Growing Confidence in Cloud Security
Cloud computing is blowing into 2013 on the winds of confidence, with IT professionals increasingly convinced that the security controls are adequate, but still very, very leery.
Wed, January 02, 2013
Network World — Cloud computing is blowing into 2013 on the winds of confidence, with IT professionals increasingly convinced that the security controls are adequate, but still very, very leery.
Slideshow: 10 Cloud Predictions for 2013
Take Len Peters, CIO at Yale University, who has undertaken a cost-benefit analysis of cloud-based services in comparison to on-premises software purchases, finding that not only are unit costs less for the kind of software-as-a-service (SaaS) he's most interested in, but that SaaS can also further the compliance and security goals the IT department has long espoused.
A LOOK AHEAD: Read through Network World's entire Outlook 2013 package
Last spring, Yale elected to migrate from an on-premises IT management application to the cloud-based ServiceNow. The economic analysis indicated a positive cost advantage within 13 months. But security and compliance considerations were and always are going to be critical factors in cloud-computing decisions, Peters says. Like many IT pros, he found himself asking the questions, "Is the cloud safe? What are the potential risks?"
The answer, he says, is yes, there are risks, but not necessarily any more than in your own environment if the proper security and contractual arrangements can be put in place with the cloud provider. What's more, use of cloud services can help speed the adoption of best practices that would further safeguard the university.
Yale is using ServiceNow to further its support of IT service management practices that are codified in the Information Technology Infrastructure Library. ITIL spells out IT baselines that organizations can use in planning and implementation of IT services, and also to measure themselves against.
"With ServiceNow, we can rapidly stand up ITIL processes," says Peters, noting these involve everything from incident-request to change management, which influences the daily workflow for IT support staff and have a baring on integrity of the university's entire IT environment. The ServiceNow cloud service also impacts Yale's Tivoli Endpoint Management software distribution used to manage computers Yale owns.
Yale is going to be looking at more cloud-computing options in the future for things such as human resources and ERP, Peters says. But not all cloud-based services are the same, either in how flexible they are in terms of contractual demands or security. For instance, Peters remains skeptical about cloud-based e-mail services, concerned about security and availability risks. But he notes that throughout higher education, the interest in cloud services runs high and everyone wants cloud providers to more quickly tackle risk-management issues.