@CloudExpo Authors: Liz McMillan, Zakia Bouachraoui, Yeshim Deniz, Pat Romanski, Elizabeth White

Related Topics: @CloudExpo, Java IoT, Cloud Security

@CloudExpo: Blog Feed Post

How to Embrace Cloud Billing Safely By @AriaSystemsInc | @CloudExpo [#Cloud]

How can you capitalize on the cloud’s tantalizing advantages while minimizing risk?

The benefits of cloud billing can be irresistible. Always-on availability, flexibility, elastic scalability, low cost, global reach. But with high-profile security breaches from the likes of Target, Sony and health insurer Anthem, it's understandable that thinking about turning your billing system over to the cloud could give you the willies. How can you capitalize on the cloud's tantalizing advantages while minimizing risk? Here are three things to look for in a cloud billing system you can trust.


  1. Security and privacy certifications. The first thing to assess in a cloud billing system is the extent to which it complies with industry standards for protecting credit card data and customer privacy. Depending on your security needs, you may want your vendor to be certified in some or all of the following:
  • PCI-DSS: The comprehensive Payment Card Industry Data Security Standard provides detailed guidance on such aspects as vulnerability testing, data encryption, access control and security policies. A more rigorous version of the standard (v3.0) officially went into effect only last month, so go with a proactive cloud-billing vendor that's been following its prescriptions for far longer.
  • SSAE 16 (Statement on Standards for Attestation Engagements) Type II: This certification attests that data used in financial reports meets stringent security, auditing and operational requirements. To survive audits unscathed, consider SaaS billing providers whose data centers have this certification.
  • EU Safe Harbor: If you do business internationally, you'll want your cloud billing vendor to be certified in the European Union's Safe Harbor Principles, which safeguard customers' personal data.
  • HIPAA (Health Insurance Portability and Accountability Act of 1996): This certification is designed to protect patient privacy and security. It initially applied only to hospitals, doctors, dentists, pharmacies, HMOs and other health care providers. But since 2013, it's now required of any company who handles protected health information (PHI) at any point. Accountants, physical therapists, data storage firms - even software companies that process data from wearable medical devices. In short, HIPAA compliance is rippling out to an ever-widening arena of companies.When you select a cloud-billing vendor with HIPAA certification, such as Aria Systems, you can take full advantage of the diverse payment schemes sweeping health services while meeting your obligations under HIPAA.
  • Third-party certifications: Certifications from industry experts like TRUSTe, a global leader in Data Privacy Management (DPM), provide independent verification that the cloud billing solution you select meets exceptional standards for security, privacy and transparency.
  1. Security best practices. For many companies, the security provided by the best SaaS billing vendors is more than adequate for their needs. And in many cases, the security best practices these vendors follow can be more thorough and cost-efficient than the labor-intensive security measures on-premise systems require. For example, top cloud billing providers conduct ongoing vulnerability scanning and offer transparent upgrades and security patches for the latest the viruses and malware - activities that demand specialized expertise many enterprises may not have to spare, or even have at all.
  1. Deployment flexibility. Most cloud billing providers offer only public, multi-tenant cloud environments. While that may work well for lots of companies, certain industries, such as global finance, have tighter security restrictions. So select a vendor who can offer a complete range of deployment options to match your needs - multi-tenant, single-tenant, pubic or private cloud and even hybrid environments that give you the best of both worlds: the versatility of the cloud with the heightened security of on-premise systems.

Finally, remember to pull your own weight

All billing systems carry some level of risk, whether they're in the cloud or down the hall. A vendor who employs the most rigorous security measures available can help you profit from cloud billing with confidence and peace of mind. But you must still do your share. That means being smart in your use of passwords, choosing wisely about who gets administrative privileges and instilling a culture of security awareness throughout your organization.

Sean Kirk

The post How to Embrace Cloud Billing Safely appeared first on Recurring Revenue Blog | Aria Systems.

Read the original blog entry...

More Stories By Aria Blog

The Aria blog is the place for news, commentary and discussion on monetization, agile billing and IoT. We cover a variety of topics including forces of market disruption, the Monetization of IoT, billing best practices, trending news and what monetization will look like in the future. Our hope is that you’ll become better informed, be entertained and in turn share your thinking, ideas and comments.

CloudEXPO Stories
With more than 30 Kubernetes solutions in the marketplace, it's tempting to think Kubernetes and the vendor ecosystem has solved the problem of operationalizing containers at scale or of automatically managing the elasticity of the underlying infrastructure that these solutions need to be truly scalable. Far from it. There are at least six major pain points that companies experience when they try to deploy and run Kubernetes in their complex environments. In this presentation, the speaker will detail these pain points and explain how cloud can address them.
The deluge of IoT sensor data collected from connected devices and the powerful AI required to make that data actionable are giving rise to a hybrid ecosystem in which cloud, on-prem and edge processes become interweaved. Attendees will learn how emerging composable infrastructure solutions deliver the adaptive architecture needed to manage this new data reality. Machine learning algorithms can better anticipate data storms and automate resources to support surges, including fully scalable GPU-centric compute for the most data-intensive applications. Hyperconverged systems already in place can be revitalized with vendor-agnostic, PCIe-deployed, disaggregated approach to composable, maximizing the value of previous investments.
When building large, cloud-based applications that operate at a high scale, it's important to maintain a high availability and resilience to failures. In order to do that, you must be tolerant of failures, even in light of failures in other areas of your application. "Fly two mistakes high" is an old adage in the radio control airplane hobby. It means, fly high enough so that if you make a mistake, you can continue flying with room to still make mistakes. In his session at 18th Cloud Expo, Lee Atchison, Principal Cloud Architect and Advocate at New Relic, discussed how this same philosophy can be applied to highly scaled applications, and can dramatically increase your resilience to failure.
Machine learning has taken residence at our cities' cores and now we can finally have "smart cities." Cities are a collection of buildings made to provide the structure and safety necessary for people to function, create and survive. Buildings are a pool of ever-changing performance data from large automated systems such as heating and cooling to the people that live and work within them. Through machine learning, buildings can optimize performance, reduce costs, and improve occupant comfort by sharing information within the building and with outside city infrastructure via real time shared cloud capabilities.
As Cybric's Chief Technology Officer, Mike D. Kail is responsible for the strategic vision and technical direction of the platform. Prior to founding Cybric, Mike was Yahoo's CIO and SVP of Infrastructure, where he led the IT and Data Center functions for the company. He has more than 24 years of IT Operations experience with a focus on highly-scalable architectures.