Welcome!

SDN Journal Authors: Pat Romanski, Patrick Hubbard, Elizabeth White, Sven Olav Lund, Liz McMillan

Related Topics: @CloudExpo, Microservices Expo, Open Source Cloud, Containers Expo Blog, @BigDataExpo, SDN Journal, FinTech Journal

@CloudExpo: Article

Compliance and Security in Cloud Migration

An exclusive Q&A with Joel Daly, Chief Operating Officer of HOSTING

"Anyone moving to the cloud saves not only time but money," stated Joel Daly, Chief Operating Officer of HOSTING, in this exclusive Q&A with Cloud Expo Conference Chair Jeremy Geelan. "For SMBs, the primary cost issue is a lack of resources. They have no choice but to run legacy systems during the transformation to the cloud. This gets expensive, but once done, the cost savings are there."

Cloud Computing Journal: The move to cloud isn't about saving money, it is about saving time. Agree or disagree?

Joel Daly: Agree, but time is money. Virtualization allows for faster provisioning and faster recovery, therefore increasing time-to-market for solutions. In many cases, especially if you're a software provider, getting to market sooner means revenue sooner. In addition, via the cloud, you can reinvest that money and use it to increase your capabilities. A recent study by the University of Manchester showed that 60% of companies have more time to focus on strategy and innovation and 70% of large enterprises and 59% of SMEs surveyed have been able to reinvest more money back into their business.

Cloud Computing Journal: How should organizations tackle their regulatory and compliance concerns in the cloud? Who should they be asking/trusting for advice?

Daly: First and foremost, companies must have their own compliance department involved from the beginning as they consider entering the cloud. The biggest oversight we see is when an IT organization pushes to move applications and infrastructure to the cloud, and then after the planning phase, just as they're ready to migrate, they bring in the compliance team. At that point, they often have to start over.

There are many organizations out there - consultants, professional services, not to mention cloud service providers - who can bring a solid compliance and security focus to the cloud migration process. And, just to set your mind at ease, there are a plethora of analyst reports that talk about companies that are effectively incorporating cloud and meeting security and compliance requirements to their IT strategies. It can be done.

Cloud Computing Journal: What does the emergence of Open Source clouds mean for the cloud ecosystem? How does the existence of OpenStack, CloudStack, OpenNebula, Eucalyptus and so on affect your own company?

Daly: Open source tech is a great competitive element in the technology community - no matter what aspect of the technology business you're in. It only improves the market. Open source drives more choices for consumers, more competition, lower prices and increased technology innovation.

As an example, in the way that open source has brought benefits to the OS market - expanded options such as Linux, and even enabled those with proprietary technologies to improve their suites, so it goes with cloud. Movement to open source will fuel competition, drive innovation and lower prices.

Cloud Computing Journal: With SMBs, the two primary challenges they face moving to the cloud are always stated as being cost and trust: where is the industry on satisfying SMBs on both points simultaneously - further along than in 2011-12, or...?

Daly: First, on the issue of cost, anyone moving to the cloud saves not only time but money. For SMBs, the primary cost issue is a lack of resources. They have no choice but to run legacy systems during the transformation to the cloud. This gets expensive, but once done, the cost savings are there. The important part is to do a comprehensive ROI model that shows what your break-even point is, and stick to that model to begin to see cost benefits.

From a trust perspective, the security issues are mixed - some real and some imagined. However, the cloud community is well aware of these issues and is adapting cloud environments to help ease the SMB transition to the cloud. Additional security services are available in private cloud, for example, to help with trust issues. Some of these same security solutions are making it to public cloud, where the environment allows. Many CSPs, including HOSTING, provide a variety of environment and security services options in both private cloud and public cloud, and we see many of our clients using private cloud as a stepping stone to public, especially for risk-averse companies. Having said all that, there are simply some applications that cannot exist in public cloud due to regulatory requirements, for example.

Cloud Computing Journal: 2013 seems to be turning into a breakthrough year for Big Data. How much does the success of cloud computing have to do with that?

Daly: Big Data has been around for some time, although perhaps called other things - data warehousing, data analytics and business intelligence, among others. And everyone continues to hype up Big Data, but very few are actually using it effectively.

Our customer base in particular - mid-size enterprises - tend to be highly transactional in their businesses, so they are at beginning stages of Big Data. We have many customers - Rapleaf, Quantum Retail, Rich Relevance and Affinity - for example whose job it is to listen to social media and ensure that companies are armed to react appropriately. I see these as effectively driving the collection and analysis of massive amounts of data to good purpose. But again, I see Big Data as still being in the early phases of the hype cycle. Once there is a consummate company blazing the trail - someone who sets themselves apart as Salesforce.com did in SaaS - we can call it a breakthrough year.

Having said all that, cloud technologies such as software-based storage and advances in virtualization and compute power will certainly help move it along.

Cloud Computing Journal: What about the role of social media: aside from the acronym itself SMAC (for Social, Mobile, Analytics, Cloud) are you seeing and/or anticipating major traction in this area?

Daly: Social media has come a long way in the last five years. Our company did not budget for it five years ago. Then it crept into our marketing budgets first. And now we're starting to see practical applications in other parts of the business. This is in part due to the fact that social media has been bolstered by advances in analytics, mobile access and cloud technology. In fact, the growth of all these is certainly fueling the drive toward Big Data. Now, as applications grow for social media outside marketing - for example our data centers send updates on Twitter to customers regarding status or issues - all of these technologies will grow.

Cloud Computing Journal: To finish, just as real estate is always said to be about "location, location, location," what one word, repeated three times, would you say Cloud Computing is all about? (Example: Scalability, Scalability, Scalability)

Daly: Availability, Availability, Availability. At the end of the day, if the solution isn't up and running, it can't help customers.

More Stories By Pat Romanski

News Desk compiles and publishes breaking news stories, press releases and latest news articles as they happen.

Comments (1)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@CloudExpo Stories
When it comes to cloud computing, the ability to turn massive amounts of compute cores on and off on demand sounds attractive to IT staff, who need to manage peaks and valleys in user activity. With cloud bursting, the majority of the data can stay on premises while tapping into compute from public cloud providers, reducing risk and minimizing need to move large files. In his session at 18th Cloud Expo, Scott Jeschonek, Director of Product Management at Avere Systems, discussed the IT and busine...
As businesses evolve, they need technology that is simple to help them succeed today and flexible enough to help them build for tomorrow. Chrome is fit for the workplace of the future — providing a secure, consistent user experience across a range of devices that can be used anywhere. In her session at 21st Cloud Expo, Vidya Nagarajan, a Senior Product Manager at Google, will take a look at various options as to how ChromeOS can be leveraged to interact with people on the devices, and formats th...
First generation hyperconverged solutions have taken the data center by storm, rapidly proliferating in pockets everywhere to provide further consolidation of floor space and workloads. These first generation solutions are not without challenges, however. In his session at 21st Cloud Expo, Wes Talbert, a Principal Architect and results-driven enterprise sales leader at NetApp, will discuss how the HCI solution of tomorrow will integrate with the public cloud to deliver a quality hybrid cloud e...
SYS-CON Events announced today that Yuasa System will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Yuasa System is introducing a multi-purpose endurance testing system for flexible displays, OLED devices, flexible substrates, flat cables, and films in smartphones, wearables, automobiles, and healthcare.
Is advanced scheduling in Kubernetes achievable? Yes, however, how do you properly accommodate every real-life scenario that a Kubernetes user might encounter? How do you leverage advanced scheduling techniques to shape and describe each scenario in easy-to-use rules and configurations? In his session at @DevOpsSummit at 21st Cloud Expo, Oleg Chunikhin, CTO at Kublr, will answer these questions and demonstrate techniques for implementing advanced scheduling. For example, using spot instances ...
Companies are harnessing data in ways we once associated with science fiction. Analysts have access to a plethora of visualization and reporting tools, but considering the vast amount of data businesses collect and limitations of CPUs, end users are forced to design their structures and systems with limitations. Until now. As the cloud toolkit to analyze data has evolved, GPUs have stepped in to massively parallel SQL, visualization and machine learning.
The session is centered around the tracing of systems on cloud using technologies like ebpf. The goal is to talk about what this technology is all about and what purpose it serves. In his session at 21st Cloud Expo, Shashank Jain, Development Architect at SAP, will touch upon concepts of observability in the cloud and also some of the challenges we have. Generally most cloud-based monitoring tools capture details at a very granular level. To troubleshoot problems this might not be good enough.
DevOps is under attack because developers don’t want to mess with infrastructure. They will happily own their code into production, but want to use platforms instead of raw automation. That’s changing the landscape that we understand as DevOps with both architecture concepts (CloudNative) and process redefinition (SRE). Rob Hirschfeld’s recent work in Kubernetes operations has led to the conclusion that containers and related platforms have changed the way we should be thinking about DevOps and...
SYS-CON Events announced today that Taica will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Taica manufacturers Alpha-GEL brand silicone components and materials, which maintain outstanding performance over a wide temperature range -40C to +200C. For more information, visit http://www.taica.co.jp/english/.
When it comes to cloud computing, the ability to turn massive amounts of compute cores on and off on demand sounds attractive to IT staff, who need to manage peaks and valleys in user activity. With cloud bursting, the majority of the data can stay on premises while tapping into compute from public cloud providers, reducing risk and minimizing need to move large files. In his session at 18th Cloud Expo, Scott Jeschonek, Director of Product Management at Avere Systems, discussed the IT and busine...
We all know that end users experience the Internet primarily with mobile devices. From an app development perspective, we know that successfully responding to the needs of mobile customers depends on rapid DevOps – failing fast, in short, until the right solution evolves in your customers' relationship to your business. Whether you’re decomposing an SOA monolith, or developing a new application cloud natively, it’s not a question of using microservices – not doing so will be a path to eventual b...
Enterprises have taken advantage of IoT to achieve important revenue and cost advantages. What is less apparent is how incumbent enterprises operating at scale have, following success with IoT, built analytic, operations management and software development capabilities – ranging from autonomous vehicles to manageable robotics installations. They have embraced these capabilities as if they were Silicon Valley startups. As a result, many firms employ new business models that place enormous impor...
SYS-CON Events announced today that SourceForge has been named “Media Sponsor” of SYS-CON's 21st International Cloud Expo, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. SourceForge is the largest, most trusted destination for Open Source Software development, collaboration, discovery and download on the web serving over 32 million viewers, 150 million downloads and over 460,000 active development projects each and every month.
The next XaaS is CICDaaS. Why? Because CICD saves developers a huge amount of time. CD is an especially great option for projects that require multiple and frequent contributions to be integrated. But… securing CICD best practices is an emerging, essential, yet little understood practice for DevOps teams and their Cloud Service Providers. The only way to get CICD to work in a highly secure environment takes collaboration, patience and persistence. Building CICD in the cloud requires rigorous ar...
SYS-CON Events announced today that Dasher Technologies will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 - Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Dasher Technologies, Inc. ® is a premier IT solution provider that delivers expert technical resources along with trusted account executives to architect and deliver complete IT solutions and services to help our clients execute their goals, plans and objectives. Since 1999, we'v...
As popularity of the smart home is growing and continues to go mainstream, technological factors play a greater role. The IoT protocol houses the interoperability battery consumption, security, and configuration of a smart home device, and it can be difficult for companies to choose the right kind for their product. For both DIY and professionally installed smart homes, developers need to consider each of these elements for their product to be successful in the market and current smart homes.
In the fast-paced advances and popularity in cloud technology, one of the most critical factors revolves around concerns for security of your critical data. How to assure both your company and your customers they can confidently trust and utilize your cloud environment is most often top on the list. There is a method to evaluating and providing security that exceeds conventional modes of protecting data both within the cloud as well externally on mobile and other devices. With the public failure...
SYS-CON Events announced today that MIRAI Inc. will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. MIRAI Inc. are IT consultants from the public sector whose mission is to solve social issues by technology and innovation and to create a meaningful future for people.
Transforming cloud-based data into a reportable format can be a very expensive, time-intensive and complex operation. As a SaaS platform with more than 30 million global users, Cornerstone OnDemand’s challenge was to create a scalable solution that would improve the time it took customers to access their user data. Our Real-Time Data Warehouse (RTDW) process vastly reduced data time-to-availability from 24 hours to just 10 minutes. In his session at 21st Cloud Expo, Mark Goldin, Chief Technolo...
SYS-CON Events announced today that Massive Networks, that helps your business operate seamlessly with fast, reliable, and secure internet and network solutions, has been named "Exhibitor" of SYS-CON's 21st International Cloud Expo ®, which will take place on Oct 31 - Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. As a premier telecommunications provider, Massive Networks is headquartered out of Louisville, Colorado. With years of experience under their belt, their team of...