Docker bolsters security capabilities with Security Scanning launch

DockerDocker has announced the general availability of its Security Scanning product, an offering formerly known as Project Nautilus.

The service, which is available as add-on service to Docker Cloud private repositories and for Official Repositories located on Docker Hub, streamlines software compliance procedures by providing customers with a security profile of all their Docker images. The offering sits alongside Docker Cloud to automatically trigger a series of events as soon as an image is pushed to a repository, providing a complete security profile of the image itself.

“Docker Security Scanning conducts binary level scanning of your images before they are deployed, provides a detailed bill of materials (BOM) that lists out all the layers and components, continuously monitors for new vulnerabilities, and provides notifications when new vulnerabilities are found,” said Docker’s Toli Kuznets on the company’s blog.

“The primary concerns of app dev teams are to build the best software and get it to their customer as fast as possible. However, the software supply chain does not stop with developers, it is a continuous loop of iterations, sharing code with teams and moving across environments. Docker Security Scanning delivers secure content by providing deep insights into Docker images along with a security profile of its components. This information is then available at every stage of the app lifecycle.”

The offering itself splits each Docker image its respective layers and components, and evaluates the risk associated with each one. Risks are reported back to the CVE databases, linked to the specific layer and/or component, but are also monitored on an on-going basis.

New vulnerabilities found during the on-going monitoring process are reported to the CVE database, which will then assess all other software associated with that component/package to improve software compliance across the board. Docker believes software compliance and general risk management can be enhanced through the offering, but also throughout the lifecycle of the software itself.

“With this information, IT teams can proactively manage software compliance requirements by knowing what vulnerabilities impact what pieces of software, reviewing the severity of the vulnerability and making informed decisions on a course of action,” said Kuznets.

The offering is now available to all customers, with Docker currently offering a three month free trial.

Docker Security

IoT and Smart Buildings | @ThingsExpo #IoT #IIoT #DigitalTransformation

When it comes to IoT in the enterprise, namely the commercial building and hospitality markets, a benefit not getting the attention it deserves is energy efficiency, and IoT’s direct impact on a cleaner, greener environment when installed in smart buildings. Until now clean technology was offered piecemeal and led with point solutions that require significant systems integration to orchestrate and deploy. There didn’t exist a ‘top down’ approach that can manage and monitor the way a Smart Building actually breathes – immediately flagging overheating in a closet or over cooling in unoccupied hotel rooms.

read more

Addteq to Exhibit at @DevOpsSummit | @Addteq @Atlassian #DevOps

SYS-CON Events announced today that Addteq will exhibit at SYS-CON’s @DevOpsSummit at Cloud Expo New York, which will take place on June 7-9, 2016, at the Javits Center in New York City, NY.
Addteq is one of the top 10 Platinum Atlassian Experts who specialize in DevOps, custom and continuous integration, automation, plugin development, and consulting for midsize and global firms. Addteq firmly believes that automation is essential for successful software releases. Addteq centers its products and services around this fundamentally unique approach to delivering complete software release management solutions. With a combination of Addteq’s services and our extensive list of partners, we believe that we can provide the best solutions to fit your business. Locations include our Headquarters in Princeton, NJ with additional offices in Los Angeles, CA and Pune, India.

read more

Data placement in the cloud and regulations for US financial services

(Image Credit: iStockPhoto/Cronislaw)

As momentum builds behind public cloud infrastructure solutions, even highly regulated industries like financial services are exploring their options. While regulations and security are often seen as stumbling blocks for public cloud acceptance in financial services, reviewing available information on U.S. regulatory guidance and privacy law suggests there may be ways to move into the cloud in compliance-friendly ways. This article, of course, should not replace input from appropriate legal advisors. The research behind this article focused on privacy law and requirements around U.S. banks rather than international issues that might arise from data placement in the cloud. 

The U.S. banking industry has several regulatory bodies, including the Federal Reserve Board, the Federal Deposit Insurance Corporation, The National Credit Union Administration, the Office of the Comptroller of the Currency, and the Consumer Financial Protection Bureau. A consortium group called the Federal Financial Institutions Examination Council maintains a clearing house for guidance and regulatory information from the various regulators. On July 10, 2012, the Council issued a press release with guidance on public cloud utilization in banking. 

The core of the guidance is public cloud risk management should follow the same risk management principles as any outsourcing contract.  “The Federal Financial Institution Examination Council Agencies consider cloud computing to be another form of outsourcing with the same basic risk characteristics and risk management requirements as traditional forms of outsourcing.”

The Council calls out some specific areas for attention by regulated entities.

  • Due diligence: Outsourcing to cloud doesn’t excuse entities from due diligence around data management. Good data practices like data classification, segregation, and ensuring recoverability should be followed.
  • Vendor management: Cloud services unfamiliar with finance may require additional controls to provide appropriate checks and oversight.
  • Audit: Cloud services must preserve transparency and regulators’ ability to audit.
  • Information security: Information security analogous or consistent with internal practice must be maintained
  • Legal, regulatory, and reputational considerations: Applicable law must be observed
  • Business continuity planning: Appropriate plans around disaster recovery and data recoverability must be in place.

The Council makes special reference to legal considerations, and it is worth a deeper exploration of what those are. The primary privacy regulations affecting U.S. financial services are contained in the Gramm-Leach-Bliley Act (GLB).  GLB originated as a response to concerns about banks sharing detailed account-holder information with third parties for marketing or cross-selling purposes. 

The act basically specifies handling requirements around data deemed personally identifiable and non-public. It bars sharing such data with third parties without explicit agreement from customers. GLB applies to a broad range of U.S. financial services including banks, mortgage originators and servicers, consumer credit agencies, et al.

Because outsourcing infrastructure provisioning to a public cloud is, almost by definition, allowing 3rd party access to data, some specifics about GLB merit a closer look.  Fundamentally, the law requires financial services firms to preserve the privacy of “non-public personal information” by enacting a variety of personnel and computer systems security policies. In the event a firm wants or needs to share information with a third party, the customer must be notified and given the opportunity to opt out.

Privacy obligations only apply to non-public personal information. This might include account numbers, or information from an application for an account–even information in an internet cookie is considered protected. What is not protected is non-identifiable aggregate data or information that can be gleaned from other public records (mortgage holders are often recorded in deed documents, for instance).  

As to how to protect that information, firms (and by extension, their 3rd party outsource partners) must implement a comprehensive security program to ensure security and confidentiality of protected data, protecting against anticipated threats or unauthorized access. Such a program might be composed of employee training and management as well as information systems management.

Background checks and restriction of data access to those employees with a need to know are a cornerstone of secure data management.  Other employee-focused policies are strong, frequently changed passwords, remote access restrictions, and prompt deactivation of departing personnel’s passwords and user names.

A security policy might also include procedures around information systems. Appropriate encryption, security patching, firewalls, intrusion detection systems, anti-virus, and other prophylactic security measures must be used.

When dealing with service providers, it is important to have agreements about these policies in writing to safeguard non-public Information appropriately. Additionally, you should review policies and procedures with audits, testing, or other controls to monitor the provider’s compliance.

While these steps are unmistakably a burden, they are challenges most firms have shouldered in other outsourcing arrangements.

In summary, while there remains a lot of fear, uncertainty, and doubt around regulatory discussions with financial services in the public cloud, a review of the available information is not as forbidding as one might suppose. The guidance points to outsourcing as the model, and there is ample precedent and experience with outsourcing systems. U.S. financial firms hoping to take advantage of the speed, flexibility, and cost efficiencies of the public cloud should proceed, with caution, of course, but optimistically.

What advice would you share on the matter? Let us know in the comments.

Security for #IoT Manufacturing | @ThingsExpo #IIoT #M2M #InternetOfThings

trust and privacy in their ecosystem. Assurance and protection of device identity, secure data encryption and authentication are the key security challenges organizations are trying to address when integrating IoT devices. This holds true for IoT applications in a wide range of industries, for example, healthcare, consumer devices, and manufacturing.
In his session at @ThingsExpo, Lancen LaChance, vice president of product management, IoT solutions at GlobalSign, will teach IoT developers how to introduce strong security elements into the manufacturing process, addressing the critical IoT security concerns but also accelerating time-to-market and reducing manufacturing costs.

read more

Ixia launches CloudLens to increase network visibility across cloud environments

Closeup on eyeglasses with focused and blurred landscape view.Ixia has launched its new CloudLens offering, a platform which it claims will increase network visibility across private, public, and hybrid cloud environments for service providers, cloud providers, and enterprise customers.

The new offering will enable customers to gain insight into network traffic in both physical and virtualized environments, using the company’s virtual network taps, packet and application flow filtering. The offering claims to answer the challenge of elastic demands of cloud customers in a multi-tenant self-serve model, deploying scalable traffic monitoring system in a matter of minutes, as opposed to days.

“The CloudLens platform is a true reflection of what Ixia is well recognized for in the industry, which is combining technology innovation with solutions that address real-world network challenges,” said Dennis Cox, Chief Product Officer at Ixia. “We are committed to addressing those challenges, and will continue to innovate, leveraging our years of experience, to deliver unprecedented visibility across all cloud environments.”

CloudLens will also include a number of automation features enabling the virtual taps and analysis tools to automatically change in reaction to demand or failures, without the need for an operator. The platform currently supports OpenStack KVM, VMWare ESXi, and NSX, and is expected to be extended to Microsoft Hyper-V later in the coming months.

How SMEs are benefitting from hybrid cloud architecture in the best of both worlds

Firm handshakeHybrid cloud architecture has been a while maturing, but now offers businesses unparalleled flexibility, ROI and scalability. The smaller the business, the more vital these traits are, making hybrid cloud the number one choice for SMEs in 2016.

It’s been more than two years since Gartner predicted that, by 2017, 50 per cent of enterprises would be using a hybrid of public and private cloud operations. This prediction was based on growing private cloud deployment coupled with interest in hybrid cloud, but a lack of actual uptake – back then in 2013. “Actual deployments [of hybrid cloud] are low, but aspirations are high”, said Gartner at the time.

It’s fair to say that Gartner’s prediction has been borne out, with hybrid cloud services rapidly becoming a given for a whole range of businesses, but perhaps less predictably the value of hybrid is being most felt in the SME sector, where speed, ROI and overall flexibility are most intensely valued. As enterprise data requirements continue to rocket – indeed overall business data volume is growing at a rate of more than 60 per cent annually – it’s not hard to see why this sector is burgeoning.

Data protection is no longer an option

Across the board, from major corporations through to SMEs in particular, there’s now clear recognition that data protection is no longer merely a “nice-to-have”, it’s a basic requirement for doing business. Not being able to access customer, operational or supply-chain data for even short periods can be disastrous, and every minute of downtime impacts on ROI. Critically, losing data permanently threatens to damage operational function, as well as business perception. The latter point is particularly important in terms of business relationships with suppliers and customers that may have taken years to develop, but can be undone in the course of a few hours of unexplained downtime. It’s never been easier to take business elsewhere, so the ability to keep up and running irrespective of hardware failure or an extreme weather event is essential.

Speed and cost benefits combined

Perhaps the most obvious benefit of hybrid cloud technology (a combination of on-premises and off-premises deployment models) is that SMEs are presented with enterprise class IT capabilities at a much lower cost. SMEs that outsource the management of IT services through Managed Service Providers (MSP), pay per seat, for immediate scalability, and what’s more avoid the complexity of managing the same systems in-house. This model also avoids the requirement for capital investment, allowing SMEs to avoid large upfront costs, but still enjoy the benefits – such as data protection in the example of hybrid cloud data backup.

One UK business that saved around £200,000 in lost revenue due to these benefits is Mandarin Stone, a natural stone and tile retailer. Having implemented a hybrid cloud disaster recovery system from Datto the company experienced an overheated main server just months later, but were able to switch operations to a virtualised cloud server in just hours while replacement hardware was setup, in contrast to a previous outage that took days to resolve. “Datto was invaluable,” said Alana Preece, Mandarin Stone’s Financial Director, “and the device paid for itself in that one incident. The investment [in a hybrid cloud solution] was worth it.”

The considerable upside of the hybrid model is that where immediate access to data or services is required, local storage devices can make this possible without any of the delay associated with hauling large datasets down from the cloud. SMEs in particular are affected by bandwidth concerns as well as costs. In the event of a localised hardware failure or loss of a business mobile device, for example, data can be locally restored in just seconds.

Unburden the network for better business

Many hybrid models use network downtime to backup local files to the cloud, lowering the impact on bandwidth during working hours, but also ensuring that there is an off-premises backup in place in the event of a more serious incident such as extreme weather, for example. Of course, this network management isn’t a new idea, but with a hybrid cloud setup it’s much more efficient – for example, in a cloud-only implementation the SMEs server will have an agent or multiple agents running to dedupe, compress and encrypt each backup, using the server’s resources. A local device taking on this workload leaves the main server to deal with the day-to-day business unhindered, and means that backups can be made efficiently as they’re required, then uploaded to the cloud when bandwidth is less in demand.

Of course, since Gartner’s original prediction there’s been considerable consumer uptake of cloud-based backups such as Apple’s iCloud and Google’s Drive, which has de-stigmatised the cloud and driven acceptance and expectations. SME’s have been at the forefront of this revolution, making cloud technology far more widely accepted as being reliable, cost-effective, low-hassle and scalable. The fact that Google Apps and Microsoft Office 365 are both largely cloud-based show just how the adoption barriers have fallen since 2013, which makes reassuring SME decision-makers considerably easier for MSPs.

Compliance resolved

Compliance can be particularly onerous for SMEs, especially where customer data is concerned. For example, the global demands of a standard like PCI DSS, or HIPAA (for those with North American operations) demand specific standards of care in terms of data storage, retention and recovery. Hybrid solutions can help smooth this path by providing compliant backup storage off-premises for retention, protect data from corruption and provide a ‘paper trail’ of documentation that establishes a solid data recovery process.

Good news for MSPs

Finally, hybrid cloud offers many benefits for the MSP side of the coin, delivering sustainable recurring revenues, not only via the core backup services themselves, which will tend to grow over time as data volumes increase, but also via additional services. New value-add services might include monitoring the SME’s environment for new backup needs, or periodic business continuity drills, for example, to improve the MSPs customer retention and help their business grow.

Written by Andrew Stuart, Managing Director, EMEA, Datto

 

About Datto

Datto is an innovative provider of comprehensive backup, recovery and business continuity solutions used by thousands of managed service providers worldwide. Datto’s 140+ PB private cloud and family of software and hardware devices provide Total Data Protection everywhere business data lives. Whether your data is on-prem in a physical or virtual server, or in the cloud via SaaS applications, only Datto offers end-to-end recoverability and single-vendor accountability. Founded in 2007 by Austin McChord, Datto is privately held and profitable, with venture backing by General Catalyst Partners. In 2015 McChord was named to the Forbes “30 under 30” ranking of top young entrepreneurs.

Virtustream enters European cloud market place

competitive swimmingWhen looking at the European cloud market ecosystem, most people would be forgiven for not looking much past the three largest holders of market share; AWS, Microsoft Azure and Google. But there are alternatives, despite them being less well known. This is the challenge facing Virtustream MD Simon Walsh.

Although as a company Virtustream has been in operation since 2009, the team consider themselves in start-up mode, taking position to pounce on the European market over the company months. The company was acquired by EMC last year, and formed the tech giant’s managed cloud services business, a position which could be seen as enviable by other cloud companies aiming to topple the top three’s firm grasp on the cloud market.

“EMC is the largest storage company in the world,” said Walsh. “And we’re aiming to leverage that position. We’re taking a rifle shot approach to building business in the European markets, but in parallel we’ve partnered with EMC because they own us, and we’ve partnered with Dell because they own EMC. With these relationships, we have access to multiple routes to market, and we plan on leveraging the recognition of companies like EMC and Dell to scale Virtustream rapidly.”

Virtustream is currently one of six EMC Federation companies (EMC2, Pivotal, RSA, VCE, VMWare and Virtustream), and will continue to be an independent brand following the introduction of Dell Technologies, and the subsequent sub-brands, in the coming months. While the brand is relatively unknown in the EMEA and APJ markets, this is not the case in North America where it has a number of certifications for federal government contracts and a number of enterprise customers.

Growth in the European market will firstly utilize the certifications Virtustream has in the US market to provide credibility for public sector organizations in Europe, and secondly, leverage customers who are already bought into the EMC and Dell portfolios.

The new EMC/Dell execs are seemingly learning lessons from Microsoft’s rise to the top of the market segment, as opposed to AWS’, becoming an end-to-end enterprise IT vendor (similar to Microsoft) as opposed to a specialist public cloud company (AWS). While AWS is widely recognised as the cloud leader worldwide, a recent study from JP Morgan will give the new EMC/Dell execs confidence.

The research highlighted 46.9% of the CIOs surveyed highlighted Microsoft as the most critical and indispensable to the future of their IT environment, whereas AWS only accounted for 13%. The all-encompassing portfolio offered by Microsoft (cloud, desktop, server and database etc.) was more appealing than AWS’ offering.

Simon Walsh

Virtustream Managing Director Simon Walsh

Virtustream can offer cloud capabilities across the board, from cloud native to traditional systems of record, and now the team have connected the cloud storage options directly to three EMC platforms in the software. The team are leaning on the idea of trust in the EMC brand, straightforwardness of upgrade and the simple integration between the offerings of all federation businesses, will offer customers a portfolio which can’t be matched in the industry.

“EMC is globally 30% of the storage market, if we go to the installed base and connect these customers to our storage cloud we should be able to scale pretty quickly (on growth of the Virtustream business),” said Walsh. “We may not be number one in the cloud storage market, but I can see us being in the top three for market share within the near future.”

One area the team are targeting in particular is the core business applications. Most enterprise organizations cloud be perceived to have a reluctance and a paranoia to run core business applications in the cloud, though Virtustream believes it has an offering which can counter this trend.

“Yes, I see paranoia, however it is geographically different,” said Walsh. “Europe is behind. Europe is still clinging onto building it themselves or outsourcing. There’s nothing wrong with outsourcing, but in the America’s they are much bolder at adopting cloud.

“Most people have used cloud to date for dev and test or they’ve used it for web front end or scale out systems of engagement, hardly anybody actually has an application which they run their business on in the cloud. It’s either in their own data centre which they run themselves or they’ve outsourced, and they have someone doing application management services. We have a hybrid solution which can change all this.”

The team have combined public cloud attributes of agility and tiered payment, and the outsourcing attributes of a core app, with an SLA and a performance guarantee, to create a hybrid proposition which they claim is unique for the industry. Walsh and his team now face the task of convincing European decision makers there is a feasible option to run core business applications in the cloud.

“The entire world has not shifted to cloud native,” said Walsh. “There is still a substantial amount of money spent by corporations around the world on running core business applications. We have a proposition which can run cloud native but can also run core business applications in the cloud, on demand and on consumption. No-one else in the industry does that. We can run all the systems on the same billing engine, the same cloud management tools and the same application management tools, which gives us a differentiator in the market.”

Rackspace prioritises AWS and Azure partnerships for future growth

Taylor Rhodes

Taylor Rhodes, President and CEO at Rackspace

Rackspace has reported healthy growth for Q1 2016, as the team continues its transition to become managed services provider, leveraging partnerships with AWS and Microsoft Azure.

Revenues for the first quarter were reported at $518 million, a year-on-year growth of 9.9%, while profits grew 77.5%. Although the growth of the business over the last 12 months has been viewed as generally positive, industry commentators highlighted the $24 million gain from the divestiture of Jungle Disk, and what could be perceived as a lacklustre outlook for the rest of 2016 has dampened the news. The exec team expects revenues of between $519 million and $524 million for the second quarter.

“First, we saw a strong demand for our expertise and support on the AWS and Microsoft Clouds and for our OpenStack private cloud offer. Collectively, we now serve more than 400 customers on these platforms and our demand is scaling rapidly,” Taylor Rhodes, President and CEO at Rackspace. “From the October launch of our AWS service through the end of April, we’ve been actively marketing with AWS and have signed 187 customers across every firm size, geography, and vertical.”

The transition to a managed cloud services company began a number of years ago with the launch of Rackspace’s Fanatical Support services, though seemingly began making real traction within the industry last year, as the team announced expanded partnerships with Microsoft in July, when Azure public and private cloud infrastructure was incorporated into the offering, and AWS in August. The team also recently announced a new partnership with Cloud Technology Partners, which it believes will increase cloud adoption rates.

The partnerships are also enabling the company to diversify its geographical focus as over 40% of the AWS customers are coming from non-U.S. regions. Rhodes also believes the new capital-light business models employed enables the company to roll-out new offerings worldwide. Previously, new products were rolled out first in the USA, due to capital intensity, and then phased out over time into other regions worldwide, however the new model is claimed to offer Rackspace increased flexibility and agility in bringing new offerings to the market.

The shift in strategic direction is supported by a renewed effort in the marketing department, as Rhodes highlighted campaigns will now be directed towards driving brand awareness and demand generation for the managed cloud services business, specifically the Fanatical Support services offered to AWS and Microsoft Azure customers.

“Our new head of Global Sales and Marketing, Alex Pinchev, started work at the beginning of Q1,” said Rhodes. “He and his team are moving aggressively to shift resources toward our new fast-growing offers while sustaining our core business. They are training more of our sales teams to sell our new offers and are hiring additional specialists in areas of high demand. We advised you last quarter that these sales and marketing efforts will take time to gain full traction, that transition contributed to our slow start to the year”

Efforts for Rackspace on the OpenStack front would also appear to be bearing fruit, with the launch of OpenStack Everywhere, Next Generation Bare Metal Servers and the Private Cloud Powered by Red Hat offering. All three offerings would seemingly demonstrate the company’s drive towards the OpenStack private and hybrid cloud market segments. The team are confident in the growth potential of the OpenStack private cloud market, and highlighted a number of major customers wins were through this aspect of the business.

“Our role as the co-founder of OpenStack has given us unique capabilities in software development, DevOps, continuous integration and deployment, and other key disciplines,” said Rhodes. “Those capabilities provide a major differentiation for us versus other managed services providers as we expand to provide managed cloud services on AWS and the Microsoft Cloud.

“We’ve really seen a tipping point, what really looks like a significant tipping point in the market for OpenStack private clouds in the last six months to nine months. Some of our largest deals that we closed in March were OpenStack private cloud deals and some of the largest deals that we have in our pipeline today are OpenStack private cloud deal. So, really that’s the traction that we’re seeing.”

What does business transformation mean to you – view from EMC, Etisalat and Partner’s Healthcare

Business Transformation Pic

EMC’s President of Global Sales and Customer Operations Bill Scannell (Right), was joined by EMC customers John Grieco, VP of Information Technology at Partner’s Healthcare (Middle) and Etisalat Egypt CIO Khalid Almasouri (Left)

Speaking at EMC World, EMC’s President of Global Sales and Customer Operations Bill Scannell, was joined by EMC customers John Grieco, VP of Information Technology at Partner’s Healthcare and Etisalat Egypt CIO Khalid Almasouri to discuss the role of business transformation in the digital era.

Business transformation as a term has been used by the vast majority of the industry, though the wide variety of definitions of the buzzword has created some complications. What is generally accepted is there are few companies who would be able to compete with the digitally enabled, cloud-orientated new breed of organizations who have shaken the industry in recent years. Business transformation is a necessity for those organizations who do not want to head the same direction as Blockbuster.

“IT needs to be a business enabler not an obstacle to our employees,” said Grieco. “We need to make sure our people are able to do what they do best, and our IT systems do not hinder what they want to on a day-to-day basis.”

For Grieco and Partner’s Healthcare, business transformation is the process to ensure they are serving their customers as effectively as possible. Partner’s Healthcare is a Boston-based non-profit hospital and physicians network, the largest private employer and the biggest healthcare provider in the Boston metropolitan area, serving more than a third of the population. Grieco’s belief is business transformation will enable the team to create an organization which can serve its customers faster and safer.

“We want to be agile, we want to be nimble and we want to move,” said Grieco. “We want an enterprise look and feel, but the ability to perform like an SME. We want data to be accessible, and we want that accessibility to be fast. We want to drive down the cost of IT, and put that money back into the business. We want to reduce the complexity of the network, and improve its accessibility to the rest of the business. This is what business transformation means to us.”

While cloud and the digital era for Partner’s Healthcare presents an opportunity to better serve customers, it is very much a different story for Etisalat. The digital era has created a new environment which has challenged the telecommunications industry, and created a new level of competition for telcos.

The newly-empowered OTT brands are now stealing market share from the telco’s, offering services which are gradually eroding the profit margins of these companies. Business transformation for the telcos is not so much an opportunity to be better, but more a necessity to survive and more readily compete with technologies such as WhatsApp.

Business Transformation Pic 2

EMC’s President of Global Sales and Customer Operations Bill Scannell

“Business transformation is a change in business mentality,” said Khalid Almansouri, CIO at Etisalat Egypt. “IT used to be the backbone of the company, it used to be about keeping the lights on, but now the CIO has to be outside the IT department. The new breed of CIO needs to be throughout the business to create new opportunities by having a conversation with other departments to understand how technology can answer the challenges which are thrown out by the digital era.”

The rise of OTT’s will not mean the end of telco’s, but should these organizations want to continue to report revenues which shareholders have become accustomed to, there is a requirement for the business to be more agile, to deliver a new experience and also deliver new, innovative products, as fast (if not faster) and cheaper than the OTT’s. Transforming the business for the digital era is critical to achieve these goals.

“We used to know who are competitors were,” said Almansouri. “They were Orange or Vodafone and they were based in the same region as us. They had the same infrastructure, they had the same billing system, so we could compete.

“But now we’re competing with OTT’s who are on the other side of the world. They are more agile and are taking our market share. Business transformation makes us an organization which can compete with these organizations.”

Irrelevant of what the reasoning for business transformation, it is an objective for a vast number of organizations around the world. The introduction of cloud computing has created a horde of cloud native organizations who are disrupting the ecosystem. To answer the call-to-arms traditional business has had to transform to a digital-enabled organization. For EMC, this begins with the modern data centre.

“The first step in building a hybrid cloud or native cloud infrastructure is having a modern data centre,” said Scannell. “To have a modern data centre, you have to have a modern infrastructure. And to have a modern infrastructure you have to have a modern architecture. Scalable infrastructure is important. All flash is important. Software defined everything and cloud-enabled are important. That is how you achieve the modern business and drive digital transformation.”