Welcome!

@CloudExpo Authors: Martin Etmajer, Elizabeth White, Jason Bloomberg, Wayne Ariola, Dana Gardner

Related Topics: Cloud Security, Containers Expo Blog, Agile Computing, @CloudExpo, Government Cloud

Cloud Security: Interview

Exclusive Q&A with Rich Marcello - Unisys President, Systems & Technology

Security is a big concern as well as privacy of the data once it leaves a client's data centers

Unisys announced in September a four-part cloud computing strategy that will enable clients to move their enterprise application workloads securely to tailored cloud environments and give them confidence in maintaining the integrity of their critical information.

In this Exclusive Q&A with Cloud Computing Journal in the run-up to SYS-CON's 4th International Cloud Computing Conference & Expo (November 2-4, 2009) - Cloud Expo Conference Chair Jeremy Geelan speaks with Rich Marcello - Unisys President, Systems & Technology - about the Unisys Secure Cloud and sets the scene for the upcoming Unisys Cloud-in-a-box.

Cloud Computing Journal: Starting at 35,000 feet, what overall relationships does Unisys see between cloud computing and the increasingly real-time needs of today's enterprise?

Rich Marcello: I believe that  cloud computing will revolutionize the way enterprises obtain IT and business services because of a number of converging factors - 1) the economy has forced enterprises to rethink their traditional cost models and minimize their capital expenditures in favor of pay-as-you-go models, 2) the need for anywhere, anytime IT since data sets continue to grow exponentially, and 3) the  shift in the way IT works with,  for example,  virtualization and automation,  which enable cloud computing.

Cloud Computing Journal: So cloud computing isn't just a buzzword, it's actually a glimpse of the future of enterprise IT so far as you are concerned?

Rich Marcello: Absolutely.  When you think about "IT as a service", ease of delivery, access from anywhere at anytime, the ability to have a totally flexible IT infrastructure, and the cost benefits of a subscription or pay as you go model, you realize very quickly cloud computing, in any of its forms (internal, external, hybrid) is here to stay.

Cloud Computing Journal: I understand, though, there are some concerns with moving to the Cloud.

Marcello: That's right. Security is a big concern as well as privacy of the data once it leaves a client's data centers and the ability of a cloud provider to meet the client's compliance requirements.  Additionally, there's concern about whether or not a client's applications can be moved to the cloud without rewriting them.  Unisys addresses each of these concerns with Unisys Cloud Computing Strategy and solutions portfolio announced June 30, 2009.

Cloud Computing Journal: Tell me more about this new Strategy and what it means to your clients.

Marcello: We announced a four-part cloud computing strategy that will enable clients to move their enterprise application workloads securely to tailored cloud environments and give them confidence in maintaining the integrity of their critical information.  We're delivering on the first two parts this year beginning with our June 30 announcement and the availability of our Cloud Transformation Services, followed by our Unisys Secure Cloud Solution available on July 31.  Our "Cloud-in-a-box" solution planned for later this year is a comprehensive IT infrastructure package that will enable quick and cost-effective implementation of a private cloud.  We also plan to deliver hybrid cloud technologies early next year that will provide the best of managed and dedicated services by combining public and private cloud capabilities.
Our comprehensive Cloud Transformation Services include Advisory and Assessment services that can provide our clients with strategic guidance on how best to move to the cloud.

Cloud Computing Journal: How are you leveraging your breadth of Enterprise IT experience?

Marcello: We believe our strong heritage in Data Center Transformation and Outsourcing is foundational to cloud computing - you can't begin to offer a cloud computing solution unless you understand the data center and are true experts.  We've been helping clients transform their data centers and make the right IT sourcing decisions for a long time by leveraging our services, technology, and outsourcing capabilities so they can achieve maximum return from capital expenditures, reduce operating expenses, and increase business performance.  Our heritage of experience and innovation combined with our independent thinking, innovative infrastructure and sourcing capabilities deliver data center solutions that are secure, productive and reliable.  We see all of this as a key advantage over other cloud providers who are just entering this market.

Cloud Computing Journal: How big an issue is security for enterprises who wish to migrate toward this kind of an infrastructure wholly or in part?

Marcello: As I mentioned earlier, security is the biggest barrier to cloud adoption as cited by organizations and industry analysts, as well as our own clients in a recent survey we conducted.

When it comes to security in a cloud it's really about the workloads and how clients can confidently move them to the cloud.  A lot of vendors talk security in the cloud but we've tackled this issue head-on and believe we have an advantage.  Security is inherent in all Unisys operations and offerings and, like Data Center Transformation and Outsourcing, is one of Unisys four key areas of strength.

We address security by ensuring operational excellence.   Unisys Secure Cloud services teams operate ISO 20000-certified delivery processes that are ITIL V3-compliant.  All of this protection is delivered in independently audited and ISO 270001-certified delivery centers. We utilize security best practices - a layered multi-vendor approach to security with Intrusion Detection and Prevention Services (IDPS), firewall management, 24x7 security monitoring, advanced correlation and analytics, auditable logs, and so forth.

From a cloud perspective, our commitment is to provide a security framework that is as good as or better than any clients could establish for themselves.  We do all of this and more with the addition of our patent-pending Stealth technology that allows private communities of interest based on FIPS 140-2, 256-bit Advanced Encryption Standard (AES) encryption and cloaks the data with proprietary "bit splitting".   Unlike other approaches to security, Unisys Stealth is very simple to deploy and does not require rewriting applications.  We believe this is a key differentiator as Stealth technology allows different groups in a multi-tenant client environment to share the same IT infrastructure without fear of exposing one client's data to another, and there's no need for the client to rewrite the applications it chooses to move to the cloud.

Cloud Computing Journal: What kinds of applications need security that your cloud offers?

Marcello: Clients who have workloads that require application, database or user security will have exposure if they put such workloads onto an unsecured cloud service.  Consequently, today companies are primarily using unsecured cloud services for workloads that have few security needs, such as Application Development and Testing or basic Web services, along with some less secure email workloads.

With Unisys Secure Cloud, you can move conventional business applications that contain patient data, employee, financial, or customer information, or document management or disaster recovery applications to the cloud environment.  In addition to security, most of these applications tend to require quite a bit of IT infrastructure and staff time to manage even though they tend to run in spurts and are quite cyclical or the workloads can dramatically vary in size from one period to the next.  For example, they may only run at the end of day, end of week, month, or year.  Some good examples are: Budgeting and planning; or HR systems like employee self-service, or time reporting.  Retailers have massive swings in system demand from one season to the next and need flexible capacity.  IT also has workloads that are cyclical in nature, including back-up, disaster recovery, and quality assurance, each of which has very high security requirements.   And, most of the time they are not using all of the hardware dedicated to them. This is why the average enterprise server utilization is only 5-10%. Think of the savings in capital and IT operations if these applications could be moved to a cloud service where you only pay for what you use.

Lastly, large OLTP-based workloads, or ERP systems or web store fronts are the most critical applications for your business.  If you are a manufacturer, it could be your order, inventory and supply chain systems; for banks, it's core systems like deposits, transfers, etc;  for airlines it would be the reservation systems. When these go down, the business is all but dead. Therefore, these are the kinds of systems that make sense to continue to invest in traditional, in-house IT infrastructures. Because these kinds of workloads tend to run nearly all the time, it makes good economic sense to buy the infrastructures to support them.

Cloud Computing Journal: How would someone decide if cloud computing is right for their business and which workloads to move?

Marcello: It's really about understanding what makes the most business sense for the client and what they are trying to accomplish.  As part of the June 30th announcement, we have Unisys Cloud Transformation Services, available now, which allow clients to plan and migrate to the type of cloud environment that best meets their business goals.  These services help clients assess what application workloads can be moved to the cloud, how that can be done, and the technology, financial and security implications of their choices.

Cloud Computing Journal: How about virtualization and automation, where do they fit in the big picture?

Marcello: These are fundamental to cloud computing and for Unisys, our Real-Time Infrastructure technology powers our cloud.  Virtualization is an enabler that helps us supply only the needed amount of IT resources based on the workload demand of the business at any given time.  Automation adds elasticity to the environment, reduces the time needed for changes, and eliminates or at least simplifies the manual intervention in a potentially rapidly changing environment.

Cloud Computing Journal: And what kinds of governance and service management tools does the enterprise need?

Marcello: From a service management perspective, many vendors operate as siloed mechanisms.  Unisys, on the other hand, has built into our secure cloudware stack an integration layer that enables us to interface with our clients' service management framework as well.  The virtual data center, regardless of the location of the resources, is managed seamlessly.  Unisys makes it look like one holistic environment. A key point to keep in mind is how hard it is for any IT organization to develop world class governance and service management.  With Unisys Secure Cloud Solution and "Cloud in a Box" we have developed a broad set of ITIL best practices, which are fully automated, and which allow us and our clients to run a very efficient IT infrastructure. With this, a lot of automation occurs, and this can save money by minimizing manual tasks, reducing errors, and getting much higher utilization rates.

Cloud Computing Journal: What verticals among your customers are leading the adoption of the Cloud?

Marcello: We're getting a number of inquiries from a broad range of Unisys clients in telco's, financial institutions, transportation, and the public sector as well as partners who are interested in Unisys hosting their solutions within our Secure Cloud.

Cloud Computing Journal: What does Cloud Computing have to offer to mid-tier enterprises?

Marcello: Cloud computing is compelling for mid-tier enterprises since it minimizes the need for capital expenditures as well as lowers the need for on-going operational support.  They will be interested in our Secure Cloud Solution, especially secure Software as a Service (SaaS).

Additionally for those clients who want to build an internal cloud, the Unisys Cloud-in-a-box that we'll deliver later this year will be a cost-effective, simplified cloud deployment alternative.

More Stories By Jeremy Geelan

Jeremy Geelan is Chairman & CEO of the 21st Century Internet Group, Inc. and an Executive Academy Member of the International Academy of Digital Arts & Sciences. Formerly he was President & COO at Cloud Expo, Inc. and Conference Chair of the worldwide Cloud Expo series. He appears regularly at conferences and trade shows, speaking to technology audiences across six continents. You can follow him on twitter: @jg21.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@CloudExpo Stories
SYS-CON Events announced today that Avere Systems, a leading provider of enterprise storage for the hybrid cloud, will exhibit at SYS-CON's 18th International Cloud Expo®, which will take place on June 7-9, 2016, at the Javits Center in New York City, NY. Avere delivers a more modern architectural approach to storage that doesn’t require the overprovisioning of storage capacity to achieve performance, overspending on expensive storage media for inactive data or the overbuilding of data centers ...
SYS-CON Events announced today that Commvault, a global leader in enterprise data protection and information management, has been named “Bronze Sponsor” of SYS-CON's 18th International Cloud Expo, which will take place on June 7–9, 2016, at the Javits Center in New York City, NY, and the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. Commvault is a leading provider of data protection and information management...
SYS-CON Events announced today that VAI, a leading ERP software provider, will exhibit at SYS-CON's 18th International Cloud Expo®, which will take place on June 7-9, 2016, at the Javits Center in New York City, NY. VAI (Vormittag Associates, Inc.) is a leading independent mid-market ERP software developer renowned for its flexible solutions and ability to automate critical business functions for the distribution, manufacturing, specialty retail and service sectors. An IBM Premier Business Part...
In most cases, it is convenient to have some human interaction with a web (micro-)service, no matter how small it is. A traditional approach would be to create an HTTP interface, where user requests will be dispatched and HTML/CSS pages must be served. This approach is indeed very traditional for a web site, but not really convenient for a web service, which is not intended to be good looking, 24x7 up and running and UX-optimized. Instead, talking to a web service in a chat-bot mode would be muc...
It's easy to assume that your app will run on a fast and reliable network. The reality for your app's users, though, is often a slow, unreliable network with spotty coverage. What happens when the network doesn't work, or when the device is in airplane mode? You get unhappy, frustrated users. An offline-first app is an app that works, without error, when there is no network connection.
With an estimated 50 billion devices connected to the Internet by 2020, several industries will begin to expand their capabilities for retaining end point data at the edge to better utilize the range of data types and sheer volume of M2M data generated by the Internet of Things. In his session at @ThingsExpo, Don DeLoach, CEO and President of Infobright, will discuss the infrastructures businesses will need to implement to handle this explosion of data by providing specific use cases for filte...
More and more companies are looking to microservices as an architectural pattern for breaking apart applications into more manageable pieces so that agile teams can deliver new features quicker and more effectively. What this pattern has done more than anything to date is spark organizational transformations, setting the foundation for future application development. In practice, however, there are a number of considerations to make that go beyond simply “build, ship, and run,” which changes ho...
SYS-CON Events announced today that AppNeta, the leader in performance insight for business-critical web applications, will exhibit and present at SYS-CON's @DevOpsSummit at Cloud Expo New York, which will take place on June 7-9, 2016, at the Javits Center in New York City, NY. AppNeta is the only application performance monitoring (APM) company to provide solutions for all applications – applications you develop internally, business-critical SaaS applications you use and the networks that deli...
Fortunately, meaningful and tangible business cases for IoT are plentiful in a broad array of industries and vertical markets. These range from simple warranty cost reduction for capital intensive assets, to minimizing downtime for vital business tools, to creating feedback loops improving product design, to improving and enhancing enterprise customer experiences. All of these business cases, which will be briefly explored in this session, hinge on cost effectively extracting relevant data from ...
Cognitive Computing is becoming the foundation for a new generation of solutions that have the potential to transform business. Unlike traditional approaches to building solutions, a cognitive computing approach allows the data to help determine the way applications are designed. This contrasts with conventional software development that begins with defining logic based on the current way a business operates. In her session at 18th Cloud Expo, Judith S. Hurwitz, President and CEO of Hurwitz & ...
SYS-CON Events announced today that Pythian, a global IT services company specializing in helping companies adopt disruptive technologies to optimize revenue-generating systems, has been named “Bronze Sponsor” of SYS-CON's 18th Cloud Expo, which will take place on June 7-9, 2015 at the Javits Center in New York, New York. Founded in 1997, Pythian is a global IT services company that helps companies compete by adopting disruptive technologies such as cloud, Big Data, advanced analytics, and DevO...
Companies can harness IoT and predictive analytics to sustain business continuity; predict and manage site performance during emergencies; minimize expensive reactive maintenance; and forecast equipment and maintenance budgets and expenditures. Providing cost-effective, uninterrupted service is challenging, particularly for organizations with geographically dispersed operations.
As someone who has been dedicated to automation and Application Release Automation (ARA) technology for almost six years now, one of the most common questions I get asked regards Platform-as-a-Service (PaaS). Specifically, people want to know whether release automation is still needed when a PaaS is in place, and why. Isn't that what a PaaS provides? A solution to the deployment and runtime challenges of an application? Why would anyone using a PaaS then need an automation engine with workflow ...
Recognizing the need to identify and validate information security professionals’ competency in securing cloud services, the two leading membership organizations focused on cloud and information security, the Cloud Security Alliance (CSA) and (ISC)^2, joined together to develop an international cloud security credential that reflects the most current and comprehensive best practices for securing and optimizing cloud computing environments.
As enterprises work to take advantage of Big Data technologies, they frequently become distracted by product-level decisions. In most new Big Data builds this approach is completely counter-productive: it presupposes tools that may not be a fit for development teams, forces IT to take on the burden of evaluating and maintaining unfamiliar technology, and represents a major up-front expense. In his session at @BigDataExpo at @ThingsExpo, Andrew Warfield, CTO and Co-Founder of Coho Data, will dis...
SYS-CON Events announced today that iDevices®, the preeminent brand in the connected home industry, will exhibit at SYS-CON's 18th International Cloud Expo®, which will take place on June 7-9, 2016, at the Javits Center in New York City, NY. iDevices, the preeminent brand in the connected home industry, has a growing line of HomeKit-enabled products available at the largest retailers worldwide. Through the “Designed with iDevices” co-development program and its custom-built IoT Cloud Infrastruc...
Sensors and effectors of IoT are solving problems in new ways, but small businesses have been slow to join the quantified world. They’ll need information from IoT using applications as varied as the businesses themselves. In his session at @ThingsExpo, Roger Meike, Distinguished Engineer, Director of Technology Innovation at Intuit, showed how IoT manufacturers can use open standards, public APIs and custom apps to enable the Quantified Small Business. He used a Raspberry Pi to connect sensors...
Eighty percent of a data scientist’s time is spent gathering and cleaning up data, and 80% of all data is unstructured and almost never analyzed. Cognitive computing, in combination with Big Data, is changing the equation by creating data reservoirs and using natural language processing to enable analysis of unstructured data sources. This is impacting every aspect of the analytics profession from how data is mined (and by whom) to how it is delivered. This is not some futuristic vision: it's ha...
Advances in technology and ubiquitous connectivity have made the utilization of a dispersed workforce more common. Whether that remote team is located across the street or country, management styles/ approaches will have to be adjusted to accommodate this new dynamic. In his session at 17th Cloud Expo, Sagi Brody, Chief Technology Officer at Webair Internet Development Inc., focused on the challenges of managing remote teams, providing real-world examples that demonstrate what works and what do...
Let’s face it, embracing new storage technologies, capabilities and upgrading to new hardware often adds complexity and increases costs. In his session at 18th Cloud Expo, Seth Oxenhorn, Vice President of Business Development & Alliances at FalconStor, will discuss how a truly heterogeneous software-defined storage approach can add value to legacy platforms and heterogeneous environments. The result reduces complexity, significantly lowers cost, and provides IT organizations with improved effi...