rd party audit your operations on a regular basis to validate the policies and procedures and verify that they are followed.

SAS 70 Type II reflects a level of certification for data center and IT operations that includes:

  • Physical security of buildings and data centers
  • Logical security (network, systems, data, etc)
  • Privacy
  • Incident management and availability
  • Change management
  • Organization (roles and responsibilities)
  • Administration (personnel, documentation, funding, etc.)

So while it sounds impressive, SAS 70 Type II certification really is impressive!

Most businesses cannot or choose not to incur the cost and effort to achieve SAS 70 Type II certification for their internal systems.  With the certification, Google is confirming the security and safety of your data continuously at a level that likely exceeds the security of your in-house networks and systems.

I Love My New Chromebook, but …

As we prepare to offer Chromebooks to schools and SMEs, our first unit has arrived.  Never has setting up a new computing device been so simple.  Once you power up, the OS walks you through connecting to your wireless network and downloading the latest Chrome OS updates.

Enter your Google Apps username and password, and you are up and running.

We are using the Samsung 5 WiFi edition.  The keyboard is fine, but compact.  Performance is superb as is screen, audio, and video quality (through the built-in camera).  Boot up takes ~8 seconds and coming out of sleep is instant.  A far cry from the coffee break required when returning from Standby on my Windows laptop.

I love it, but ….  it does take some adjustment.

ChromeOS is an OS in a browser.  There is no “closing” the browser to see your desktop.  Your “desktop” is the new tab screen, with your applications listed in a logical order.

There is local storage, about 50GB, and the ability to use USB and SD cards for more space.  The local storage is not like a traditional hard drive.  There is no letter, it is simply accessed through the browser.

Google could make moving to Chromebooks easier with a few changes to Google Apps and Gmail in particular.   When composing emails, Gmail has an “Attach File” link that assumes you are loading a file from local storage.  I suggest that Gmail should also have a “Share Doc” link that lets you browse your Google Docs collections and select links to include/attach in the message.  If I am moving to the cloud, make sharing content from the cloud the default.

Aside from that, I find the Chromebook more useful for working on the go than my iPad, as I prefer the Chrome browser interface to the mail, calendar, and ‘mini browser’ interfaces on the iPad.

Let me know what you think.
–Allen

Cumulus Global Backs New Tiers for Google Apps Authorized Resellers

Yesterday, Google announced the addition of “Premier” tiers for Google Apps Authorized Resellers, as well as for Google Earth, Enterprise Search, and Google Maps.  As reported by CRN, Cumulus Global supports Google’s efforts to differentiate among resellers.

As Allen Falcon, CEO of Cumulus Global discussed in the article, not all resellers have the same skills and resources.  The new tiers reflect training and experience of the reseller, giving customers another tool for matching their needs when selecting a reseller.

People Widget Gives Context to Email Senders

Email is not just a way to communicate … to send and receive messages.  Email can and should be a tool for collaborating.  A tool that places your communication within the context of your relationship with the senders and recipients.  A tool that makes it easier to move from sending/receiving to sharing.

People Widget

Over the next two weeks, Google is rolling out the People Widget across Google Apps platforms.  The widget highlights content and communications from colleagues, friends, and family, placing your communications within a broader context.

The widget, which will appear next to your inbox provides context for the sender of each email.  More than seeing who the sender is, the People Widget lists any recent email conversations and joint calendar events.  It also provides on-click access to chat, initiate a new email conversation, schedule a meeting, or update the sender’s information.

For more information, visit the Official Gmail Blog.

If you are interested in trying Google Apps, contact us or complete our 12 Minute Assessment.

 

Freshen Up Your Existing Google Sites

Google Sites now supports the ability to apply a site template’s theme to any existing site. This does not apply the entire template to your existing site, just the template’s theme.

Using this capability, you can spruce up the theme of existing Google Sites without changing the structure or layout.

Click here to learn more.

Horizon offers Support for Chromebooks Now

In an interview with CRN, published today, Horizon Info Services confirmed that we are prepared to help organizations plan for, deploy, and support Google Chrombooks.   While organizations must currently purchase Chromebooks directly from Google, Horizon’s professional services team can assist with the planning, deployment, and support efforts.

Once trusted partners are able to offer the Chromebooks directly, Horizon will also resell and support them directly.

New Feature Thursday: Discussions in Google Docs

Looking beyond basic comments within documents, Google Docs now features the ability to use comments for discussions with email integration.  Key aspects of this new feature include:

  • The ability to reply to comments written by others
  • Identity and ownership of all comments
  • The ability to resolve comments and discussions instead of deleting them.  You can review all discussions at any time.
  • Add somebody to a discussion thread using @mentions.  They get an email with your comment and a link so they can join in. Or, the individual can simply reply to the email
  • The ability to manage if and when you receive notifications for comments and discussions

Given the scope of the change, Discussions are only available for new documents.

For more information and a cool demo video, click here.

If you think this type of collaboration can help your business run more efficiently, please let us know.

Google Apps Helpful Hint: 5 Things You Can Do With Attachments

With constant and continuous updates, it is easy to miss some of the ‘small’ enhancements that make using Google Apps easier.  Our Google Apps Helpful Hints series features some of these new capabilities.

Today, we look at 5 new features around Gmail attachments.

1. Drag attachments in and out

In: Simply drag files from your desktop right into the message you’re composing and they’ll upload from there. (Make sure you’re using Google Chrome, Mozilla Firefox 3.6 or Safari 5 for this to work.)

Out: Simply drag the icon for a Gmail attachment to your desktop. (Note that dragging attachments out is only supported in Google Chrome for now.)

2. Select multiple attachments

Attaching multiple files one by one is no fun. Instead, just multi-select the files you want to attach by holding down the Ctrl key (or Command on a Mac) and clicking on each file you want to attach. Holding down the shift key will select a continuous list of files.

3. Never forget an attachment again

Gmail looks for phrases in your email that suggest you meant to attach a file (things like “I’ve attached” or “see attachment”) and warns you if it looks like you forgot to do so. Every day, this saves many people the embarrassment of having to send a follow up email with the file actually attached.

4. View attachments online

When you receive an attachment, sometimes you just want to view it and there’s no need to download or save it to your desktop. The Google Docs viewer allows you to view .pdf, .ppt, .tiff, .doc and .docx files in your browser. Just click the ‘View’ link at the bottom of the message.

5. Find that long-lost attachment

If you’re looking for an attachment someone has sent to you, Gmail’s advanced search operators can help you find what you’re looking for quickly and accurately e.g. ‘has:attachment pdf’.

Delegate Google Apps Administration

While most computer environments have at least one network administration account with unrestricted access, many administrators have moved to segment administrative responsibilities across different individuals and departments.

Last week, this capability was added to Google Apps control panel.

Google Apps now has two (2) levels of administrators:

Super Administrators have complete access to the Google Apps administrator control panel and can perform all administrator actions.

Restricted Administrators are given the ability to manage specific tabs in the control panel.  For each tab, you can allow/restrict certain administrative functions.

Both Super and Restricted Administrators have the ability to:

  • The ability to view and edit other users’ Google Sites
  • Rights to use the Google Apps administrative APIs, such as the Provisioning API
  • The ability to log into the Google Apps administrator control panel

Details of the available admin functions and how you can restrict functions can be found here.

Please note that distribution of administrative capabilities is not available by organization unit at this time. Administrators granted access to a control panel tab have the ability to manage those functions for all users.

IT Departments can now segment administrative responsibilities by function, providing many organizations with the ability to segment responsibilities.  The change also supports common division of responsibilities between Help Desk and “Tier 2” support staff.   Help desk staff can not be empowered to change passwords, for example, without giving them the ability to create new users.

The impact of this change is significant as this capability has been often requested by mid-size and enterprise IT departments.