Cloud computing is a fairly new concept that, in the past, caused me to look at it with a cocked head and squinty eyes. In short, I have been skeptical. After all, the cloud lives everywhere. It lives in countries where there are strict privacy laws and in countries where privacy is far less restricted. To add to the suspicion, I think of the privacy issues with the NSA capturing data traversing ISP connections. Is it safe to transfer data to external entities who might not treasure your data like you would? What if someone or something taps the data in route to the cloud? What if the cloud vendor fails?
Recent experiences have led me to consider the benefits of cloud for the purpose of routine data backup. Backing up to the cloud can benefit an organization in many ways. First, if a DR (disaster recovery) plan is enacted, the process to download data to an alternate site is simplifed. It's important to note that data might not be worth anything if data relies on a server or service that was affected by the disaster. Second, there is a convenience factor when files or other data must be restored due to accidental deletion. Typically, when data needs to be recovered a courier must be contacted from the off-site storage location or someone must get in a car to drive to the off-site storage location to retrieve the media. Cloud backup speeds the process to restore data. Third, the cost of off-site media and equipment is reduced. Organizations might pay $100 for each backup tape and more for external drives. Tape drives can cause headaches when they do not work. They're expensive (a site could have many tapes to ensure proper rotation) The cost for backup media, software and maintenance are costly. Backing up to the cloud reduces the need for the equipment, software, maintenance and support time dealing with equipment that doesn't work.
The advantages make cloud computing look promising. While they look good and will benefit an organization, there are a few issues you should get answers to before signing the dotted line:
1. Identify the confidentiality of your organization's data that you plan to move to the cloud. Many organizations have confidential or proprietary data. It may not be prudent to store sensitive data in the cloud. Also, if the cloud provider does not host a private cloud, that data might be available to others using the same space. This might not be acceptable.
2. How does the vendor protect your data? The vendor likely has multiple customers (or they will). How will they ensure other customers do not have access to your data (and vice versa)? How does the vendor ensure their employees do not have access to your data? Is the data encrypted?
3. How will your organization connect to the cloud? Security considerations are very important! If the vendor proposes tha the data moves across an unencrypted line - run. Do you have adequate bandwidth to move data on a daily basis? Testing (from both sides) connectivity will ensure there there is no packet loss to guarantee data integrity.
4. What is the vendor's SLA (service level agreement) with your organization? When do they do maintenance? Will it be the same time that you want to move data to the cloud? How does the vendor deal with DoS attacks? How will you be notified of outages?
5. Where does the vendor store your data? Will you data be stored in a data farm in a country where privacy laws differ from the U.S.?
6. How does the vendor back up your organization's data? Equipment could fail in the vendor's organization just like it could in yours? If they have a failure, how quickly will it be resolved?
7. How much space do you need on the cloud? Is data overwritten? How much can your data swell before you saturate the vendor's network?
8. What is the vendor's agreement with regard to making data available after a disaster? If the vendor hosts data for multiple organizations who were affected by a disaster, what is your priority to get your data?
9. In the unfortunate event your organization decides to move your data to another provider, how can you be sure the vendor no longer has your data? What if the vendor's business fails? What happens to your data?
This list is not intended to be a complete list of issues that you should consider before moving your data to the cloud, but it's a start. Are there issues you think should be added to the list?
The cloud holds benefits that might provide advantages to your organization. I am not sure I'm 100% for it, but I think that when the decision meets organizational requirements and the vendor can satisfy the organization's requirements, it is worth a second look.
No comments:
Post a Comment