|By Ray DePena||
|February 17, 2010 08:00 PM EST||
In Part 1 of Innovation and Risk in the Clouds, I focused on the alignment between strategy, organizational culture, innovation, and cloud computing.
In part 2 we will discuss some of the risks and challenges cloud computing presents.
Do you remember the last time you took a risk? The first time? Do you remember the first time you saw your company take a meaningful risk?
In business there are some very memorable moments in risk taking. Which ones do you recall? One of my favorites is the Apple, Xerox, Microsoft, and IBM story told in the Pirates of Silicon Valley docudrama.
It’s a classic tale of a large enterprise not fully recognizing the value of technology, and a smaller organization being sufficiently bold and nimble to capitalize on that mistake.
As a former project manager, one of the activities I enjoyed most when managing projects was risk planning. It slowed us down and forced us to think through our activities, identify risks, analyze the risks, and plan appropriately. Some believe the speed of being a first mover, and its advantage, is enough, but it’s not simply the fastest car that wins the Indianapolis 500, the 24 Hours of Le Mans and the Monaco Grand Prix; it’s the team that best manages the risks inherent in participating at such events. The risk of a tire blowout is very real, and is a risk that needs to be properly managed.
Similarly, organizations need to be structured with the people, resources, processes, and strategic focus to adopt risk-taking endeavors in an acceptable and measured way.
The discipline of risk management focuses on addressing organizational risk inherent in its people, process, systems, and external environment. Some of those areas of risk include:
- Strategic (M&A),
- Regulatory Compliance,
- Financial (Cashflow) and Operational (IT systems, Supply Chain)
- Environmental, Political, Economic, Technological, and Competitive
Corporate transformation to a more creative culture leveraging the latest cloud computing model is not without risk. The consequences of the transition, chance of success, and impact on the business needs to be weighed, and planned for appropriately.
The good news is that cloud computing represents a positive risk shared with the cloud service provider, enhanced with key partnerships, and exploited for corporate benefit while leveraging service level agreements (SLAs) to mitigate risks. Risks, such as, hardware and software technological obsolescence, are transferred; although many considerations, including security, interoperability, lock-in, business process governance, and management remain, and need to be properly evaluated.
Security: I have heard it said that up to 70% of security threats are from unauthorized access by internal employees, so perhaps the focus on external attacks in a cloud computing environment should be re-evaluated.
Enterprise security, governance, risk management, and compliance has enabled many large government and financial service organizations to meet their audit requirements while reducing risk and improving operational efficiency. I have no reason to believe that cloud service providers (CSPs) meeting the same audit criteria will fare worse in this regard.
Lock-In: The risk of vendor lock-in given the lack of interoperability standards, while real, should be kept in context. Is the absence of lock-in worth an expensive choice of multiple hardware and software providers? Are you willing to pay a multiple to not be locked-in? Interoperability will eventually come to the cloud, while legacy service providers are moving to their own solution bundles given the acquisitions we have seen – Oracle/Sun, Dell/Perot, HP/EDS.
Business Process Governance: In this area, Salesforce.com announced the Force.com Visual Process Manager, and Makara announced its cloud application deployment and management platform, you can expect many developments here as organizations race to provide a variety of solutions in this area. I have written on this topic before, the original blog entry is found here.
Management: Ultimately, for some, managing Clouds will offer the appearance of control – dashboards, and real-time reporting mechanisms, all provided by Cloud Service Providers with the degree of detailed monitoring determining the costs incurred by the client.
For others, that will build and support their own enterprise cloud environments, the dynamic nature of cloud computing – with servers, networks, and storage dynamically showing up and disappearing from the environment, it will be a difficult and challenging model to manage; particularly if the organization does not adapt its legacy business management culture and approach, for the new environment.
Though by far, the greatest risk that I see is the failure to recognize the potential that lies within cloud computing to transform organizations.
In part 3 we will discuss the organizational challenges of innovation in the cloud.
-Tune The Future-
Leysin American School is an exclusive, private boarding school located in Leysin, Switzerland. Leysin selected an OpenStack-powered, private cloud as a service to manage multiple applications and provide development environments for students across the institution. Seeking to meet rigid data sovereignty and data integrity requirements while offering flexible, on-demand cloud resources to users, Leysin identified OpenStack as the clear choice to round out the school's cloud strategy. Additional...
Nov. 23, 2014 08:00 AM EST Reads: 1,268
The major cloud platforms defy a simple, side-by-side analysis. Each of the major IaaS public-cloud platforms offers their own unique strengths and functionality. Options for on-site private cloud are diverse as well, and must be designed and deployed while taking existing legacy architecture and infrastructure into account. Then the reality is that most enterprises are embarking on a hybrid cloud strategy and programs. In this Power Panel at 15th Cloud Expo (http://www.CloudComputingExpo.com...
Nov. 23, 2014 07:45 AM EST Reads: 1,362
We are all here because we are sold on the transformative promise of The Cloud. But what good is all of this ephemeral, on-demand infrastructure if your usage doesn't actually improve the agility and speed of your business? How must Operations adapt in order to avoid stifling your Cloud initiative? In his session at DevOps Summit, Damon Edwards, co-founder and managing partner of the DTO Solutions, will highlight the successful organizational, process, and tooling patterns of high-performing c...
Nov. 23, 2014 02:00 AM EST Reads: 1,052
The definition of IoT is not new, in fact it’s been around for over a decade. What has changed is the public's awareness that the technology we use on a daily basis has caught up on the vision of an always on, always connected world. If you look into the details of what comprises the IoT, you’ll see that it includes everything from cloud computing, Big Data analytics, “Things,” Web communication, applications, network, storage, etc. It is essentially including everything connected online from ha...
Nov. 22, 2014 10:00 PM EST Reads: 1,156
Software-driven innovation is becoming a primary approach to how businesses create and deliver new value to customers. A survey of 400 business and IT executives by the IBM Institute for Business Value showed businesses that are more effective at software delivery are also more profitable than their peers nearly 70 percent of the time (1). DevOps provides a way for businesses to remain competitive, applying lean and agile principles to software development to speed the delivery of software that ...
Nov. 22, 2014 08:00 PM EST Reads: 1,454
Docker offers a new, lightweight approach to application portability. Applications are shipped using a common container format and managed with a high-level API. Their processes run within isolated namespaces that abstract the operating environment independently of the distribution, versions, network setup, and other details of this environment. This "containerization" has often been nicknamed "the new virtualization." But containers are more than lightweight virtual machines. Beyond their small...
Nov. 22, 2014 06:45 PM EST Reads: 1,210
The move in recent years to cloud computing services and architectures has added significant pace to the application development and deployment environment. When enterprise IT can spin up large computing instances in just minutes, developers can also design and deploy in small time frames that were unimaginable a few years ago. The consequent move toward lean, agile, and fast development leads to the need for the development and operations sides to work very closely together. Thus, DevOps become...
Nov. 22, 2014 05:45 PM EST Reads: 1,332
Cloud Expo 2014 TV commercials will feature @ThingsExpo, which was launched in June, 2014 at New York City's Javits Center as the largest 'Internet of Things' event in the world.
Nov. 22, 2014 05:30 PM EST Reads: 1,332
An entirely new security model is needed for the Internet of Things, or is it? Can we save some old and tested controls for this new and different environment? In his session at @ThingsExpo, New York's at the Javits Center, Davi Ottenheimer, EMC Senior Director of Trust, reviewed hands-on lessons with IoT devices and reveal a new risk balance you might not expect. Davi Ottenheimer, EMC Senior Director of Trust, has more than nineteen years' experience managing global security operations and asse...
Nov. 22, 2014 05:30 PM EST Reads: 1,159
Explosive growth in connected devices. Enormous amounts of data for collection and analysis. Critical use of data for split-second decision making and actionable information. All three are factors in making the Internet of Things a reality. Yet, any one factor would have an IT organization pondering its infrastructure strategy. How should your organization enhance its IT framework to enable an Internet of Things implementation? In his session at Internet of @ThingsExpo, James Kirkland, Chief Ar...
Nov. 21, 2014 09:15 PM EST Reads: 1,285
Technology is enabling a new approach to collecting and using data. This approach, commonly referred to as the "Internet of Things" (IoT), enables businesses to use real-time data from all sorts of things including machines, devices and sensors to make better decisions, improve customer service, and lower the risk in the creation of new revenue opportunities. In his General Session at Internet of @ThingsExpo, Dave Wagstaff, Vice President and Chief Architect at BSQUARE Corporation, discuss the ...
Nov. 21, 2014 08:00 PM EST Reads: 1,355
The security devil is always in the details of the attack: the ones you've endured, the ones you prepare yourself to fend off, and the ones that, you fear, will catch you completely unaware and defenseless. The Internet of Things (IoT) is nothing if not an endless proliferation of details. It's the vision of a world in which continuous Internet connectivity and addressability is embedded into a growing range of human artifacts, into the natural world, and even into our smartphones, appliances, a...
Nov. 21, 2014 08:00 PM EST Reads: 1,305
"BSQUARE is in the business of selling software solutions for smart connected devices. It's obvious that IoT has moved from being a technology to being a fundamental part of business, and in the last 18 months people have said let's figure out how to do it and let's put some focus on it, " explained Dave Wagstaff, VP & Chief Architect, at BSQUARE Corporation, in this SYS-CON.tv interview at @ThingsExpo, held Nov 4-6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
Nov. 21, 2014 07:00 PM EST Reads: 1,231
The 4th International DevOps Summit, co-located with16th International Cloud Expo – being held June 9-11, 2015, at the Javits Center in New York City, NY – announces that its Call for Papers is now open. Born out of proven success in agile development, cloud computing, and process automation, DevOps is a macro trend you cannot afford to miss. From showcase success stories from early adopters and web-scale businesses, DevOps is expanding to organizations of all sizes, including the world's large...
Nov. 21, 2014 06:45 PM EST Reads: 1,192
Verizon Enterprise Solutions is simplifying the cloud-purchasing experience for its clients, with the launch of Verizon Cloud Marketplace, a key foundational component of the company's robust ecosystem of enterprise-class technologies. The online storefront will initially feature pre-built cloud-based services from AppDynamics, Hitachi Data Systems, Juniper Networks, PfSense and Tervela. Available globally to enterprises using Verizon Cloud, Verizon Cloud Marketplace provides a one-stop shop fo...
Nov. 21, 2014 05:30 PM EST Reads: 1,155
"Our premise is Docker is not enough. That's not a bad thing - we actually love Docker. At ActiveState all our products are based on open source technology and Docker is an up-and-coming piece of open source technology," explained Bart Copeland, President & CEO of ActiveState Software, in this SYS-CON.tv interview at DevOps Summit at Cloud Expo®, held Nov 4-6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
Nov. 20, 2014 10:30 PM EST Reads: 1,289
DevOps Summit 2015 New York, co-located with the 16th International Cloud Expo - to be held June 9-11, 2015, at the Javits Center in New York City, NY - announces that it is now accepting Keynote Proposals. The widespread success of cloud computing is driving the DevOps revolution in enterprise IT. Now as never before, development teams must communicate and collaborate in a dynamic, 24/7/365 environment. There is no time to wait for long development cycles that produce software that is obsolete...
Nov. 20, 2014 09:00 PM EST Reads: 1,478
Infor has announced a new feature Infor CloudSuite™ Aerospace & Defense (A&D) to aid compliance with International Traffic in Arms Regulations (ITAR). The ITAR function will serve as a complementary function for new or existing Infor CloudSuite A&D customers, to facilitate compliance for Infor customers that are creating a US defense article or performing a US defense service and wish to benefit from cloud-services. The ITAR regulation serves to manage handling and access requirements for dat...
Nov. 20, 2014 07:00 PM EST Reads: 1,294
What do a firewall and a fortress have in common? They are no longer strong enough to protect the valuables housed inside. Like the walls of an old fortress, the cracks in the firewall are allowing the bad guys to slip in - unannounced and unnoticed. By the time these thieves get in, the damage is already done and the network is already compromised. Intellectual property is easily slipped out the back door leaving no trace of forced entry. If we want to reign in on these cybercriminals, it's hig...
Nov. 20, 2014 07:00 PM EST Reads: 1,161