Cloud security still a work in progress

Cloud security still a work in progress by , Network World.  Available from <http://www.networkworld.com/article/3183546/security/cloud-security-still-a-work-in-progress.html> [MAR 21, 2017 7:45 AM PT]


Cybersecurity professionals admit that they still don’t have the right skills, processes and monitoring capabilities for cloud security. Suggestions?

A few years ago, ESG (and other) research indicated that security concerns posed the biggest impediment for more pervasive use of cloud computing. What happened next?  Business executives and CIOs found that cloud agility, flexibility and potential cost savings were too good to pass up, creating a “cloud or bust” mentality. Naturally, CISOs had to do their best and go along for the ride whether they were ready or not.

Continue reading “Cloud security still a work in progress”

How SMBs Can Deploy Hybrid Clouds Successfully

How SMBs Can Deploy Hybrid Clouds Successfully by Phil Goldstein.  Available from <http://www.biztechmagazine.com/article/2016/10/how-smbs-can-deploy-hybrid-clouds-successfully> [October 17, 2016]

More small businesses are embracing hybrid cloud environments. These tips can help make those migrations smoother.

Small and medium-sized businesses are turning to hybrid clouds — mixtures of public clouds like Microsoft Azure and private, on-premises cloud infrastructure — but doing so isn’t always a simple task.

How can SMBs make hybrid cloud deployments easier? A recently published book from analysts at the Hurwitz Group, Hybrid Cloud for Dummies, dives into the best practices for businesses looking to deploy hybrid clouds.

How Hybrid Clouds Are Used

Carbonite, which offers cloud and hybrid backup software for small and medium-sized businesses, cited a survey earlier this year from cloud services provider RightScale. The firm surveyed 1,060 technical professionals (433 enterprise and 627 SMB respondents) and found that they are adopting more private cloud environments. When combined with existing public cloud deployments, that has led to a jump in SMB’s using hybrid environments.

RightScale found that private cloud adoption increased from 63 percent to 77 percent from 2015 to 2016, driving hybrid cloud adoption up from 58 percent to 71 percent year-over-year.

As ZDNet reports, the authors of Hybrid Cloud for Dummies — Judith Hurwitz, Marcia Kaufman, and Daniel Kirsch — observe that “there are a number of enabling technologies that have to be put in place in order to enable a hybrid cloud to operate to support changing business requirements.”

The authors note that companies might use in-house data centers to manage customer transactions, which are often connected to the public cloud, where the company has created customer-facing web-based and mobile interfaces to allow consumers to buy its products online.

Companies use public cloud services for a variety of tasks, the authors note. “The same company may use a third-party managed service that checks credit for anyone paying on an installment plan,” the authors write. “There may also be a series of public cloud-based applications that control customer service details. The company may need to use extra compute capabilities from a public cloud provider during peak holiday periods. In addition, the company will use a public cloud to experiment with prototype business models.”

Best Practices for Deploying Public Clouds

As ZDNet reports, the authors note that there are many best practices businesses should follow to make hybrid cloud deployments successful.

Integrate data. In terms of integration, IT leaders should not only integrate applications but also think through which services need data integration and which need processing in a hybrid environment. They add that firms need to integrate data across their own company and with partner data and public data sources, including social media data, third-party data and internal corporate data.

Store data locally. Companies also need to store and maintain data in on-premises facilities to meet regulatory requirements or potentially boost performance.

Gain operational visibility and management.  IT managers and administrators need to be able to see how all of their cloud services — both on-premises and in public clouds — are operating. To do so, the authors note, they need “a platform that’s able to discover the underlying services and infrastructure.”

Such a platform “must be able to monitor those services so there’s clear visibility and so the entire environment can be controlled in a predictable manner. This means being able to monitor and control not just internal services but those services that are owned and controlled by third-party public cloud vendors or managed services providers.”

Employ workload management tools. Businesses need to use such tools when relying on cloud computing and storage resources from both public and private clouds, the authors note. SMBs also need to ensure they have policies and rules in place to monitor cloud workloads and determine whether certain ones should be placed in public or private cloud environments.

Ensure security. Cybersecurity is always a concern and a necessity, especially in hybrid environments. “The increase in connection points adds a multitude of vulnerabilities to the applications and overall IT environment,” the authors say. “It is hard for many companies to keep abreast of changing security risks. Even the most experienced security expert is always playing catch up with the last security threats.”

As a result, according to ZDNet, the authors argue that companies should deploy a consistent and comprehensive security strategy, which may include “using a cloud-based development platform with built-in security services” that practically anyone on the IT team can use.

Use DevOps. IT teams need to manage the development and deployment of applications, whether they are in private or public clouds. The authors argue that companies need to have a “unified way to manage and synchronize applications and data” in hybrid environments. For example, companies should have a “single federated catalog and operations console for public and private” Platform as a Service deployments.

Flexibility to move apps. Finally, businesses need to have the freedom and agility to shift apps and services between public and private cloud environments as they see fit, something that is becoming easier thanks to containerization and microservices architectures.

“With emerging standards and open technologies, you become less dependent on one implementation of a cloud and gain interoperability no matter which vendor’s services you use,” the authors argue.

How SMBs Can Deploy Hybrid Clouds Successfully by Phil Goldstein.  Available from <http://www.biztechmagazine.com/article/2016/10/how-smbs-can-deploy-hybrid-clouds-successfully> [October 17, 2016]

4 Steps for Choosing A Cloud Storage Solution

4 Steps for Choosing A Cloud Storage Solution by by The NonProfit Times .  Available from < http://www.thenonprofittimes.com/management-tips/4-steps-choosing-cloud-storage-solution/?r=ig-mo>. [September 29, 2016] Photo by Tani12 - Creativecommons

There are a lot of good reasons to put your nonprofit’s files in the Cloud. It can reduce the burden on IT staff and open up opportunities to do their work remotely.

According to the staff at the nonprofit tech organization Idealware, if you’re ready to make the leap into the Cloud but aren’t sure how to find the right solution, consider these four steps:

1. Develop a Project Plan. Who from your organization should be involved in the decision-making process? Who will be involved in migrating your organization to the solution? How long will the project take? Time is an especially important factor. Managers frequently underestimate the time needed and often run the risk of the project interfering with mission-critical work.

2. Evaluate Security Features. A few high-profile data breaches can make Cloud storage seem risky, but consider the security measures most Cloud storage vendors take. The data centers are surrounded by fences and surveillance equipment and watched by armed guards. The vendors also employ data security experts who are trained to detect and defend against sophisticated attacks as they’re happening. The server you store in your closet is not likely to get that kind of attention.

Beyond the large-scale security measures Cloud storage vendors take, the software often includes built-in features that can help you take extra precautions. When considering a solution, find out whether it offers multi-factor authentication or allows you to control access by user, device, or IP address.

3. Consider Your Files. What kinds of files do you need to store and what level of management is necessary? If you have very large files, such as photographs or other graphics, it might not be cost effective or convenient to keep them in the Cloud versus on an external hard drive. Highly sensitive files such as health records or financial information might not be appropriate for some Cloud storage solutions, especially if the solution is not compliant with data security standards such as HIPAA.

4. How Do Staff Members Want to Access Files? For staff members used to navigating their computer’s local drive, there might be a strong desire to maintain the same file structure and user experience in the Cloud. Most hosted file sharing solutions will provide some way for users to access files through their computer’s file explorer. 

However, such options are not without their flaws. To provide this access, you’ll either need to sync a copy of the file structure to your computer — which is not practical for computers with little available free space — or map to the live, online server, making navigating the file structure and opening or saving files painfully slow. You might need to move away from the methods traditionally used to interact with files and adapt to working with these tools in browsers.

4 Steps for Choosing A Cloud Storage Solution by by The NonProfit Times .  Available from < http://www.thenonprofittimes.com/management-tips/4-steps-choosing-cloud-storage-solution/?r=ig-mo>. [September 29, 2016] Photo by Tani12 - Creativecommons