It took some time but the need for Total Security Management is slowly starting to sink in. With regard to quality it took the western manufacturing industry several decades before it realized that a separate quality department – standing at the end of the production line to check which products did not meet the mandated specs – was a costly and disastrous path to take. And slowly but surely we are seeing similar thinking with regard to cyber and cloud security emerge.

read more

The convergence of cloud, mobility, and Big Data analytics has prompted companies to innovate and produce new levels of award-winning productivity.
To learn how these trend-setters create innovation value, we’re joined by some finalists from the Citrix Synergy 2016 Innovation Awards Program: Olaf Romer, Head of Corporate IT and group CIO at Bâloise in Basel, Switzerland; Alan Crawford, CIO of Action for Children in London, and Craig Patterson, CEO of Patterson and Associates in San Antonio, Texas. The discussion is moderated by me, Dana Gardner, Principal Analyst at Interarbor Solutions.

read more

No matter how well-built your applications are, countless issues can cause performance problems, putting the platforms they are running on under scrutiny. If you’ve moved to Node.js to power your applications, you may be at risk of these issues calling your choice into question. How do you identify vulnerabilities and mitigate risk to take the focus off troubleshooting the technology and back where it belongs, on innovation?
There is no doubt that Node.js is one of today’s leading platforms of choice for microservices and gluing tiers, connecting the heavy lifting business logic with modern offerings like single page applications. Intuit and PayPal showed how the Node initiative of a small team of “company outlaws” can grow into a whole organization and transform how things are done.

read more

(c)iStock.com/Gajus

Microsoft has announced it has obtained ISO 27017 compliance, a new cloud-based security certification published at the end of last year.

The certification from the ISO, the global organisation which has published more than 21,000 international standards across a variety of industries, is newer and subsequently less known than the ISO 27018 standard, which sets out guidelines to protect personally identifiable information (PII).

Microsoft claimed to be the first adopter of ISO 27018, in February last year, and now, the ISO 27017, which gives additional controls that specifically relate to cloud services, is in Microsoft’s hands, according to an Azure company blog post.

“We are happy to announce Microsoft Azure obtained the ISO/IEC 27017:2015 certification, an international standard that aligns with and complements the ISO/IEC 27002:2013 with an emphasis on cloud-specific threats and risks,” wrote Alice Rison, Microsoft Azure senior director.

The certification is still nascent among cloud providers, yet Amazon Web Services (AWS) secured 27017 compliance as far back as November last year, claiming to be the first to get the green light. “Certifying that we follow yet another best practice won’t come as a surprise; we’ve already proven that information security is job #1 here at AWS,” Jeff Barr, AWS chief evangelist, trumpeted in a blog post at the time.

The need for compliance – and ensuring data stays where it should – by certification with a globally recognised authority needs to be key for both customers and cloud providers. Writing for this publication last month on ISO 27001, a standard launched in 2013 around information security management, Frank Krieger, director of compliance at iland, explained the important questions for organisations to ask; not least that certificates should not be taken at face value.

“Organisations should care a great deal about ISO compliance in the cloud and ensure their partners and providers care as well,” he wrote. “ISO compliance in the cloud doesn’t have to be a nightmare, but you do need to approach the process with the level of rigour that the standard demands.”

You can find out more about the ISO 27017 standard here.

Read more: ISO compliance in the cloud: Why should you care, and what do you need to know?

(c)iStock.com/espiegle

Equinix has announced the purchase of Digital Reality’s Paris operations, including its real estate and data centre facility, for approximately $211 million (£158m).

The two companies, who continue to fight for supremacy in the colocation rankings – findings from Synergy Research in May showed Equinix as number one in colocation, with Digital Realty second and NTT third – came to a deal which included 1,000 cabinets of sold capacity in Equinix’s PA2 and PA3 data centres, as well as a further 1,000 for customer growth. Equinix has seven data centre locations in Paris alone, three of which came with the company’s acquisition of Telecity in January this year.

Equinix argues its seven Paris locations are business hubs for more than 575 companies, while its interconnection platform gives access to more than 160 network service providers and 100 cloud service providers, including Google Cloud Platform and IBM SoftLayer.

“As one of the largest economies in Europe, France continues to be a strong destination for local French businesses, as well as multinationals,” said Steve Smith, Equinix president and CEO in a statement. “We believe that by fully owning the site of our PA2 and PA3 facilities and the surrounding land, we will be able to ensure additional capacity and the ability to interconnect more networks, clouds, people and data, as customers require in the future.”

Another research study, this time from 451 Research in April, argued 2015 was a landmark year for deals in the data centre, arguing that while Digital Realty owned the most real estate, Equinix secured the most annual revenues. “Colocation is quickly becoming the nexus of both cloud and enterprise IT,” said Katie Broderick, 451 research director at the time. “The colocation market is serving as ‘data centre arms dealer’ to both enterprises and the cloud.”

I’m often guilty of sticking my head in the sand, ignoring very small details that could turn into big problems later on. Like when Netflix told me my credit card was about to expire, but it seemed like such a boring task, so I ignored them…till the day Netflix stopped working. I grumbled at the TV for awhile, then wasted another half hour remembering my login details and finding the credit card update page.
Clearly, I should have followed the easy link in the first place. It was my oversight that led me to waste time and my good mood updating my info. I consider missing my favorite television an actual problem in life, but realistically, it’s a minor problem that only affected me (and the people I live with. I was pretty grumpy).

read more

Experts are debating whether the Democratic National Committee’s (DNC) email system was hacked by the Russian military intelligence service (G.R.U.) or Guccifer 2.0, a lone wolf Romanian hacker. While this is a very important question, the answer will not change the results: over 20,000 DNC emails ended up on WikiLeaks. How did this happen? How likely is it to happen to you or your company? What can you do to protect your email system from a similar fate?

read more

Conjecture, an opinion or conclusion formed on the basis of incomplete information.
All digital transformation initiatives introduce new problems, software bugs, guaranteed network vulnerabilities, new competitors; new business challenges and new stresses. The elimination of all negative consequences and vulnerabilities are impossible, so our focus should be on limiting and containing it, not eliminating it.

read more

The South Florida Business Journal honored Chetu Inc. with an inclusion on South Florida’s Top 100 Private Companies List. Chetu ranked at number 80 amongst other private businesses who showed tremendous revenues for 2015, are native to South Florida and have verifiable revenue figures. Chetu showed $31.51 million in revenues for 2015. That figure is a 10% increase from the $29.05 million in revenue earned in 2014.

read more