One of the many questions that companies face when introducing new enterprise systems either to provide new functionality or incorporate legacy systems from a merger or acquisition is “How do we identify and manage access rights?”
Not only do new access approval processes need to be established, but a common platform to define and execute processes, reliably document approvals and provide users with an acceptable user experience is often not in place to handle the additional workload. Corporate IT is also faced with the challenge responding quickly to changes in access rules or approval chains.

read more

The following fictional case study is a composite of actual horror stories I’ve heard over the years. Unfortunately, this scenario often occurs when in-house integration teams take on the complexities of DevOps and ALM integration with an enterprise service bus (ESB) or custom integration. It is written from the perspective of an enterprise architect tasked with leading an organization’s effort to adopt Agile to become more competitive. The company has turned to Scaled Agile Framework (SAFe) as a way of scaling Agile, since initial attempts at Agile were not successful despite many scrum master training sessions.
I’m told that our SAFe implementation depends on the flow of information between people from different parts of the organization. Because these groups all use different tools, we need to focus on integrating them.

read more

Enterprises have forever faced challenges surrounding the sharing of their intellectual property. Emerging cloud adoption has made it more compelling for enterprises to digitize their content, making them available over a wide variety of devices across the Internet.
In his session at 19th Cloud Expo, Santosh Ahuja, Director of Architecture at Impiger Technologies, will introduce various mechanisms provided by cloud service providers today to manage and share digital content in a secure manner.

read more

(c)iStock.com/BsWei

The headlong stampede of enterprise data into the cloud has passed by.

A few years ago I might have written it was ‘underway,’ but this would grossly understate the situation.  Data which was once stored on premise has left the building, the twinkling lights on the tin box in your racks are slowly blinking out. Data osmosis is taking place, draining life force from these antiquated shells into vast data-centres run by some of the largest companies on earth.   It is more than a trend.  It is just reality. 

So as a million barn gates are slammed, the new question on everyone’s lips is one of security.   How do we keep that perfectly curated company data safe when prying eyes hidden in a world of VPNs, bulletproof hosting and dark forums are watching?   In this world, encryption is often touted as a saviour.  People have been given hope by a technique shrouded in a complex veil of military nomenclature and supported by brain melting numbers, with billions of possible variations.

I’m not here to criticise encryption.  It brings a level of complexity that is good in many respects as it makes things harder for threat actors. Encrypted data is more secure than unencrypted data, as long as keys are stored separately and updated on a regular basis. Fact. Google agrees, and that is often a good sign. Low frequency access to data at rest will be well served by encryption because access is not required often, and it is hard to do.

This complexity also exposes one of the weaknesses of the approach, however. Encryption is a reflection of the fact that it is expecting to be stolen, a defensive posture. However, one of the main points of having data in the cloud is because it is supposed to be easy to access.  Wherever, whenever, right?

As more and more daily business is done in the cloud we need to enable this, not make it harder. Also, there is the great unmentionable that the vast majority of data breaches come from within the organisation, and it’s not a great stretch to assume that this could happen by grabbing encryption keys, using social engineering.  

For this reason, monitoring and access control needs to be a big part of keeping cloud data safe. Organisations need to know who has accessed what, where from and what they are doing with it.  Actually, the most important thing to know is, are they allowed to do what they are trying to with your cloud data? We need to know more than plain ‘access attempts’; we need to learn about every single person in any given organisation, what their role is and if they are acting within it. 

Encryption is a wall.  It is a very high wall with barbed wire around your data and a very good way of stopping people accessing things.  However, data sitting inert is just a bunch of information stored on a disc.  Data needs to be free, in motion and used by humans, if it is to be given value.  For this reason, we need to enable organisations in an intelligent manner.  Give people the tools to make the most of their data, rather than just locking it in a bunker. 

(c)iStock.com/4774344sean

With the global hybrid cloud market poised to reach $91 billion (£69bn) by 2021, as recent findings by analyst organisation Markets and Standards show, it is critical that companies assess whether their cloud strategy meets their evolving storage and recovery needs.

Businesses should resist the temptation for a “rough-and-ready” cloud deployment and instead have a genuine business conversation about cloud adoption. They should consider the comprehensive needs and growth trajectory of the business and the deep and lasting effects that cloud adoption can have when wedded to backup and recovery processes.

Maintaining an in-house data backup and recovery strategy can be costly, slow and admin-heavy. It may also be a burden to the IT department, preventing teams from addressing real business challenges. A recent ESG survey shows that there is significant demand for outsourced data backup and recovery solutions, with one in two companies happy to completely remove their in-house strategy if they could afford to do so.

What could prevent companies from deploying a suitable cloud solution?

However, there is currently too much “noise” in the public domain when it comes to cloud adoption. Three of sets of pressures, specifically, are mounting on business owners. Firstly, there is a swath and flux of information and misinformation about the public cloud which makes it difficult for business owners to have a settled view of what is available to them. Secondly, the barriers to access and costs of setting up on the cloud are low, which may lead businesses to adopt a solution that is ill-equipped to deal with their needs. Finally, with businesses rapidly digitising their approach, data is growing at an exponential rate and there is a growing need for it to be stored and analysed.

How should companies frame their cloud deployment decision?

Mindful of these pressures, companies should ensure that they take a step back and explore solutions that are tailored to their storage and recovery needs. To this end, they should first decide whether they wish to archive data or opt for greater storage capacity. They should prepare for potential bottlenecks by, for example, assessing the impact that low latency periods might have on their backup and recovery capability. This “proactive” mind-set will stand companies in good stead and will help them prove return on investment as they roll out new deployments.

Having laid down these working assumptions and plans, businesses should perform a stringent cost/benefit analysis when it comes to choosing a provider. They should press providers to supply them with a complete and clear account of the benefits of each solution.

What should they assess before adopting a specific cloud solution?

From a storage, backup and recovery standpoint, taking a long-term view is necessary. Ahead of adopting a specific solution, businesses should assess the following:

• Company growth rate: Business needs and goals are constantly evolving. For this reason management teams should not rely upon the thinking and budget constraints of today and should rather take a long-term view, accounting for the growth of business’ data 5 to 10 years ahead. A terabyte decision today becomes a petabyte decision in 5 years, putting significant strain on an inadequate backup and recovery solution.
• Data usage: Organisations should also be methodical in the way they sort and classify their data. Companies and individuals often harbor an almost “emotional” connection to their data. Consequently, it can be over protected and storage can easily be “maxed out” through lack of control. Addressing this, organisations should categorise data and determine what needs to be backed up, how long it should be stored and how fast it should be restored. 
• Cloud consolidation: Businesses should also take into account that the cloud market may undergo a consolidation whereby giants such as Microsoft and Amazon eclipse smaller providers, a trend which is gathering pace according to a recent Forrester report. Cloud storage migration is in its infancy, and challenges could arise if companies wish to withdraw their data from a provider. The cost of changing providers could also be prohibitive, especially for businesses under budget constraints.
• Regulation/legislation: Businesses should be privy to regulatory changes with regard to data, as these can have a significant impact on their storage strategy; The General Data Protection Regulation (GDPR) may lead to sticking points when companies wish to move data across borders.
• Environment: Storing large amounts of data on-premise can generate a significant energy bill. Adopting a cloud solution can go a long way to alleviating that carbon footprint and associated cost.

Is there a way for companies to test the water with cloud adoption?

Whilst the benefits of flexibility and innovation that cloud affords are widely documented, businesses should take a cautious, incremental approach to cloud adoption rather than one relying upon quick fixes and the most cost efficient options.

Given that businesses cannot outsource 100% in the interim, they should experiment with a hybrid cloud solution and build a data protection strategy that is aligned to their users and endpoints. In this way they can test the water by moving terabytes off site at a time and measuring how the business responds. This measured approach will be most effective in ensuring companies reap the flexibility and IT innovation benefits of cloud adoption in the long-term. 

(c)iStock.com/BrianAJackson

It’s a well-worn theme, yet raises its head again; new research from Claranet and Vanson Bourne argues that European businesses are suffering from a lack of understanding between the IT department and the rest of the organisation.

Just over a quarter (26%) of the 900 IT leaders polled – based in Benelux, France, Germany, Portugal, Spain, and the UK – said they believe the wider business has total understanding of the role of the IT department. A similar number (28%) of IT departments think they meet all the needs of the wider business.

The research findings are the latest in a series issued by the managed hosting service provider. In April, the company revealed that almost half of IT leaders see their primary job as one of cost reduction. This time around, while the figures are up from 2015’s analysis (21% and 26% respectively), Claranet argues more needs to be done to change a familiar disposition.

“IT leaders have a key role to play in building understanding between their department and the wider business,” said Andy Wilton, Claranet CIO. “Those IT leaders who aren’t prioritising developing an understanding between IT and the business are harming their own career prospects and the prospects of their business.

“In order to better support the business, the IT team must focus more energy on the applications and data that are key to business success, and less on day to day technical management and infrastructure maintenance,” added Wilton. “These activities are a large part of the reason that the IT department is stuck in a reactive mode and prevent it from driving the wider business agenda.”

This may be easier said than done. Writing for this publication earlier this month Keith Tilley, EVP global sales and customer services management at Sungard Availability Services, put forward four key tenets to improve workflows for IT departments and drive change: seeking out the right skills; communicating clearly; securing adequate resources; and turning occasionally to colleagues outside of the IT department.

Kubernetes, Docker and containers are changing the world, and how companies are deploying their software and running their infrastructure. With the shift in how applications are built and deployed, new challenges must be solved.
In his session at @DevOpsSummit at19th Cloud Expo, Sebastian Scheele, co-founder of Loodse, will discuss the implications of containerized applications/infrastructures and their impact on the enterprise. In a real world example based on Kubernetes, he will show how to migrate an existing application to Docker and Kubernetes, and what the benefits are.

read more

To leverage Continuous Delivery, enterprises must consider impacts that span functional silos, as well as applications that touch older, slower moving components. Managing the many dependencies can cause slowdowns. See how to achieve continuous delivery in the enterprise.

read more

Smart Cities are here to stay, but for their promise to be delivered, the data they produce must not be put in new siloes.
In his session at @ThingsExpo, Mathias Herberts, Co-founder and CTO of Cityzen Data, will deep dive into best practices that will ensure a successful smart city journey.

read more