Skip Links

OUTLOOK 2013 - ILLUSTRATION: Skip Sterling

Growing confidence in cloud security

Companies, schools, government chart course into cloud security

By , Network World
January 02, 2013 06:03 AM ET

Network World - Cloud computing is blowing into 2013 on the winds of confidence, with IT professionals increasingly convinced that the security controls are adequate, but still very, very leery.

Take Len Peters, CIO at Yale University, who has undertaken a cost-benefit analysis of cloud-based services in comparison to on-premises software purchases, finding that not only are unit costs less for the kind of software-as-a-service (SaaS) he's most interested in, but that SaaS can also further the compliance and security goals the IT department has long espoused.

A LOOK AHEAD: Read through Network World's entire Outlook 2013 package

2013, year of the hybrid cloud

 
Bullet 2013 IT outlook: Innovation trumps cost-cutting
Bullet Best IT resolutions of 2013
Bullet Windows Server 2012 cannot be ignored
Bullet Outlook 2013: Gigabit Wi-Fi
Bullet The cloud will make BYOD a non-issue - eventually
Bullet Cisco products, more maturity for SDNs in 2013
Bullet OpenStack cloud backers hope 2013 is the year of user adoption
Bullet Outlook 2013 ... Even more interesting than 2012!

Last spring, Yale elected to migrate from an on-premises IT management application to the cloud-based ServiceNow. The economic analysis indicated a positive cost advantage within 13 months. But security and compliance considerations were and always are going to be critical factors in cloud-computing decisions, Peters says. Like many IT pros, he found himself asking the questions, "Is the cloud safe? What are the potential risks?"

The answer, he says, is yes, there are risks, but not necessarily any more than in your own environment if the proper security and contractual arrangements can be put in place with the cloud provider. What's more, use of cloud services can help speed the adoption of best practices that would further safeguard the university.

Yale is using ServiceNow to further its support of IT service management practices that are codified in the Information Technology Infrastructure Library. ITIL spells out IT baselines that organizations can use in planning and implementation of IT services, and also to measure themselves against.

"With ServiceNow, we can rapidly stand up ITIL processes," says Peters, noting these involve everything from incident-request to change management, which influences the daily workflow for IT support staff and have a baring on integrity of the university's entire IT environment. The ServiceNow cloud service also impacts Yale's Tivoli Endpoint Management software distribution used to manage computers Yale owns.

Yale is going to be looking at more cloud-computing options in the future for things such as human resources and ERP, Peters says. But not all cloud-based services are the same, either in how flexible they are in terms of contractual demands or security. For instance, Peters remains skeptical about cloud-based e-mail services, concerned about security and availability risks. But he notes that throughout higher education, the interest in cloud services runs high and everyone wants cloud providers to more quickly tackle risk-management issues.

Our Commenting Policies
Latest News
rssRss Feed
View more Latest News