Differentiate yourself in a crowded market with the Cloud Industry Forum

Code of Practice

11 November 2015, 15:00 GMTPresented by Jason Wyatt Cloud Industry

Forum and David Smart Softwerx

Thank you for joining. The webinar will begin shortly.

Agenda

• Welcome and introductions• Common concerns moving to the cloud• The Cloud Industry Forum Code of Practice • Softwerx Case Study • Q&A• Close

CIF Code of Practice:Standing out from

the crowd

Your presentersJason Wyatt

Business Development Director, Cloud Industry Forum

David Smart Managing Director, Softwerx

About the Cloud Industry ForumThe Cloud Industry Forum (CIF) is a membership led industry body that champions and advocates the adoption and use of Cloud-based services by business.

We use our resources to establish best practice, lobby and educate on all matters that will aid adoption of credible Cloud services.

We manage a certifiable accreditation program, the Code of Practice that provides transparency of Cloud services to enable users to assure clarity and confidence in their choice of service provider.

We offer an Individual Membership Programme delivering resources and personal accreditation.

Concerns moving to the Cloud

Certification can reduce the concern

Most significant concerns about cloud adoption are:

• 70% cited data security • 61% cited data privacy• 40% fear loss of control of IT• 29% state concerns about migration • 28% have concerns about vendors

Source: Cloud Adoption Snapshot and Trends for 2016, Paper 15 CIF

The CIF Code of Practice

• Provides transparency amongst Cloud Service Providers and Managed Service Providers

• Assists Cloud Service Users in determining the core information necessary to adopt Cloud services and decide from whom

• Incorporates standards and frameworks ISO 9001 and ISO 27001 requiring provision of organizational, commercial and operational information which are independently reviewed

Certifiable not aspirational!

• Of the organization• The structure• Company location • Company hierarchy• Key personnel• Services provided• Other accreditations

The Code of Practice – The three Pillars

TRANSPARENCY

• Internal processes• Internal procedures• Delivery of services• Customer experience• Organizational structure• Supplier management

The Code of Practice – The three Pillars

CAPABILITY

• Commitment of senior executives to the Code of Practise

• Behaviour with customers• Professional Reference

The Code of Practice – The three Pillars

ACCOUNTABILITY

Successful candidates will have full use of the CIF Certified logo, and will be added to the our website as a recognised and trusted vendor.

• Provides a Mark of compliance, benchmarking tool and credibility through certifiable transparency and capability to all organizations that successfully complete accreditation.

• Provides end users (Businesses) with assurance and confidence in services, improves trust and allows benchmarking – and more informed decision making when selecting a provider.

The CIF Code Of Practice Benefits

By independently reviewed organizational, commercial and operational information

European Commission

• Recognised by ENISA & European Commission European Union Agency for Network and Information Security

Can self-certification be trusted?• Process has multiple checkpoints:

• Business reference submitted with all applications

• Basic data verified on all applications by APM Group

• Public data has to be visible on the Users website and linked to the CIF website for validation

• Documentary evidence has to be electronically signed and approved by an Executive

• All anomalies and complaints are fully investigated by an independent Governance Board. Misuse will result in withdrawal of CIF certification mark.

CIF Code of Practice Governance

• Considers the interests of the Provider and Customer

• Appropriate Governance through:-• CIF Governance Board

• Members from industry vendors• Members from end-user organizations or User Groups• Members from independent advisors (academics, IT

standards champions, etc).• Members from IT legal practice

• Independent Certification through APMG International

• CIF Code of Practice is unique • Most practical way of achieving intended objectives

within reasonable time period

Application process for service providers• Download information pack

Includes information required for application, including business case, project plan template, guidance documentation.

• Register via CIF website and pay appropriate feeFees are banded according to company size and turnover.

• Complete online application and disclosuresIncluding upload of documentation, web page and data entryAPM International support offered

• Self Certification application accepted or passed back for resubmission with advice on what needs to be addressed

• Once Accepted – Trust Mark logo is issued

About Softwerx

• Dynamic IT services and support company • Leading provider of cloud computing and Hybrid technology

solutions in the south-east of England• A founder member of the Cloud Industry Forum, a Microsoft Gold

Partner and holding a number of Quality Management System accreditations including ISO9001, ISO27001, ISO18001 and ISO14001

• Supporting a wide variety of organisations take advantage of cloud computing including: Help for Hero’s, Cambridge University and the Halfords Group plc.

Softwerx: Why we chose to get CIF certified

• To distinguish Softwerx within the cloud computing industry • To continuously improve on our cloud services• To demonstrate transparency, accountability and capability to end

users • To enable a potential customer to make an informed decision about

what we offer • To prove to end users that they can trust in us as their service

provider• To add a real commercial benefit to the organisation• Recommend Code of Practice – provides clear guidance to the

market to measure suppliers against

Softwerx: The CIF certification process

• Dedicated project manager to oversee the application process,• Good opportunity to audit our protocols, management systems and

procedures• Considerable support and guidance from APMG • The certification application has a six-month time out window. • Never saw it as a marketing short-cut to success, we saw it as core

to improve our business

Softwerx: The benefits of CIF certification

• Certification has attracted new customers• Current client base certainly recognised the effort• The process has changed the way we think and work:

- Revised our Hosting Services Agreement. - Formalised our systematic migration process. - Put more rigour into our operations

• Demonstrates that we offer appropriate transparency about our services

Thank you for attending

• APMG International @Cyber_APMGwww.apmg-cyber.com

• Cloud Industry Forum info@cloudindustryforum.org www.cloudindustryforum.org

• Softwerx www.softwerx.com