Your cloud-based system may have been in use for seven years or more. It probably needs a tune-up. Let's see what kind of shape it's in and what you need to do to make it run like new. As I discussed in last week’s article, cloud computing systems and the data they contain are now valuable corporate assets. You can’t take them for granted, either: They need to be managed and cultivated like any other corporate asset.Although it’s difficult to provide an assessment tool for every kind of cloud platform or application, you can tailor the following framework to the specific cloud services in your organization. Each question below gives you points. Like in golf, low scores win—the higher your total, the more you need to develop a get-well plan.Cloud SecurityGive yourself 5 points for each “No” answer. SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe Do you back up all data weekly? Are system audit trails turned on? Do you back up all metadata and administrative logs monthly? Are password-strength policies in place? This includes forcing password change on a quarterly basis. Is a document retention/destruction policy in place, and is there some sort of enforcement? Do you have data entry guidelines, particularly for personal confidential information. Again, is there some form of enforcement? Do you have active user accounts in the system for people who no longer work for your organization? (Here, give yourself 5 points if you say “Yes.”)Analysis: Security in the Cloud Is All About Visibility and Control Cloud Data BogosityGive yourself 1 point for each percentage point below.What percent of your address data is blank, trash or does not use ISO-standard codes for state and country? What percent of your addresses have state and country values that are not ISO-standard codes? What percent of your records or documents seem to be duplicates? What percent of your nonarchived records or documents haven’t been updated in the last year? What percent of your records or files are owned by zombies, or people who are no longer system users? What percent of the fields in your records are empty or garbage more than 98 percent of the time? How many times a week does the system create an unhandled exception? If there is no code in your cloud system, how many times a week is a bogus record created by users or external data feeds?Commentary: How CRM Data Updates Lead to Data Corruption Alignment With Business ProcessesGive yourself 1 point for each “unit” that’s implied in the question.For the organizations that regularly use the system, how many times have they had reorganizations or major staff changes since the system was first installed? For the system overall, divide the number of years the system has been in place by the number of times its user guides/cheat sheets have had major revisions. For the average system user, divide the number of years the system has been in use by the number of times there have been significant training cycles. For the most important user organization, how many quarters has it been since it published a “rules of engagement” or other significant business process document? How many business processes, internal or external, do not have a clear SLA or process quality standard? How many methods do “something mysterious” that nobody really understands? How many times a week does an average user have to take a business process outside the system for an exception, approval, merger, reconciliation and so on?Stewardship and GovernanceGive yourself 1 point for each “unit” that’s implied in the question.How many people have cloud administration privileges? How many system administrators have not taken formal admin training or certification? Divide the total number of reports, views and dashboards by 100. Divide the total number of users by 100. Divide the total number of tables and directories by 100. How many of your stores exceed the allowed capacity or quota? How many system objects or directory trees have no descriptive documentation about them?Advice: Don’t Gamble Your Company’s Reputation on Data GovernanceCloud System IntegrationAgain, give yourself 1 point for each “unit” that’s implied in the question.How many third-party products and services are integrated with your cloud solution? How many third-party products and services are open source or unsupported by a vendor? How many third-party products haven’t been updated in more than 18 months? How many of these integrated systems share a user license in the cloud with a user or other integrated system? How many of the systems’ formulas or workflows do processing that spans system boundaries—for example, scoring that’s done partially in one cloud and partially in another? How many external systems are not fully internationalized for character set, currency and sorting? How many “integrations” are done by re-keying data or export/import cycling CSV or XLS files? How many unplanned outages or lost transactions did your cloud integrations experience in the last 12 months?Proper AutomationFinally, give yourself 1 point for each “unit” that’s implied in the question.How many months has it been since you ran all the internal test cases for your code? What percentage of your code is not covered by a test method? How many of your systems’ custom-coded methods no longer execute or have no relevant function? How many of your systems’ custom-coded methods are longer than 100 lines of code? How many of you systems’ methods or workflows can cause an orphan record or file? How many buttons on forms let the user fill out the form the wrong way or execute the business process without proper enforcement? How many rule-driven parts of the system produce incorrect results such as flakey routing, escalation or alerts?Analysis: Is Your Private Cloud Defensive or Responsive? Now, Give Your Cloud System a Tune-UpTotal the scores from each of these sections. If the overall total is less than 100, breathe a sigh of relief. If your score is above 1,000, panic now. If your score is in between, focus attention on the groups that have the highest point value.You’ll notice that these questions tend to drive the scores higher for systems that have been in production for longer periods. That’s because cloud systems, like gardens, require constant tending. The longer they’ve been in place, the more ways they can be overgrown and weed-infested.David Taber is the author of the new Prentice Hall book, “Salesforce.com Secrets of Success” and is the CEO of SalesLogistix, a certified Salesforce.com consultancy focused on business process improvement through use of CRM systems. SalesLogistix clients are in North America, Europe, Israel and India. Taber has more than 25 years of experience in high tech, including 10 years at the VP level or above.Follow everything from CIO.com on Twitter @CIOonline, Facebook, Google + and LinkedIn. Related content feature Mastercard preps for the post-quantum cybersecurity threat A cryptographically relevant quantum computer will put everyday online transactions at risk. Mastercard is preparing for such an eventuality — today. By Poornima Apte Sep 22, 2023 6 mins CIO 100 Quantum Computing Data and Information Security feature 9 famous analytics and AI disasters Insights from data and machine learning algorithms can be invaluable, but mistakes can cost you reputation, revenue, or even lives. These high-profile analytics and AI blunders illustrate what can go wrong. By Thor Olavsrud Sep 22, 2023 13 mins Technology Industry Generative AI Machine Learning feature Top 15 data management platforms available today Data management platforms (DMPs) help organizations collect and manage data from a wide array of sources — and are becoming increasingly important for customer-centric sales and marketing campaigns. By Peter Wayner Sep 22, 2023 10 mins Marketing Software Data Management opinion Four questions for a casino InfoSec director By Beth Kormanik Sep 21, 2023 3 mins Media and Entertainment Industry Events Security Podcasts Videos Resources Events SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe