Welcome!

@CloudExpo Authors: Elizabeth White, Liz McMillan, Cameron Van Orman, Jason Bloomberg, Pat Romanski

Related Topics: @CloudExpo, Java IoT, Cloud Security

@CloudExpo: Blog Feed Post

How to Embrace Cloud Billing Safely By @AriaSystemsInc | @CloudExpo [#Cloud]

How can you capitalize on the cloud’s tantalizing advantages while minimizing risk?

The benefits of cloud billing can be irresistible. Always-on availability, flexibility, elastic scalability, low cost, global reach. But with high-profile security breaches from the likes of Target, Sony and health insurer Anthem, it's understandable that thinking about turning your billing system over to the cloud could give you the willies. How can you capitalize on the cloud's tantalizing advantages while minimizing risk? Here are three things to look for in a cloud billing system you can trust.

holding_cloud

  1. Security and privacy certifications. The first thing to assess in a cloud billing system is the extent to which it complies with industry standards for protecting credit card data and customer privacy. Depending on your security needs, you may want your vendor to be certified in some or all of the following:
  • PCI-DSS: The comprehensive Payment Card Industry Data Security Standard provides detailed guidance on such aspects as vulnerability testing, data encryption, access control and security policies. A more rigorous version of the standard (v3.0) officially went into effect only last month, so go with a proactive cloud-billing vendor that's been following its prescriptions for far longer.
  • SSAE 16 (Statement on Standards for Attestation Engagements) Type II: This certification attests that data used in financial reports meets stringent security, auditing and operational requirements. To survive audits unscathed, consider SaaS billing providers whose data centers have this certification.
  • EU Safe Harbor: If you do business internationally, you'll want your cloud billing vendor to be certified in the European Union's Safe Harbor Principles, which safeguard customers' personal data.
  • HIPAA (Health Insurance Portability and Accountability Act of 1996): This certification is designed to protect patient privacy and security. It initially applied only to hospitals, doctors, dentists, pharmacies, HMOs and other health care providers. But since 2013, it's now required of any company who handles protected health information (PHI) at any point. Accountants, physical therapists, data storage firms - even software companies that process data from wearable medical devices. In short, HIPAA compliance is rippling out to an ever-widening arena of companies.When you select a cloud-billing vendor with HIPAA certification, such as Aria Systems, you can take full advantage of the diverse payment schemes sweeping health services while meeting your obligations under HIPAA.
  • Third-party certifications: Certifications from industry experts like TRUSTe, a global leader in Data Privacy Management (DPM), provide independent verification that the cloud billing solution you select meets exceptional standards for security, privacy and transparency.
  1. Security best practices. For many companies, the security provided by the best SaaS billing vendors is more than adequate for their needs. And in many cases, the security best practices these vendors follow can be more thorough and cost-efficient than the labor-intensive security measures on-premise systems require. For example, top cloud billing providers conduct ongoing vulnerability scanning and offer transparent upgrades and security patches for the latest the viruses and malware - activities that demand specialized expertise many enterprises may not have to spare, or even have at all.
  1. Deployment flexibility. Most cloud billing providers offer only public, multi-tenant cloud environments. While that may work well for lots of companies, certain industries, such as global finance, have tighter security restrictions. So select a vendor who can offer a complete range of deployment options to match your needs - multi-tenant, single-tenant, pubic or private cloud and even hybrid environments that give you the best of both worlds: the versatility of the cloud with the heightened security of on-premise systems.

Finally, remember to pull your own weight

All billing systems carry some level of risk, whether they're in the cloud or down the hall. A vendor who employs the most rigorous security measures available can help you profit from cloud billing with confidence and peace of mind. But you must still do your share. That means being smart in your use of passwords, choosing wisely about who gets administrative privileges and instilling a culture of security awareness throughout your organization.

Sean Kirk

The post How to Embrace Cloud Billing Safely appeared first on Recurring Revenue Blog | Aria Systems.

Read the original blog entry...

More Stories By Aria Blog

The Aria blog is the place for news, commentary and discussion on monetization, agile billing and IoT. We cover a variety of topics including forces of market disruption, the Monetization of IoT, billing best practices, trending news and what monetization will look like in the future. Our hope is that you’ll become better informed, be entertained and in turn share your thinking, ideas and comments.

@CloudExpo Stories
Today most companies are adopting or evaluating container technology - Docker in particular - to speed up application deployment, drive down cost, ease management and make application delivery more flexible overall. As with most new architectures, this dream takes significant work to become a reality. Even when you do get your application componentized enough and packaged properly, there are still challenges for DevOps teams to making the shift to continuous delivery and achieving that reducti...
Mobile device usage has increased exponentially during the past several years, as consumers rely on handhelds for everything from news and weather to banking and purchases. What can we expect in the next few years? The way in which we interact with our devices will fundamentally change, as businesses leverage Artificial Intelligence. We already see this taking shape as businesses leverage AI for cost savings and customer responsiveness. This trend will continue, as AI is used for more sophistica...
Many companies start their journey to the cloud in the DevOps environment, where software engineers want self-service access to the custom tools and frameworks they need. Machine learning technology can help IT departments keep up with these demands. In his session at 21st Cloud Expo, Ajay Gulati, Co-Founder, CTO and Board Member at ZeroStack, will discuss the use of machine learning for automating provisioning of DevOps resources, taking the burden off IT teams.
SYS-CON Events announced today that Cedexis will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Cedexis is the leader in data-driven enterprise global traffic management. Whether optimizing traffic through datacenters, clouds, CDNs, or any combination, Cedexis solutions drive quality and cost-effectiveness.
SYS-CON Events announced today that Enroute Lab will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Enroute Lab is an industrial design, research and development company of unmanned robotic vehicle system. For more information, please visit http://elab.co.jp/.
SYS-CON Events announced today that Mobile Create USA will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Mobile Create USA Inc. is an MVNO-based business model that uses portable communication devices and cellular-based infrastructure in the development, sales, operation and mobile communications systems incorporating GPS capabi...
SYS-CON Events announced today that Suzuki Inc. will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Suzuki Inc. is a semiconductor-related business, including sales of consuming parts, parts repair, and maintenance for semiconductor manufacturing machines, etc. It is also a health care business providing experimental research for...
IBM helps FinTechs and financial services companies build and monetize cognitive-enabled financial services apps quickly and at scale. Hosted on IBM Bluemix, IBM’s platform builds in customer insights, regulatory compliance analytics and security to help reduce development time and testing. In his session at 21st Cloud Expo, Lennart Frantzell, a Developer Advocate with IBM, will discuss how these tools simplify the time-consuming tasks of selection, mapping and data integration, allowing devel...
Cloud-based disaster recovery is critical to any production environment and is a high priority for many enterprise organizations today. Nearly 40% of organizations have had to execute their BCDR plan due to a service disruption in the past two years. Zerto on IBM Cloud offer VMware and Microsoft customers simple, automated recovery of on-premise VMware and Microsoft workloads to IBM Cloud data centers.
Why Federal cloud? What is in Federal Clouds and integrations? This session will identify the process and the FedRAMP initiative. But is it sufficient? What is the remedy for keeping abreast of cutting-edge technology? In his session at 21st Cloud Expo, Rasananda Behera will examine the proposed solutions: Private or public or hybrid cloud Responsible governing bodies How can we accomplish?
SYS-CON Events announced today that Massive Networks, that helps your business operate seamlessly with fast, reliable, and secure internet and network solutions, has been named "Exhibitor" of SYS-CON's 21st International Cloud Expo ®, which will take place on Oct 31 - Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. As a premier telecommunications provider, Massive Networks is headquartered out of Louisville, Colorado. With years of experience under their belt, their team of...
SYS-CON Events announced today that Nihon Micron will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Nihon Micron Co., Ltd. strives for technological innovation to establish high-density, high-precision processing technology for providing printed circuit board and metal mount RFID tags used for communication devices. For more inf...
SYS-CON Events announced today that mruby Forum will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. mruby is the lightweight implementation of the Ruby language. We introduce mruby and the mruby IoT framework that enhances development productivity. For more information, visit http://forum.mruby.org/.
In his session at @ThingsExpo, Greg Gorman is the Director, IoT Developer Ecosystem, Watson IoT, will provide a short tutorial on Node-RED, a Node.js-based programming tool for wiring together hardware devices, APIs and online services in new and interesting ways. It provides a browser-based editor that makes it easy to wire together flows using a wide range of nodes in the palette that can be deployed to its runtime in a single-click. There is a large library of contributed nodes that help so...
SYS-CON Events announced today that Ryobi Systems will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Ryobi Systems Co., Ltd., as an information service company, specialized in business support for local governments and medical industry. We are challenging to achive the precision farming with AI. For more information, visit http:...
SYS-CON Events announced today that SIGMA Corporation will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. uLaser flow inspection device from the Japanese top share to Global Standard! Then, make the best use of data to flip to next page. For more information, visit http://www.sigma-k.co.jp/en/.
SYS-CON Events announced today that Daiya Industry will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Daiya Industry specializes in orthotic support systems and assistive devices with pneumatic artificial muscles in order to contribute to an extended healthy life expectancy. For more information, please visit https://www.daiyak...
Today traditional IT approaches leverage well-architected compute/networking domains to control what applications can access what data, and how. DevOps includes rapid application development/deployment leveraging concepts like containerization, third-party sourced applications and databases. Such applications need access to production data for its test and iteration cycles. Data Security? That sounds like a roadblock to DevOps vs. protecting the crown jewels to those in IT.
SYS-CON Events announced today that B2Cloud will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. B2Cloud specializes in IoT devices for preventive and predictive maintenance in any kind of equipment retrieving data like Energy consumption, working time, temperature, humidity, pressure, etc.
Automation is enabling enterprises to design, deploy, and manage more complex, hybrid cloud environments. Yet the people who manage these environments must be trained in and understanding these environments better than ever before. A new era of analytics and cognitive computing is adding intelligence, but also more complexity, to these cloud environments. How smart is your cloud? How smart should it be? In this power panel at 20th Cloud Expo, moderated by Conference Chair Roger Strukhoff, paneli...