Skip Links

Small businesses fail to address data risks in server virtualization

IT Best Practices Alert By Brian Musthaler, Network World
August 26, 2011 01:43 PM ET
Sign up for this newsletter now!

The CIO-level business angle on the latest tech

According to a recent Symantec poll examining adoption of virtualization within small businesses and its impact on their organizations, most companies have a strong interest but are still learning how to best implement the technology.

The Small Business Virtualization Poll indicates that 70% of small businesses -- defined as companies with 5-249 employees -- are considering server virtualization. However, only 10% have actually completed their virtualization projects.

IN DEPTH: The dark side of server virtualization

As can be expected, financial benefits are a major driver for deciding to virtualize, with most companies hoping to reduce both capital and operating expenses. Other benefits cited include the ability to use fewer servers for the same number of applications, and server scalability.

Despite their interest, small businesses are finding it difficult to move from discussions to execution due to their IT staff having limited or no skills in virtualization. Nearly a third of the small businesses that don't have virtualization plans cited lack of experience as a factor. Of the respondents, only 10% have deployed virtualized servers and they are focusing their early-stage efforts on simpler, less critical application areas.

According to Kevin Rowney, director of marketing for virtualization, cloud and mobility at Symantec, many small businesses are wrestling with the virtualization decision. In particular, they are concerned about how virtualization will impact performance, backup and security, and patch management. Other areas of concern include system architecture and design issues, as well as workload capacity and planning issues.

In an effort to overcome the lack of in-house skills, more than half of the organizations are engaging third-party expertise to help them through their virtualization trials.

From a basic controls and risk management perspective, many of the small businesses that have implemented virtualization are putting their data at risk by not taking the most basic steps to secure and protect their virtual environments.

First, 85% of the companies don't have a regular and consistent backup process for their virtualized servers; 23% of the respondents conduct backups infrequently or not at all.

Second, 78% don't have antivirus software on their virtual servers; 48% don't have a firewall; and 74% forego endpoint protection. Budget and staffing issues are the reasons cited for preventing them from taking these essential actions. Rowney laments that small companies are often more focused on opportunity than on controlling risks to their business.

Of the 30% of respondents that are not considering virtualization for their organizations, the primary reasons cited are security concerns, reliability issues and cost.

For those small companies making the leap to a virtualized environment, Symantec has some simple recommendations to make sure they are properly protecting their data and systems:

• Engage a qualified IT consultant to develop a virtualization strategy. Proactively develop guidelines and assess your organization's data protection and security needs. Once a strategy is in place, stick to it.

Linda Musthaler is a principal analyst with Essential Solutions Corporation.

Our Commenting Policies
Latest News
rssRss Feed
View more Latest News