Cloud Computing Adoption in the Financial Services Industry

Size: px
Start display at page:

Download "Cloud Computing Adoption in the Financial Services Industry"

Transcription

1 Cloud Computing Adoption in the Financial Services Industry James Cotter Lawrence Brown 07 and 08 October 2015

2 Agenda Recap on what cloud services are Differences between cloud services and more traditional IT solutions and relative advantages and disadvantages Inhibitors to adoption What s changed? State of play regarding key issues and challenges Where does cloud go from here? 1 / B_LIVE_EMEA1: v1

3 Introductions James Cotter Partner T: E: Lawrence Brown Managing Associate T: E: 2 / B_LIVE_EMEA1: v1

4 Recap on what cloud services are The common question what are they? Supplier provides an externally-hosted IT service to a customer, delivered by way of an internet connection (public internet or WAN/LAN/VPN) public clouds (heavily standardised/commoditised) private clouds (bespoke) hybrids (some shared infrastructure and therefore some standardisation) What services are provided via a cloud? Software as a Service ( SaaS ) (for example Microsoft s Office 365) Platform (for example VM Ware s CloudFoundry) Infrastructure ( IaaS ) (for example Amazon Elastic Compute Cloud) 3 / B_LIVE_EMEA1: v1

5 Comparison with traditional IT solutions pros Flexibility Likely to be more scalable to fit changing needs Operational resilience Many operators will run large and diverse hardware estates, which in more commoditised arrangements allows for built-in resilience in certain aspects of the system Operational advantages Operation and maintenance of hardware (and software in a SaaS solution) is outsourced to an experienced supplier rather than being retained in-house Upgrades and new functionality delivered without interruption In many cases should remain state of the art rather than being a static solution Cost advantages Positive effect on capex both in respect of implementation and future requirements Sharing of infrastructure and operations amongst customer base brings cost efficiencies which should filter down to customers Pay as you use model (where relevant) is more efficient - reduction of in-house IT teams reduces internal operational costs 4 / B_LIVE_EMEA1: v1

6 Comparison with traditional IT solutions cons Loss of control Inability to touch and feel the hardware and software represents a change from business norms in many cases cultural shift required In personal data-heavy or business critical cloud systems, this can be operationally risky Commitments to, and actual practical implementation of, adequate IT security controls is fundamental Reliance on connectivity Cloud services, by their nature, are only as good as the connection between customer and the service Large cloud systems such as Office 365 require significant volumes of dedicated bandwidth 5 / B_LIVE_EMEA1: v1

7 Inhibitors to adoption Imbalance of contractual power Customers continue to be forced by large cloud supplier to accept standard form non-negotiable contracts which are inadequate However, data protection and financial services regulators will take the view that cloud supplier inflexibility on contract terms will not exonerate the customer from its regulatory obligations Increasing regulation places greater requirements on customers to retain control of outsourced services: Data Protection Regulation Financial Services Regulation: SYSC 8 FCA Dear CEO letter to asset managers on outsourcing (December 2012), and subsequent visits 6 / B_LIVE_EMEA1: v1

8 What s changed? (1) Evidence of customer and supplier sides edging closer to each other, supported by increased sophistication on both sides and on the part of UK and other regulators (including an increase in guidance) Regulators: FCA Guidance, July 2014: Considerations for firms thinking of using third party technology (off-the-shelf) banking solutions : Cloud services may be subject to SYSC 8 IT must be effective, resilient and secure Due diligence and ongoing oversight are key Questionnaire ICO: Guidance on the use of Cloud Computing (including checklist) A non-uk example: Asia Regulatory Guidance on Outsourcing 7 / B_LIVE_EMEA1: v1

9 What s changed? (2) First mover benefits for customers and suppliers alike resulting in a will to get the deal done Some suppliers acknowledge the need for compliance with general and sector specific laws. For example: Microsoft EU approved Data Transfer Agreement Use of regional data centres Provision of increased information on business continuity planning BUT: many don t need to be so flexible or are slow to engage 8 / B_LIVE_EMEA1: v1

10 State of play regarding key issues and challenges Services Descriptions and Scope of Responsibility Data Service Performance Audit Exit Liability and Indemnities 9 / B_LIVE_EMEA1: v1

11 Services Descriptions and Scope of Responsibility Suppliers often present cloud offerings without clarity on precisely what they are selling Customers are keen to understand both the functionality and underlying infrastructure that that they are buying and therefore the resilience, quality, capacity, limitations etc 10 / B_LIVE_EMEA1: v1

12 Data Which laws apply? (Note variances in local laws where entities/groups operate) What data will the service be storing and processing? Personal Data and/or other important data? Data security What assurances does the customer have on data processing controls and standards of security maintained by the supplier? Is data physically and logically separated from other customers data? Supplier s certification to international industry standards Data location outside customer s home territory Customer and regulator audit rights Is data derived from customer data for analytical purposes by the Supplier? What are the supplier s processes regarding data retention and deletion of data? 11 / B_LIVE_EMEA1: v1

13 Audit Customers will want audit rights and rights to receive reports regarding service performance Common discussion areas include: Scope of access granted (a billing audit vs security/service performance audit) Notice periods Suppliers will want to prevent interruption to everyday business and other customers, include frequency and other restrictions on rights of audit and will need to build in the cost of reporting to the cost of the service 12 / B_LIVE_EMEA1: v1

14 Exit Depending on precise nature of deal, may not be as involved as in an outsourcing transaction Common features include: Handover period suppliers are typically happy to offer this so long as they are being paid for their services and the period is not indefinite Data return/cleansing Co-operation with replacement supplier Escrow/other solutions to ensure continuity of service? 13 / B_LIVE_EMEA1: v1

15 Liability and Indemnities Revenue generated v criticality of the service to the customer Financial cap as a multiple of monthly/annual recurring charges or fixed amount The supplier will be keen to distance itself from the reliance placed on the services by the customer s business (e.g. in certain circumstances, liability for loss of data to be excluded entirely) the FedEx argument Customers will want the supplier to indemnify it in respect of data protection breaches, loss of or damage to customer data and third party IPR claims Are service credits for service level failures, a sole and exclusive remedy? 14 / B_LIVE_EMEA1: v1

16 Where does cloud go from here? Increasing take-up is undoubted, but challenges remain for AM&IF and FI clients (and for cloud suppliers) Increased level of regulatory guidance means there is more certainty as to what regulators expect and a mandate for regulated AM&IF and FI sector clients to push for related protections in cloud services deals Some IT needs are simply too bespoke or too business critical to be outsourced to the (commoditised part of the) cloud International surveys may be needed to ensure legal and regulatory compliance 15 / B_LIVE_EMEA1: v1

17 16 / B_LIVE_EMEA1: v1

18 simmons-simmons.com elexica.com This document is for general guidance only. It does not contain definitive advice. SIMMONS & SIMMONS and S&S are registered trade marks of Simmons & Simmons LLP. Simmons & Simmons is an international legal practice carried on by Simmons & Simmons LLP and its affiliated practices. Accordingly, references to Simmons & Simmons mean Simmons & Simmons LLP and the other partnerships and other entities or practices authorised to use the name Simmons & Simmons or one or more of those practices as the context requires. The word partner refers to a member of Simmons & Simmons LLP or an employee or consultant with equivalent standing and qualifications or to an individual with equivalent status in one of Simmons & Simmons LLP s affiliated practices. For further information on the international entities and practices, refer to simmonssimmons.com/legalresp. Simmons & Simmons LLP is a limited liability partnership registered in England & Wales with number OC and with its registered office at CityPoint, One Ropemaker Street, London EC2Y 9SS. It is authorised and regulated by the Solicitors Regulation Authority. A list of members and other partners together with their professional qualifications is available for inspection at the above address. 17 / B_LIVE_EMEA1: v1

Cyber Security : preventing and mitigating incidents. Alexander Brown Robert Allen

Cyber Security : preventing and mitigating incidents. Alexander Brown Robert Allen Cyber Security : preventing and mitigating incidents Alexander Brown Robert Allen 07 & 08 October 2015 Cyber Security context of the threat The magnitude and tempo of [cyber security attacks], basic or

More information

Key HR Legal Issues for Asset Managers. Andrea Finn, Ian Fraser & Julian Taylor

Key HR Legal Issues for Asset Managers. Andrea Finn, Ian Fraser & Julian Taylor Key HR Legal Issues for Asset Managers Andrea Finn, Ian Fraser & Julian Taylor October 2015 Overview FEMR people recommendations Culture focus Remuneration 1 / B_LIVE_EMEA1:2813797v1 Culture and conduct

More information

Session 7: Introduction to Supply Chain Finance and Receivables Purchasing

Session 7: Introduction to Supply Chain Finance and Receivables Purchasing Session 7: Introduction to Supply Chain Finance and Receivables Purchasing Jolyon Ellwood-Russell Richard McKeown 30 October 2015 Agenda Overview of Receivables Risks and credit quality Specific structures:

More information

FI and AM&IF CPD Day Asset Managers and Outsourcing key issues

FI and AM&IF CPD Day Asset Managers and Outsourcing key issues FI and AM&IF CPD Day Asset Managers and Outsourcing key issues Tom Wheadon Lawrence Brown Nick Colston 9 October 2013 and 10 October 2013 Introduction Overall objectives: to help recognise and address

More information

Managing tax disputes: What the non-tax-lawyers need to know

Managing tax disputes: What the non-tax-lawyers need to know Managing tax disputes: What the non-tax-lawyers need to know So, what is a tax dispute? A difference between HMRC and taxpayers over what is the right amount of tax due or when the tax is due Interpretation

More information

Disability discrimination: managing disability in the employment lifecycle. Philip Bartlett and Sarah Wybron

Disability discrimination: managing disability in the employment lifecycle. Philip Bartlett and Sarah Wybron Disability discrimination: managing disability in the employment lifecycle Philip Bartlett and Sarah Wybron 04 March 2015 Introductions Legal position and recent case law Recruitment Performance management

More information

Financial Institutions and Cloud Computing What s on the Horizon

Financial Institutions and Cloud Computing What s on the Horizon Financial Institutions and Cloud Computing What s on the Horizon Rebecca Eisner Partner - Chicago +1 312 701 8577 reisner@mayerbrown.com Mark Prinsley Partner - London +44 203 130 3900 mprinsley@mayerbrown.com

More information

Contracts for Difference - the new support regime for low carbon generation

Contracts for Difference - the new support regime for low carbon generation Contracts for Difference - the new support regime for low carbon generation James Taylor Raj Bavishi 11 November 2014 UK Incentive Regimes Small scale Feed in Tariffs and the Renewables Obligations have

More information

Shared Services Toolkit

Shared Services Toolkit Shared Services Toolkit Shared Services Toolkit Introduction Sharing services is essential if Government is to meet its financial targets. Whether you do this as a group of central or local Government

More information

Hot Topics in International Debt Capital Markets. Paul Browne Louis-Maël Cogis Jay Lee Enrico Leone Piers Summerfield

Hot Topics in International Debt Capital Markets. Paul Browne Louis-Maël Cogis Jay Lee Enrico Leone Piers Summerfield Hot Topics in International Debt Capital Markets Paul Browne Louis-Maël Cogis Jay Lee Enrico Leone Piers Summerfield October 2015 Who we are and what we will cover Introduction to the team Things we will

More information

Insurance issues for commercial development

Insurance issues for commercial development Insurance issues for commercial development Mark Waghorn, Partner, Banking (Simmons & Simmons) Steve Cox, Executive Director (Willis) and Jack Rutherford, Associate, Projects (Simmons & Simmons) 1 December

More information

Buying software in 2015: how has the landscape changed? ANDREW JOINT JEREMY HARRIS EDWIN BAKER 28 APRIL 2015

Buying software in 2015: how has the landscape changed? ANDREW JOINT JEREMY HARRIS EDWIN BAKER 28 APRIL 2015 Buying software in 2015: how has the landscape changed? ANDREW JOINT JEREMY HARRIS EDWIN BAKER 28 APRIL 2015 Agenda How has software and its procurement changed? The impact of: Cloud SIAM Agile OSS The

More information

Outsourcing. FSA Regulated firms (including offshore outsourcing) Contents. March 2004

Outsourcing. FSA Regulated firms (including offshore outsourcing) Contents. March 2004 Outsourcing FSA Regulated firms (including offshore outsourcing) March 2004 Contents 2. Introduction 2. How do the regulations impact an outsourcing? 3. Prudential Sourcebooks 4. Service Level Agreements

More information

Trade and commodity finance: recent developments and issues. Omar Al-Ali and John Sayers

Trade and commodity finance: recent developments and issues. Omar Al-Ali and John Sayers Trade and commodity finance: recent developments and issues Omar Al-Ali and John Sayers 07 & 08 October 2015 Team and experience 1 / B_LIVE_EMEA1:2816398v1 Team John Sayers General Experience John is a

More information

Tracking Compliance: Data Protection Risks and Remedies for Retail Janine Regan. charlesrussellspeechlys.com

Tracking Compliance: Data Protection Risks and Remedies for Retail Janine Regan. charlesrussellspeechlys.com Tracking Compliance: Data Protection Risks and Remedies for Retail Janine Regan charlesrussellspeechlys.com Janine Regan Associate +44 (0)20 7427 6798 janine.regan@crsblaw.com Janine has extensive experience

More information

Contracting for Cloud Computing

Contracting for Cloud Computing Contracting for Cloud Computing Geofrey L Master Mayer Brown JSM Partner +852 2843 4320 geofrey.master@mayerbrownjsm.com April 5th 2011 Mayer Brown is a global legal services organization comprising legal

More information

Cloud Computing Flying High (or not) Ben Roper IT Director City of College Station

Cloud Computing Flying High (or not) Ben Roper IT Director City of College Station Cloud Computing Flying High (or not) Ben Roper IT Director City of College Station What is Cloud Computing? http://www.agent-x.com.au/ Wikipedia - the use of computing resources (hardware and software)

More information

Pinsent Masons. Competition Law Dawn Raid Checklist & Guidelines. What to do in the first hour of a dawn raid

Pinsent Masons. Competition Law Dawn Raid Checklist & Guidelines. What to do in the first hour of a dawn raid Pinsent Masons Competition Law Dawn Raid Checklist & Guidelines What to do in the first hour of a dawn raid What to do in the first hour of a Competition Dawn Raid Checklist Action Point Done? The Officials

More information

GUIDELINE ON THE APPLICATION OF THE OUTSOURCING REQUIREMENTS UNDER THE FSA RULES IMPLEMENTING MIFID AND THE CRD IN THE UK

GUIDELINE ON THE APPLICATION OF THE OUTSOURCING REQUIREMENTS UNDER THE FSA RULES IMPLEMENTING MIFID AND THE CRD IN THE UK GUIDELINE ON THE APPLICATION OF THE OUTSOURCING REQUIREMENTS UNDER THE FSA RULES IMPLEMENTING MIFID AND THE CRD IN THE UK This Guideline does not purport to be a definitive guide, but is instead a non-exhaustive

More information

Cloud Computing Readiness - Background

Cloud Computing Readiness - Background IT Best Practices Audit Cloud Computing Readiness - Background Cloud based offerings are maturing and finally taking off after a long period (e.g. Software as a Service offerings have been available for

More information

Considerations for firms thinking of using third-party technology (off-the-shelf) banking solutions

Considerations for firms thinking of using third-party technology (off-the-shelf) banking solutions Financial Conduct Authority Considerations for firms thinking of using third-party technology (off-the-shelf) banking solutions Introduction 1. A firm has many choices when designing its operating model

More information

Data Centres North Data Centre Security is the tail wagging the dog? May 11-12 2015

Data Centres North Data Centre Security is the tail wagging the dog? May 11-12 2015 Data Centres North Data Centre Security is the tail wagging the dog? May 11-12 2015 Mark Bailey - Partner charlesrussellspeechlys.com Introduction Why do data centres exist? process data? protect data?

More information

CLOUD CUSTOMERS ARE THE BENEFICIARIES IN RECENT MARKET DEVELOPMENTS BRENDAN TOMLINSON, SPECIAL COUNSEL, IT & IP, SEPTEMBER 2014

CLOUD CUSTOMERS ARE THE BENEFICIARIES IN RECENT MARKET DEVELOPMENTS BRENDAN TOMLINSON, SPECIAL COUNSEL, IT & IP, SEPTEMBER 2014 INTRODUCTION CLOUD HAS DEVELOPED CLOUD HAS PRESENTED CHALLENGES FOR THE BIG IT PLAYERS There have been shifts in the cloud market recently. Large IT vendors have been adjusting their approach to catch

More information

Financial Services Tax Breakfast Briefings

Financial Services Tax Breakfast Briefings Financial Services Tax Breakfast Briefings Current Tax Issues on Debt Funds and Shadow Banking Nick Cronkshaw Mark Sheiham 17 December 2014 Introduction What we re going to cover Background - growth and

More information

Cloud Computing: Legal Risks and Best Practices

Cloud Computing: Legal Risks and Best Practices Cloud Computing: Legal Risks and Best Practices A Bennett Jones Presentation Toronto, Ontario Lisa Abe-Oldenburg, Partner Bennett Jones LLP November 7, 2012 Introduction Security and Data Privacy Recent

More information

Data Centre Managed Services Market

Data Centre Managed Services Market Data Centre Managed Services Market Martin Molloy 20/03/2012 Macro Challenges Recession User growth and diversity The world of collaboration Clouds on the horizon Cloud market - 48% compound annual growth

More information

Data Protection Act 1998. Guidance on the use of cloud computing

Data Protection Act 1998. Guidance on the use of cloud computing Data Protection Act 1998 Guidance on the use of cloud computing Contents Overview... 2 Introduction... 2 What is cloud computing?... 3 Definitions... 3 Deployment models... 4 Service models... 5 Layered

More information

Tax Fraud in Financial Services

Tax Fraud in Financial Services Tax Fraud in Financial Services Innocent Until Proven Careless? Nick Skerrett Stephen Gentle 30 September 2014 Contents Where are financial institutions exposed to fraud? Civil enforcement Statutory tax

More information

Key Risk Areas for Banks in contracting with IT Suppliers. Dan Holland Partner, Stephenson Harwood LLP, London

Key Risk Areas for Banks in contracting with IT Suppliers. Dan Holland Partner, Stephenson Harwood LLP, London Key Risk Areas for Banks in contracting with IT Suppliers Dan Holland Partner, Stephenson Harwood LLP, London Introduction The contracting process Assumptions and customer obligations Regulatory compliance

More information

Proposed guidance for firms outsourcing to the cloud and other third-party IT services

Proposed guidance for firms outsourcing to the cloud and other third-party IT services Guidance consultation 15/6 Proposed guidance for firms outsourcing to the cloud and other third-party IT services November 2015 1. Introduction and consultation 1.1 The purpose of this draft guidance is

More information

Client Alert. Global Information Technology & Communications Privacy, Data Protection and Information Management

Client Alert. Global Information Technology & Communications Privacy, Data Protection and Information Management Global Information Technology & Communications Privacy, Data Protection and Information Management Client Alert Umbrellas for Clouds: Risk Mitigation Strategies for SaaS Transactions www.bakermckenzie.com

More information

What Is The Cloud And How Can Your Agency Use It. Tom Konop Mark Piontek Cathleen Christensen

What Is The Cloud And How Can Your Agency Use It. Tom Konop Mark Piontek Cathleen Christensen What Is The Cloud And How Can Your Agency Use It Tom Konop Mark Piontek Cathleen Christensen Video Computer Basics: What is the Cloud What is Cloud Computing Cloud Computing Basics The use of the word

More information

Private Equity in Africa

Private Equity in Africa Private Equity in Africa Noro-Lanto Ravisy David Williams 9 April 2015 Fundraising for African Private Equity David Williams 9 April 2015 Introduction Fundraising in Europe the current climate The classic

More information

Security breach! A closer look from a data protection law perspective November 2014 Gabriel Voisin (Associate)

Security breach! A closer look from a data protection law perspective November 2014 Gabriel Voisin (Associate) Security breach! A closer look from a data protection law perspective November 2014 Gabriel Voisin (Associate) Why is this a challenge? When personal data is compromised, mandatory or recommended notification

More information

Data Centres De-coding the issues

Data Centres De-coding the issues Data Centres De-coding the issues Nabarro s specialisms include: Banking & Finance Construction & Engineering Corporate Dispute Resolution Employment Environment EU, Competition and Trade Financial Services

More information

Marketing under AIFMD The Final Countdown Series. Getting a Grip - the Article 42 registration process under AIFMD. Devarshi Saksena.

Marketing under AIFMD The Final Countdown Series. Getting a Grip - the Article 42 registration process under AIFMD. Devarshi Saksena. Marketing under AIFMD The Final Countdown Series Getting a Grip - the Article 42 registration process under AIFMD Devarshi Saksena Catherine Weeks Simmons & Simmons LLP Friday 06 June 2014 Introduction:

More information

2014 HIMSS Analytics Cloud Survey

2014 HIMSS Analytics Cloud Survey 2014 HIMSS Analytics Cloud Survey June 2014 2 Introduction Cloud services have been touted as a viable approach to reduce operating expenses for healthcare organizations. Yet, engage in any conversation

More information

Keeping sight of your business Hot topics facing Financial Services organisations in IT Internal Audit

Keeping sight of your business Hot topics facing Financial Services organisations in IT Internal Audit Keeping sight of your business Hot topics facing Financial Services organisations in IT Internal Audit 2014 Welcome to our third annual review of the IT hot topics facing Internal Audit functions within

More information

FG 16/5 - Guidance for firms outsourcing to the cloud and other third-party IT services

FG 16/5 - Guidance for firms outsourcing to the cloud and other third-party IT services Finalised guidance FG 16/5 - Guidance for firms outsourcing to the cloud and other third-party IT services July 2016 Background 1.1 1.2 1.3 The purpose of this guidance is to clarify the requirements on

More information

Cloud Computing. Chapter 1 Introducing Cloud Computing

Cloud Computing. Chapter 1 Introducing Cloud Computing Cloud Computing Chapter 1 Introducing Cloud Computing Learning Objectives Understand the abstract nature of cloud computing. Describe evolutionary factors of computing that led to the cloud. Describe virtualization

More information

1 The intersection of IAM and the cloud

1 The intersection of IAM and the cloud 1 The intersection of IAM and the cloud Managing the User Lifecycle Across On-Premises and Cloud-Hosted Applications Theory, practice, pros and cons with a focus on enterprise deployments of IAM and cloud

More information

Governance in brief BIS and the FRC consult on options for UK implementation of the EU Audit Directive & Regulation

Governance in brief BIS and the FRC consult on options for UK implementation of the EU Audit Directive & Regulation January 2015 Governance in brief BIS and the FRC consult on options for UK implementation of the EU Audit Directive & Regulation Headlines The UK will take the option to extend the mandatory auditor rotation

More information

Cloud Computing. Chapter 1 Introducing Cloud Computing

Cloud Computing. Chapter 1 Introducing Cloud Computing Cloud Computing Chapter 1 Introducing Cloud Computing Learning Objectives Understand the abstract nature of cloud computing. Describe evolutionary factors of computing that led to the cloud. Describe virtualization

More information

Exposure Draft Statement of Recommended Practice: Financial Statements of Investment Trust Companies and Venture Capital Trusts

Exposure Draft Statement of Recommended Practice: Financial Statements of Investment Trust Companies and Venture Capital Trusts Deloitte LLP 2 New Street Square London EC4A 3BZ Tel: +44 (0) 20 7936 3000 Fax: +44 (0) 20 7583 1198 www.deloitte.co.uk Direct: 0207 007 0884 Direct fax: 020 7007 0158 vepoole@deloitte.co.uk John Stevens

More information

What Every User Needs To Know Before Moving To The Cloud. LawyerDoneDeal Corp.

What Every User Needs To Know Before Moving To The Cloud. LawyerDoneDeal Corp. What Every User Needs To Know Before Moving To The Cloud LawyerDoneDeal Corp. What Every User Needs To Know Before Moving To The Cloud 1 What is meant by Cloud Computing, or Going To The Cloud? A model

More information

Shared Parental Leave: Nine Months and Counting Understanding employee attitudes to shared parental leave

Shared Parental Leave: Nine Months and Counting Understanding employee attitudes to shared parental leave Shared Parental Leave: Nine Months and Counting Understanding employee attitudes to shared parental leave * This PDF is best viewed and printed in landscape Introduction About the survey This report is

More information

Cloud Computing in a Regulated Environment

Cloud Computing in a Regulated Environment Computing in a Regulated Environment White Paper by David Stephenson CTG Regulatory Compliance Subject Matter Expert February 2014 CTG (UK) Limited, 11 Beacontree Plaza, Gillette Way, READING, Berks RG2

More information

CLOUD-BASED BIM AND SMART ASSET MANAGEMENT: ADOPTING A SECURITY-MINDED APPROACH

CLOUD-BASED BIM AND SMART ASSET MANAGEMENT: ADOPTING A SECURITY-MINDED APPROACH CLOUD-BASED BIM AND SMART ASSET MANAGEMENT: ADOPTING A SECURITY-MINDED APPROACH March 2016 Disclaimer Reference to any specific commercial product, process or service by trade name, trademark, manufacturer,

More information

Big Data for Mutuals. Marc Dautlich 25 November 2013

Big Data for Mutuals. Marc Dautlich 25 November 2013 Big Data for Mutuals Marc Dautlich 25 November 2013 Agenda BIG DATA What is it? OPPORTUNITIES What are they? LEGAL CHALLENGES How do we overcome them? LEGAL REFORM What can we do now to minimise impact?

More information

VENDOR RISK MANAGEMENT UPDATE- ARE YOU AT RISK? Larry L. Llirán, CISA, CISM December 10, 2015 ISACA Puerto Rico Symposium

VENDOR RISK MANAGEMENT UPDATE- ARE YOU AT RISK? Larry L. Llirán, CISA, CISM December 10, 2015 ISACA Puerto Rico Symposium 1 VENDOR RISK MANAGEMENT UPDATE- ARE YOU AT RISK? Larry L. Llirán, CISA, CISM December 10, 2015 ISACA Puerto Rico Symposium 2 Agenda Introduction Vendor Management what is? Available Guidance Vendor Management

More information

Cloud Computing An Auditor s Perspective

Cloud Computing An Auditor s Perspective Cloud Computing An Auditor s Perspective Sailesh Gadia, CPA, CISA, CIPP sgadia@kpmg.com December 9, 2010 Discussion Agenda Introduction to cloud computing Types of cloud services Benefits, challenges,

More information

FSA paper on conflicts of interest between asset managers and their customers

FSA paper on conflicts of interest between asset managers and their customers November 2012 FSA paper on conflicts of interest between asset managers and their customers The FSA issued a warning to asset managers to step up their compliance with FSA rules relating to conflicts of

More information

Clouding the issue. Why a mix of on-premises, public and private cloud-based solutions could be the future

Clouding the issue. Why a mix of on-premises, public and private cloud-based solutions could be the future Clouding the issue Why a mix of on-premises, public and private cloud-based solutions could be the future 2 Financial services providers need to choose carefully when it comes to cloud computing It s fair

More information

Cloud Computing. Opportunities for Investment Managers

Cloud Computing. Opportunities for Investment Managers Cloud Computing Opportunities for Investment Managers Cloud Computing: Opportunities for Investment Managers Cloud Computing is rapidly changing the way IT is consumed Spend growing at 19% rate, to $109

More information

Asset backed/hybrid notes: recent market and regulatory developments

Asset backed/hybrid notes: recent market and regulatory developments Asset backed/hybrid notes: recent market and regulatory developments Jay Lee Jason Valoti Introduction Overview of potential structures - key considerations Repackaging refresher Types of underlying assets

More information

Planning ahead Hot topics facing Financial Services organisations in IT Internal Audit

Planning ahead Hot topics facing Financial Services organisations in IT Internal Audit Planning ahead Hot topics facing Financial Services organisations in IT Internal Audit 2013 During Q4 2012, we surveyed Heads of IT Internal Audit at 22 global Financial Services organisations to identify

More information

2011 Morrison & Foerster LLP All Rights Reserved mofo.com. Risk, Governance and Negotiation in the Cloud: Capture Benefits and Reduce Risks

2011 Morrison & Foerster LLP All Rights Reserved mofo.com. Risk, Governance and Negotiation in the Cloud: Capture Benefits and Reduce Risks 2011 Morrison & Foerster LLP All Rights Reserved mofo.com Risk, Governance and Negotiation in the Cloud: Capture Benefits and Reduce Risks 14 September 2011 Presenters Alistair Maughan Morrison & Foerster

More information

Outsourcing Risk Guidance Note for Banks

Outsourcing Risk Guidance Note for Banks Outsourcing Risk Guidance Note for Banks Part 1: Definitions Guideline 1 For the purposes of these guidelines, the following is meant by: a) outsourcing: an authorised entity s use of a third party (the

More information

Cloud Computing Safe Harbor or Wild West?

Cloud Computing Safe Harbor or Wild West? IT Best Practices Series Cloud Computing Safe Harbor or Wild West? With IT expenditures coming under increasing scrutiny, the cloud is being sold as an oasis of practical solutions. It s true that many

More information

Ancillary Services affected by MiFID II - impact on AIFMs and UCITS management companies

Ancillary Services affected by MiFID II - impact on AIFMs and UCITS management companies Ancillary Services affected by MiFID II - impact on AIFMs and UCITS management companies Summary of how MiFID II will apply to EU managers regulated under AIFMD and the UCITS Directive In the context of

More information

Cloud computing: benefits, risks and recommendations for information security

Cloud computing: benefits, risks and recommendations for information security Cloud computing: benefits, risks and recommendations for information security Dr Giles Hogben Secure Services Programme Manager European Network and Information Security Agency (ENISA) Goals of my presentation

More information

KEY GUIDE. Selling a business the key issues

KEY GUIDE. Selling a business the key issues KEY GUIDE Selling a business the key issues Key issues There are a variety of reasons why you might want to sell your business. Probably the most common situation is when you want to retire, but maybe

More information

While cloud computing may have many benefits, it comes with a financial and a business cost in terms of:

While cloud computing may have many benefits, it comes with a financial and a business cost in terms of: Cloud Computing Technology Spotlight Defined by The National Institute of Standards and Technology as the provision of computational resources on demand via a computer network, cloud computing s advantages

More information

NSW Government. Cloud Services Policy and Guidelines

NSW Government. Cloud Services Policy and Guidelines NSW Government Cloud Services Policy and Guidelines August 2013 1 CONTENTS 1. Introduction 2 1.1 Policy statement 3 1.2 Purpose 3 1.3 Scope 3 1.4 Responsibility 3 2. Cloud services for NSW Government 4

More information

Disclaimer. Published by the Office of the Government Chief Information Officer (November 2013)

Disclaimer. Published by the Office of the Government Chief Information Officer (November 2013) Disclaimer The information provided in this Practice Guide for Procuring Cloud Services ( the Guide ) is for general reference only. It does not provide an exhaustive guide on procuring cloud services.

More information

Information Security: Cloud Computing

Information Security: Cloud Computing Information Security: Cloud Computing Simon Taylor MSc CLAS CISSP CISMP PCIRM Director & Principal Consultant All Rights Reserved. Taylor Baines Limited is a Registered Company in England & Wales. Registration

More information

Cloud Security Panel: Real World GRC Experiences. ISACA Atlanta s 2013 Annual Geek Week

Cloud Security Panel: Real World GRC Experiences. ISACA Atlanta s 2013 Annual Geek Week Cloud Security Panel: Real World GRC Experiences ISACA Atlanta s 2013 Annual Geek Week Agenda Introductions Recap: Overview of Cloud Computing and Why Auditors Should Care Reference Materials Panel/Questions

More information

The EC3\Legal Guide to TUPE

The EC3\Legal Guide to TUPE The EC3\Legal Guide to TUPE Overview and the 2014 Regulations Marina Garston Legal Director +44 (0)203 553 4879 marina@ec3legal.com This guide focuses on the main provisions of TUPE and takes into account

More information

Cloud Computing: The atmospheric jeopardy. Unique Approach Unique Solutions. Salmon Ltd 2014 Commercial in Confidence Page 1 of 5

Cloud Computing: The atmospheric jeopardy. Unique Approach Unique Solutions. Salmon Ltd 2014 Commercial in Confidence Page 1 of 5 Cloud Computing: The atmospheric jeopardy Unique Approach Unique Solutions Salmon Ltd 2014 Commercial in Confidence Page 1 of 5 Background Cloud computing has its place in company computing strategies,

More information

UCITS IV: Management Companies, and passports. February 2011

UCITS IV: Management Companies, and passports. February 2011 February 2011 This briefing paper sets out the new provisions which will apply to UCITS Management Companies, explains how the passport is now designed to work, and summarises the changes made to the long

More information

Outsourcing by UK-based Fund Managers: Identifying and Applying the Rules

Outsourcing by UK-based Fund Managers: Identifying and Applying the Rules Outsourcing by UK-based Fund Managers: Identifying and Applying the Rules Amanda Lewis, Partner and Rosali Pretorius, Partner, Dentons 1 October 2014 UK-based fund managers must comply with increasingly

More information

Cloud Computing and Records Management

Cloud Computing and Records Management GPO Box 2343 Adelaide SA 5001 Tel (+61 8) 8204 8773 Fax (+61 8) 8204 8777 DX:336 srsarecordsmanagement@sa.gov.au www.archives.sa.gov.au Cloud Computing and Records Management June 2015 Version 1 Version

More information

Operational Risk. Corporate governance. Contents

Operational Risk. Corporate governance. Contents Operational Risk Corporate governance Contents 3. Introduction 3. Establish Operational Risk policies 4. Define Operational Risk framework to carry out these policies 2 Introduction The purpose of this

More information

Multi-Sourcing Workshop

Multi-Sourcing Workshop Multi-Sourcing Workshop PAUL O HARE ANDY NELSON ANDREW WOODWARD ANDREA WILLIAMS 24 / 9 / 2015 Agenda 1.30 1.50: Introductions and Survey feedback Andy Nelson (Associate, Kemp Little Consulting LLP) 1.50

More information

Securing The Cloud. Foundational Best Practices For Securing Cloud Computing. Scott Clark. Insert presenter logo here on slide master

Securing The Cloud. Foundational Best Practices For Securing Cloud Computing. Scott Clark. Insert presenter logo here on slide master Securing The Cloud Foundational Best Practices For Securing Cloud Computing Scott Clark Agenda Introduction to Cloud Computing What is Different in the Cloud? CSA Guidance Additional Resources 2 What is

More information

Services Providers. Ivan Soto

Services Providers. Ivan Soto SOP s for Managing Application Services Providers Ivan Soto Learning Objectives At the end of this session we will have covered: Types of Managed Services Outsourcing process Quality expectations for Managed

More information

The top 10 things every alternative investment fund manager needs to know about professional indemnity insurance under the Alternative Investment

The top 10 things every alternative investment fund manager needs to know about professional indemnity insurance under the Alternative Investment The top 1 things every alternative investment fund manager needs to know about professional indemnity insurance under the Alternative Investment Fund Managers Directive December 213 Why should I read this?

More information

Historians and Production Management as Cloud Applications

Historians and Production Management as Cloud Applications Historians and Production Management as Cloud Applications Harry Forbes Senior Analyst ARC Advisory Group hforbes@arcweb.com Emerging Technologies Enable Information- Driven Manufacturing Big Data Analytics

More information

Under control 2015 Hot topics for IT internal audit in financial services. An Internal Audit viewpoint

Under control 2015 Hot topics for IT internal audit in financial services. An Internal Audit viewpoint Under control 2015 Hot topics for IT internal audit in financial services An Internal Audit viewpoint Introduction Welcome to our fourth annual review of the IT hot topics for IT internal audit in financial

More information

Data Privacy and Security for Market Research in the Cloud

Data Privacy and Security for Market Research in the Cloud Data Privacy and Security for Market Research in the Cloud Peter Milla IIeX2015 NA Agenda Page 2 1. Background 2. Why the Cloud? 3. Data Privacy and Data Security in the Cloud 4. How do We Deal with It?

More information

China pushes change in IT infrastructure by strengthening regulation of cyber security

China pushes change in IT infrastructure by strengthening regulation of cyber security April 2015 China pushes change in IT infrastructure by strengthening regulation of cyber security China pushes change in IT infrastructure by strengthening regulation of cyber security The CBRC s recent

More information

AVAILABILITY SERVICES CLouD SECuRITY

AVAILABILITY SERVICES CLouD SECuRITY AVAILABILITY SERVICES CLouD SECuRITY Buyer Be aware There is one simple but golden tenet: security in the cloud is exactly the same as security in a physical shared environment and should be approached

More information

Isaac Willett April 5, 2011

Isaac Willett April 5, 2011 Current Options for EHR Implementation: Cloud or No Cloud? Regina Sharrow Isaac Willett April 5, 2011 Introduction Health Information Technology for Economic and Clinical Health Act ( HITECH (HITECH Act

More information

World Hybrid Cloud - Market

World Hybrid Cloud - Market Report Code: IC 15256 World Hybrid Cloud - Market (product Types, Application, Technology, End Users and Geography) Global Share, Size, Industry Analysis, Trends, Opportunities, Growth and Forecast, 2014-2020

More information

3 rd Party Vendor Risk Management

3 rd Party Vendor Risk Management 3 rd Party Vendor Risk Management Session 402 Tuesday, June 9, 2015 (11 to 12pm) Session Objectives The need for enhanced reporting on vendor risk management Current outsourcing environment Key risks faced

More information

Cloud Computing; What is it, How long has it been here, and Where is it going?

Cloud Computing; What is it, How long has it been here, and Where is it going? Cloud Computing; What is it, How long has it been here, and Where is it going? David Losacco, CPA, CIA, CISA Principal January 10, 2013 Agenda The Cloud WHAT IS THE CLOUD? How long has it been here? Where

More information

Licensing Guide for Partners. Leveraging Data Center Providers and Software Services Resellers

Licensing Guide for Partners. Leveraging Data Center Providers and Software Services Resellers Licensing Guide for Partners Leveraging Data Center Providers and Software Services Resellers LEVERAGING DATA CENTER PROVIDERS AND SOFTWARE SERVICES RESELLERS: LICENSING GUIDE Table of Contents Introduction...

More information

University of Edinburgh. School of Informatics. Intellectual Property and the Digital Age. Chris Martin

University of Edinburgh. School of Informatics. Intellectual Property and the Digital Age. Chris Martin University of Edinburgh School of Informatics Intellectual Property and the Digital Age Chris Martin Outline IP Basics what is IP? / IP ownership / protecting IP Copyright basics infringement / permitted

More information

Synety. Software & Computer Services

Synety. Software & Computer Services Software & Computer Services Speculative Buy, 93.5p, Market Cap. 7.8m* is an AIM quoted cloud software and telecoms company. It develops and provides a suite of cloud based software products and services

More information

CRN Cloud Computing Forum 2012 5 Tips for Choosing the right cloud partner

CRN Cloud Computing Forum 2012 5 Tips for Choosing the right cloud partner CRN Cloud Computing Forum 2012 5 Tips for Choosing the right cloud partner 14 th June 2012 Andy Burton Chairman, Cloud Industry Forum andy@cloudindustryfroum.org Backdrop: 2012 Cloud Market Organisations

More information

Financial Services and Markets

Financial Services and Markets Financial Services and Markets "Telephone taping": removal of the mobile phone exemption Despite strong objections from the industry, the FSA has confirmed that the so-called mobile phone exemption is

More information

Cloud Computing. Chapter 1 Introducing Cloud Computing

Cloud Computing. Chapter 1 Introducing Cloud Computing Cloud Computing Chapter 1 Introducing Cloud Computing Learning Objectives Understand the abstract nature of cloud computing. Describe evolutionary factors of computing that led to the cloud. Describe virtualization

More information

Clouds and Competing Shores: the Changing Landscapes of Outsourcing & Offshoring. Dr Richard Sykes

Clouds and Competing Shores: the Changing Landscapes of Outsourcing & Offshoring. Dr Richard Sykes Dr Richard Sykes Clouds and Competing Shores: the Changing Landscapes of Outsourcing & Offshoring Dr Richard Sykes Sole Partner, Dr Richard Sykes Meeting of IAOP UK Chapter Monday 16 th January 2012 Morrison

More information

Mineral, Oil and Gas Companies - Listing on SGX.

Mineral, Oil and Gas Companies - Listing on SGX. December 2013 Mineral, Oil and Gas Companies - Listing on SGX. New eligibility criteria and on-going obligation requirements Background In September 2013, Singapore Exchange Securities Trading Limited

More information

Cloud Technology: Do you Compute? Presented by Pete Eichorn, Director of Technology, Texas.gov

Cloud Technology: Do you Compute? Presented by Pete Eichorn, Director of Technology, Texas.gov Cloud Technology: Do you Compute? Presented by Pete Eichorn, Director of Technology, Texas.gov Award-winning, official website for Texas Self-funded, public/ private partnership Subsidiary of NIC, the

More information

Strategic Compliance & Securing the Cloud. Annalea Sharack-Ilg, CISSP, AMBCI Technical Director of Information Security

Strategic Compliance & Securing the Cloud. Annalea Sharack-Ilg, CISSP, AMBCI Technical Director of Information Security Strategic Compliance & Securing the Cloud Annalea Sharack-Ilg, CISSP, AMBCI Technical Director of Information Security Complexity and Challenges 2 Complexity and Challenges Compliance Regulatory entities

More information

Cloud computing Alessandro Galtieri Pavel Klimov Severin Loeffler

Cloud computing Alessandro Galtieri Pavel Klimov Severin Loeffler Cloud computing Alessandro Galtieri, Senior Lawyer, Colt Technology Services, London, UK Pavel Klimov, General Counsel EMEA, Unisys, London, UK Severin Loeffler, Assistant General Counsel, Central Eastern

More information

The Cloud Challenge: understanding what is "market"?

The Cloud Challenge: understanding what is market? The Cloud Challenge: understanding what is "market"? ANDREW JOINT ED BAKER 05 / 03 / 2014 Now this is not the end. It is not even the beginning of the end. But it is, perhaps, the end of the beginning

More information

The Cloud Computing Revolution: Beyond the Hype

The Cloud Computing Revolution: Beyond the Hype The Cloud Computing Revolution: Beyond the Hype KEN ADLER Partner and Chair, Technology and Outsourcing Practice Group Loeb & Loeb LLP Outsourcing in Financial Services Program October 19, 2010 Overview

More information