Cloud Software: Are the Top 3 Concerns

Myth or Fact?

October 2014

Technology in the Cloud: The Basics

● We all “know” a few basic truths about the benefits of cloud software: ○ cost savings○ scalability○ easier path to deploying cutting edge

technology

● The dark side of the cloud is also presumed true: ○ greater security risks○ loss of control over data○ lack of flexibility to tailor the experience to the

unique needs of their end users

Myth, Fact, or Somewhere in Between?

Of course – as in all things – our assumptions may not always reflect the rapidly-evolving reality in the enterprise software space.

Let’s take a look at the top 3 cloud critiques and attempt to determine: myth, fact or somewhere in between?

1) Myth or fact?: “The cloud is less secure than on-premise solutions.”

● Cloud platforms are slightly more likely to be attacked (44% v 40%).

● Across all exploit types (app attach, brute force, malware, recon, vulnerability scan, web app attack), on-premise-reliant businesses are almost 10% more likely to come under attack repeatedly (e.g. from the same source) than their cloud-based counterparts.

● On-premise environments are 12 times more likely to have exploitable configuration issues.

References: http://www.alertlogic.com/resources/cloud-security-report http://www.rackspace.com/blog/cloud-computing-more-secure-than-you-think

1) Finding: (Mostly) Myth

● Either approach (cloud or on-premise) requires thoughtful implementation.

● Cloud solutions are typically more secure than on-premise implementations, where security may not be a particular expertise.

● Incursion attempts on both are on the rise.

Choosing a software provider with exemplary security bona fides is an absolute must, regardless of approach.

2) Myth or fact?: “Using the cloud means losing control of data and being locked into a vendor.”● Many popular SaaS providers have adopted easy (or relatively easy) and

affordable data exporting functionality into their core offering.

● Tools now exist to migrate data from the three major server entities: VMWare, OpenStack, and Amazon.

● Greater competition has driven an increasing number of software vendors to adopt some level of freemium or try-before-you-buy models.

References: http://www.shellblack.com/administration/data-export http://www.linuxinsider.com/story/79417.html http://blog.tridentcap.com/2012/08/a-comparison-between-pacific-crests-2011-and-2012-saas-survey-results.html

2) Finding: Formerly, a fact; now, mostly myth

● Market forces have pushed cloud-based services to address the worst of the concerns over control and lock-in.

● Even the most competitive spaces have adopted some degree of data fungibility and freemium level access.

While it remains crucial to carefully investigate agreement parameters and export functionality, on balance, the scales have shifted toward purchaser-friendly practices.

3) Myth or fact?: “Moving to the cloud makes it harder to shape solutions to your needs.”

● Businesses choosing to adopt existing software sets avoid costly investments in customization that may ultimately prove unnecessary.

● By “trading” customization for off-the-shelf solutions, organizations gain the ability to quickly scale without cumbersome internal upgrades or dedicated internal training resources.

● SaaS and cloud providers seem more apt to adopt open API approaches that allow for customization through integration with other third-party providers.

References: http://forwardthinking.pcmag.com/none/325436-with-cloud-computing-flexibility-isn-t-always-a-good-thing http://www.cloudcomputing-news.net/news/2012/aug/16/how-to-mitigate-loss-of-control-when-moving-to-the-cloud/

3) Finding: Fact (but not let that stop you)

● So while this edict does appear to be grounded in reality, many businesses are benefitting by forgoing initial customization in favor of low-cost initial entrance, scalability, and the option to customize through open APIs third-party offerings after internal needs are better-defined.

As before, however, carefully selecting a cloud/SaaS option with strong training, support, and flexible architecture is a must.

So, What Have We Learned?

● Do not cavalierly reject the cloud (and related advantages), but rather, carefully review cloud providers for security practices, data portability, and configuration flexibility.

● Apply another piece of conventional wisdom: “buyer beware” (but also easily benefited).

Which Benefits and Risks Would You Add?

Tell us which additional concerns or benefits you’ve experienced, when it comes to using software in the cloud for your business: http://blog.everlaw.com/2014/09/26/top-three-cloud-risks-myth-fact/