Putting Cloud security in perspective
|
|
- Neal Walsh
- 8 years ago
- Views:
Transcription
1 Capgemii Immediate Istat. Flexible. Revolutioary. the way we see it Puttig Cloud security i perspective The move towards Cloud Computig will be see as oe of the defiig treds of There is growig acceptace that the Cloud delivery model offers real busiess beefits, however perceived security cocers threate the geeral uptake of the Cloud Computig model. May take the view that the Cloud Model is somehow iheretly less secure tha more traditioal IT delivery models. This paper examies how orgaisatios ca take advatage of Cloud-based services while maagig risk resposibly. First it is imperative to defie what we mea by Cloud Computig, as the term remais somewhat ebulous. Some argue that it is re-badged utility computig, some that it is more a atural evolutio of traditioal outsourcig models, ad others that it is simply a retur to the maiframe model. For the purposes of commo uderstadig i the rapidly evolvig world of Cloud Computig, we will take the widely adopted defiitio of Cloud put forward by NIST, which suggests that Cloud Computig has: Five Essetial Characteristics : O-demad self-service Broad etwork access Resource poolig (i.e. some form of multi-teacy) Rapid elasticity Measured service (use-based charges) Three Service Models : Cloud Software-as-a-Service (SaaS) Cloud Platform-as-a-Service (PaaS) Cloud Ifrastructure-as-a-Service (IaaS) Four Deploymet Models : Private Cloud Commuity Cloud Public Cloud Hybrid Cloud Risks associated with Cloud Computig There are udoubtedly risks associated with the use of Cloudbased services, just as there are risks associated with other delivery models. The most talked about risks with Cloud Computig lie i four areas: compliace; multi-teacy; lock-i; ad availability. Compliace This embraces two areas: legislative ad regulatory compliace, such as data protectio legislatio icludig the UK Data Protectio Act 1998; ad other compliace requiremets, such as those associated with the Paymet Card Idustry Data Security Stadard (PCI-DSS). Orgaisatios are also cocered about the security of their data whe hosted i foreig atios. This has called ito questio the ability of certai host govermets to access their data, which might be doe, as a example, uder the Patriot Act i the Uited States. This latter cocer is equally applicable to more stadard models, a poit illustrated by the US govermet s seizure of the Belgium-based SWIFT orgaisatio s Europea paymets data, which had bee mirrored to a US-based operatig cetre.
2 However the difficulties of complyig with data protectio legislatio i the Cloud eviromet are ofte overplayed. For example, the Safe Harbour Agreemet betwee the U.S. Departmet of Commerce ad the Europea Uio exists to eable the persoal data of EU citizes to be exported to US orgaisatios that abide by it. There are other suitable mechaisms for eablig the export of persoal data overseas, such as through the use of Bidig Corporate Rules (BCRs) or by icorporatig the model cotractual clauses issued by the Europea Commissio. These model clauses esure compliace with EU requiremets relatig to data export (Priciple 8 of the UK Data Protectio Act 1998). Although such mechaisms are available to cotrol ad eable suitably secure data export, legal advice should be sought to esure that these stadard mechaisms are sufficiet for idividual orgaisatios. It is importat to ote that compliace ca also be a problematic area with traditioal delivery models. It is the resposibility of the ed user orgaisatio to operate withi the applicable compliace eviromet irrespective of the delivery model. I short, the ultimate resposibility for compliace caot be outsourced. Multi-teacy Multi-teacy is a core compoet of may Cloud services ad ca be foud i the use of shared storage, compute or applicatio resources. I the Cloud eviromet, orgaisatios must place their cofidece i the security barriers operated by the provider. We would argue that this placig of cofidece i a third party differs very little from whe orgaisatios place their trust i third parties for service delivery, or data hostig. The primary differece betwee the Cloud eviromet ad more traditioal outsourcig is the extet to which resources are shared. Whereas i a traditioal outsourced eviromet services will typically ru o dedicated hardware, coversely i a Cloud eviromet services will typically ru o a shared physical ifrastructure. Clearly this sharig represets a level of icreased risk, however we believe it is a risk that ca be reduced, through tailored security moitorig, ad through appropriate use of cryptographic techologies withi a comprehesive security architecture. As with ay busiess decisio, the beefits of flexibility ad value eed to be weighed agaist the disbeefit of this elevated security risk. Ofte the former will outweigh the latter, although the risk maagemet fuctio of the busiess (ad ot IT) must ultimately adjudicate i each case. Lock-i Oce a orgaisatio has built a service i the Cloud, how straightforward is it for them to move to a differet supplier? At preset, ot at all straightforward, particularly for those implemetig PaaS. If you cosider a SaaS model, the the data must be exported from the provider ad trasformed ito a format compatible with the ew target eviromet. For trasport betwee SaaS providers this may be relatively straightforward as most providers support the export of data i.csv format. However the data elemets withi these exports may still require some trasformatio if they are to support a differet target data model. 2
3 Busiess Process Outsourcig the way we see it Similarly, if a orgaisatio has built or purchased a service hosted o a PaaS Cloud the the data must, agai, be exported. However the orgaisatio ow also eeds to cosider how to migrate the code itself from oe PaaS to aother (or to a o-premise alterative).this is ulikely to be a trivial udertakig. At the IaaS level, migratio is likely to be more straightforward, provided that operatig system images are ot saved i proprietary formats that preclude them ruig o similar hypervisor eviromets elsewhere. But oce agai, data must be exported from the provider, which may be time-cosumig or eve urealistic if the data geerated ad stored o the Cloud platform is sigificat. Of course, if a orgaisatio is plaig to brig a service o-premise from a Cloud based provider the it must esure that it has all of the appropriate resources available to host the service. However all the above has to be see i perspective. That perspective is give by the sigificat busiess pai of migratig services i the o-premise world. A aalogy exists here with the early days of the electricity market i the UK, whe it was very difficult to switch betwee differet electricity providers. Icreased competitio ad the emergece of commo procedures ad techologies mea that today it could scarcely be more straightforward. Similarly, i the future, a emergece of commo methodologies ad competitio i the Cloud Computig market is likely to force the process of switchig providers to become simpler. Work is uderway o may differet stadards i the Cloud space, via the Ope Group, the DMTF ad other iitiatives, which will help to promote stadardisatio ad ecourage the developmet of a flexible ad dyamic market. Orgaisatios such as Capgemii ca help to itegrate ad maage Cloud offerigs from umerous differet providers to preset a uified service to their customers. Availability Critics of Cloud provisio ask orgaisatios to cosider what would happe were they to move ad persoal productivity services to the Cloud. They might do so, for example, through a implemetatio of GoogleApps or the Microsoft Office365. Attetio is the draw to the damage that would be caused by the loss of their coectio to the Cloud or by a outage i the Cloud service itself. Agai, this eeds to be put i proper perspective. If a orgaisatio has already outsourced its back-office fuctios to a more traditioal outsourcer the they face these risks ow. Moreover, the Cloud service is likely to offer more resiliece at a much more competitive price tha most outsourcers, due to the more distributed ature of the offerig. Of the risks outlied above we cosider oly two to be sigificatly more applicable to Cloud Computig tha traditioal delivery models: those associated with multi-teacy due to the ew attack surface ot preset i sigle teat models; ad those associated with compliace particularly where compliace requiremets madate the use of physical audits or kowledge of the physical locatio of data assets. I the mai, though, orgaisatios eed to be far more clear-eyed about the risks associated with their curret delivery model. Idividual risks associated with outdated data cetres or legacy applicatios have frequetly bee accepted over the lifetime of the existig service ad o loger receive due cosideratio or re-evaluatio i a wider cotext. Similarly, thought eeds to be give to how data is maaged, secured ad trasported withi or Puttig Cloud security i perspective 3
4 betwee orgaisatios; for example how much sesitive data is still beig trasported o uecrypted devices such as memory sticks? O the other side of the coi, Cloud Computig ca offer sigificat security beefits to a orgaisatio. These iclude, iter alia, improved data cetre security, icreased resiliece, reduced reliace o portable media, ad greater cocetratio ad retetio of skilled security resource. Here, as elsewhere, those beefits eed to be weighed i the balace. Securig Cloud Computig First thigs first: o matter what the delivery model, security is still security ad the same priciples apply. Although implemeted security techologies ad processes vary, the essetial techiques of risk maagemet, by which we mea threat modellig, risk assessmet ad assurace o risk mitigatio measures, apply equally for a Cloud service model. May blue chip orgaisatios have established security architectures, ofte tied ito a wider eterprise architecture. Where possible, Cloud security should be maaged withi such existig frameworks, i a way that takes advatage of existig impact assessmets ad assurace requiremet defiitios. A proper level of itegratio will allow a orgaisatio to protect assets i a cosistet maer across all delivery models. Moreover, it removes the ufortuate tedecy to apply stricter cotrols i the Cloud wholesale simply because of the model rather tha ay uderlyig icrease i risk or threat. May orgaisatios have established security architectures, but may more do ot. What assistace is there for these orgaisatios? O the positive side, security guidace is ofte available from the providers themselves ad from idepedet forums like the Cloud Security Alliace ad the Jericho Forum. Both of these have bee workig o the implicatios of security i Cloud-like eviromets for some time. Furthermore, orgaisatios like Capgemii have experieced staff who ca advise o the implemetatio of secure Cloud services, ad ideed cotribute to these Cloud Security fora. Ay orgaisatio cosiderig movig to a Cloud-based service must coduct a thorough, hoest ad pragmatic risk assessmet. This must be based o the threats appropriate to the delivery model ad the busiess impacts of vulerabilities beig exploited. Of course, such a risk assessmet should take place for all ew services, ot merely those destied for the Cloud. Such risk assessmets eed to be owed by the busiess. It is the role of the risk maagemet professioal to idetify ad assess risk, it is for the busiess to decide whether that risk is acceptable. Ofte, the busiess may decide to accept a security risk i exchage for icreased busiess fuctioality a perfectly ratioal decisio provided it is based o a full uderstadig of the relevat iformatio. Failure to ivolve the busiess i the process of risk assessmet may lead to the icreasigly commo problem of shadow IT. This is the term for busiess uits bypassig existig IT operatios ad adoptig Cloud services directly. For oly two thigs are typically ecessary for Cloud Service adoptio: a Iteret coectio ad a credit card. If the IT or security departmets are see as ihibitors, busiess uits ca easily bypass those perceived to be blockig progress. If a risk assessmet has bee coducted ad risks are deemed acceptable to the busiess, subject to the implemetatio of appropriate techical cotrols ad processes (Capgemii utilises a security cotrols checklist based o the Cloud Security Alliace guidace), the certai actios eed to follow: 4
5 Busiess Process Outsourcig the way we see it 1.Cosider ay requiremets sourced from existig security architectures where available. These requiremets may dictate (for example) ecryptio requiremets, evaluatio levels for firewall techologies ad service level requiremets for processes such as user maagemet or icidet respose. 2.Take these requiremets, or those sourced from a more specific exercise, ad traslate them ito a form appropriate for the proposed Cloud service ad deploymet model, esurig that accoutabilities betwee the cosumer ad Cloud provider are clearly uderstood. Typically a ed-user orgaisatio will retai most security resposibility i a IaaS implemetatio where they are resposible for security from the operatig system upwards. Coversely, i a SaaS eviromet the provider must shoulder most of the security burde as a cosumer typically oly has access to the applicatio with o visibility of the uderlyig platform or ifrastructure. The PaaS eviromet is the most complex to uderstad (for example, a customer coded applicatio makig use of Provider coded APIs) ad so cocomitatly the split of security resposibilities ca also be complex. 3.Idetify a Cloud provider most able to meet the idetified profile for provider resposibilities. Providers may make may claims regardig the security of their services, ad establishig credibility is key. Optios iclude idepedet assurace (may Cloud providers are idepedetly certified to stadards such as ISO/IEC or have bee subject to SAS70 Type 2 audits), or coductig your ow security testig of the service (usually cotrolled uder stadard provider agreemets dictatig the scope of such exercises). For Capgemii's Cloud Service Solutios we have bee able to obtai improved terms ad coditios from our Cloud provider parters. These iclude improved rights of audit ad provide evidece of the additioal value ad ifluece offered by service itegrators. Available measures Orgaisatios must also cosider how to fulfil their resposibilities while esurig that providers operate as advertised. Fortuately, the wider IT market has log recogised the eed to implemet services securely i the Cloud. May Cloud vedors ow offer optioal services to improve the security of their stadard offers. A good example beig Amazo Web Services, who offer of a Virtual Private Cloud service. This attempts to mitigate some of the risks of multi-teacy by offerig security separatio through cryptographic meas. Should a orgaisatio wish to implemet further separatio betwee their data/service ad the Cloud provider usig software produced idepedetly of the Cloud provider, the similar fuctioality is also available from CohesiveFT via their VPNCubed product. Amazo also offers host-based firewalls that are used to cotrol commuicatios with customer cotaiers. Similarly Salesforce.com allows customers to cotrol which IP addresses have access to their service. Crucially, though, orgaisatios are ot limited to the cotrols provided by Cloud vedors. The growig popularity of federated idetity maagemet allows orgaisatios to maage the access rights of their users i the Cloud from withi their ow orgaisatioal boudary. The use of stadardsbased idetity maagemet ad federatio techologies also promotes trasparecy ad iteroperability betwee differet Cloud providers ad o-premise systems. Techologies such as those from PigIdetity help to make access to Cloud-based services seamless, as well as secure, eablig a more user-friedly experiece for both ed-users ad user Puttig Cloud security i perspective 5
6 admiistrators. For those orgaisatios that require two factor autheticatio, CRYPTOCard offer a maaged autheticatio service that eables secure toke-based autheticatio to be implemeted quickly, securely ad cost-effectively. It is importat to ote, here, that i almost all eviromets people, ad their access to systems ad data, represet the weakest spot i a security solutio. This is particularly true i Cloud eviromets where access typically comes via the Web browser. Here social egieerig attacks ca be extremely serious, usig techiques such as phishig or brute force guessig to obtai user passwords, or more direct uauthorised access via cross-site scriptig. As a example, corporate iformatio relatig to Twitter was recetly exposed after a attacker compromised a accout belogig to a Twitter employee. This accout also provided access to the employee s Google Docs ad Google Apps from where the cofidetial iformatio was obtaied. The use of a strog two-factor autheticatio mechaism would have frustrated this attack. Security moitorig must also be cosidered, ad becomes eve more vital whe services ad data are hosted outside orgaisatioal boudaries or distributed across multiple Cloud providers. There it becomes a critical cotrol to maitai visibility of service levels ad security. May techical cotrols are available to implemet such protective moitorig, some Cloud-specific (e.g. CatBird), some more geeric ad some of a cotractual ad procedural ature. The most appropriate tools will deped upo the service ad deploymet models i questio. While this paper does ot attempt to provide a exhaustive assessmet 6
7 busiess Process Outsourcig the way we see it of the security mechaisms for every Cloud Computig service ad sceario, it does show that solutios are available to mitigate the most commo security risks i a pragmatic ad sesible maer. Coclusio Assessig the security of the Cloud Service model caot sesibly be doe i isolatio. Istead it must be cosidered i its proper cotext amely i compariso with the iheret risks i more traditioal models. Adoptio of Cloud Computig is ot a risk-free exercise, but or is adoptio of a more traditioal model. While the Cloud has uique challeges, those challeges do ot mea it is iheretly isecure. Ideed, alterative IT delivery models have uique challeges of their ow. Moreover their challeges, such as maiteace of agig data cetres, retetio of qualified staff, ad lack of IT flexibility or wasteful use of resources, might easily be see as more sigificat. Therefore, as a rule, security cocers should ot be a block to the adoptio of Cloud Computig. There may be data or services that are ot appropriate to place o a multi-teat Cloud service, which is perfectly uderstadable due to specific compliace requiremets or its extremely high value to the busiess. Orgaisatios eed to be sesible, busiess-focused ad pragmatic about Cloud-sourcig. Decisios should be arrived at through a uderstadig of busiess risk that looks hoestly at the associated risk withi more traditioal delivery models. Frak appraisal, ot istictive fear, should iform those decisios. Puttig Cloud security i perspective 7
8 About Capgemii Capgemii, oe of the world's foremost providers of cosultig, techology ad outsourcig services, eables its cliets to trasform ad perform through techologies. Capgemii provides its cliets with isights ad capabilities that boost their freedom to achieve superior results through a uique way of workig, the Collaborative Busiess Experiece TM. The Group relies o its global delivery model called Rightshore, which aims to get the right balace of the best talet from multiple locatios, workig as oe team to create ad deliver the optimum solutio for cliets. Preset i 40 coutries, Capgemii reported 2010 global reveues of EUR 8.7 billio ad employs aroud 110,000 people worldwide. More iformatio is available at Rightshore is a trademark belogig to Capgemii Lee Newcombe Ph.D. Security Cosultat lee.ewcombe@capgemii.com Capgemii 11, Rue de Tilsitt Paris Frace Phoe +33 (0) Fax +33 (0) Copyright 2010 Capgemii. All rights reserved.
Making training work for your business
Makig traiig work for your busiess Itegratig core skills of laguage, literacy ad umeracy ito geeral workplace traiig makes sese. The iformatio i this pamphlet will help you pla for ad build a successful
More informationBusiness Application Services. Business Applications that provide value to your enterprise.
Busiess Applicatio Services Busiess Applicatios that provide value to your eterprise. Sesiple s expertise ca help orgaizatio decode the performace issues ad trasform them ito valuable beefits that meet
More informationSilver Lining of Cloud Computing
White Paper Silver Liig of Cloud Computig - Key Priciples ad Best Practices CXOs eed to evaluate differet deploymet models, service models ad key characteristics of the cloud to implemet the precise spectrum
More informationoptimise your investment in Microsoft technology. Microsoft Consulting Services from CIBER
optimise your ivestmet i Microsoft techology. Microsoft Cosultig Services from Microsoft Cosultig Services from MICROSOFT CONSULTING SERVICES ca help with ay stage i the lifecycle of adoptig Microsoft
More informationleasing Solutions We make your Business our Business
if you d like to discover how Bp paribas leasig Solutios Ca help you to achieve your goals please get i touch leasig Solutios We make your Busiess our Busiess We look forward to hearig from you you ca
More informationConfiguring Additional Active Directory Server Roles
Maual Upgradig your MCSE o Server 2003 to Server 2008 (70-649) 1-800-418-6789 Cofigurig Additioal Active Directory Server Roles Active Directory Lightweight Directory Services Backgroud ad Cofiguratio
More informationAuthentication - Access Control Default Security Active Directory Trusted Authentication Guest User or Anonymous (un-authenticated) Logging Out
FME Server Security Table of Cotets FME Server Autheticatio - Access Cotrol Default Security Active Directory Trusted Autheticatio Guest User or Aoymous (u-autheticated) Loggig Out Authorizatio - Roles
More informationWhat is IT Governance?
30 Caada What is IT Goverace? ad why is it importat for the IS auditor By Richard Brisebois, pricipal of IT Audit Services, Greg Boyd, Director ad Ziad Shadid, Auditor. from the Office of the Auditor Geeral
More informationclient communication
CCH Portal cliet commuicatio facig today s challeges Like most accoutacy practices, we ow use email for most cliet commuicatio. It s quick ad easy, but we do worry about the security of sesitive data.
More informationGOOD PRACTICE CHECKLIST FOR INTERPRETERS WORKING WITH DOMESTIC VIOLENCE SITUATIONS
GOOD PRACTICE CHECKLIST FOR INTERPRETERS WORKING WITH DOMESTIC VIOLENCE SITUATIONS I the sprig of 2008, Stadig Together agaist Domestic Violece carried out a piece of collaborative work o domestic violece
More information(VCP-310) 1-800-418-6789
Maual VMware Lesso 1: Uderstadig the VMware Product Lie I this lesso, you will first lear what virtualizatio is. Next, you ll explore the products offered by VMware that provide virtualizatio services.
More informationIT Support. 020 8269 6878 n www.premierchoiceinternet.com n support@premierchoiceinternet.com. 30 Day FREE Trial. IT Support from 8p/user
IT Support IT Support Premier Choice Iteret has bee providig reliable, proactive & affordable IT Support solutios to compaies based i Lodo ad the South East of Eglad sice 2002. Our goal is to provide our
More informationThe ERP Card-Solution. The power, control and efficiency of ERP combined with the ease-of-use and financial benefits of a P-Card.
The ERP Card-Solutio Xpoetial - It's about Itegratio The power, cotrol ad efficiecy of ERP combied with the ease-of-use ad fiacial beefits of a P-Card. TM poetial The ERP-Card Solutio P-Cards ad ERP For
More informationWells Fargo Insurance Services Claim Consulting Capabilities
Wells Fargo Isurace Services Claim Cosultig Capabilities Claim Cosultig Claims are a uwelcome part of America busiess. I a recet survey coducted by Fulbright & Jaworski L.L.P., large U.S. compaies face
More informationSOCIAL MEDIA. Keep the conversations going
SOCIAL MEDIA Keep the coversatios goig Social media is where most of the world is. It is therefore a ope source of cosumer data, a chael of commuicatio ad a platform for establishig relatioships with customers.
More information3G Security VoIP Wi-Fi IP Telephony Routing/Switching Unified Communications. NetVanta. Business Networking Solutions
3G Security VoIP Wi-Fi IP Telephoy Routig/Switchig Uified Commuicatios NetVata Busiess Networkig Solutios Opportuity to lower Total Cost of Owership ad improve Retur o Ivestmet The ADTRAN Advatage ADTRAN
More informationSecurity Functions and Purposes of Network Devices and Technologies (SY0-301) 1-800-418-6789. Firewalls. Audiobooks
Maual Security+ Domai 1 Network Security Every etwork is uique, ad architecturally defied physically by its equipmet ad coectios, ad logically through the applicatios, services, ad idustries it serves.
More informationU.S.-Based Project Centers Offer Superior Effectiveness Over Offshore in CRM Implementations
U.S.-Based Project Ceters Offer Superior Effectiveess Over Offshore i CRM Implemetatios A Eagle Creek Software Services White Paper, 2012 Today s busiess eviromet is more competitive tha ever. I order
More informationHiTech. White Paper. Adopting an Effective Strategy for Seamless Adoption of Cloud Integration
HiTech White Paper Adoptig a Effective Strategy for Seamless Adoptio of Cloud Itegratio About the Author Vekata Nagedra Vekata Nagedra M. is a EAI ad Service Orieted Architecture (SOA) solutio architect
More informationPRICE BAILEY CHARITIES & NOT FOR PROFIT THE RIGHT ADVICE FOR LIFE
PRICE BAILEY CHARITIES & NOT FOR PROFIT THE RIGHT ADVICE FOR LIFE OUR EXPERTISE To arrage a meetig with a member of for more iformatio about Price Bailey, At Price Bailey, we recogise that charity ad ot-for-profit
More informationEnhancing Oracle Business Intelligence with cubus EV How users of Oracle BI on Essbase cubes can benefit from cubus outperform EV Analytics (cubus EV)
Ehacig Oracle Busiess Itelligece with cubus EV How users of Oracle BI o Essbase cubes ca beefit from cubus outperform EV Aalytics (cubus EV) CONTENT 01 cubus EV as a ehacemet to Oracle BI o Essbase 02
More informationFPO. A global telecom s strategy. for Canada
FPO A global telecom s strategy for Caada A global telecom s strategy for Caada Global telecommuicatios compaies that support multi-atioal corporatios (MNC) are tasked with providig a cosistet cliet experiece
More informationSmart Connected Products & The Internet of Things
Smart Coected Products & The Iteret of Thigs Who we are Taget delivers Talet Globally. Established for 40 years we specialise i delivery of iovative & tailored talet solutios to customers aroud the world.
More informationLEASE-PURCHASE DECISION
Public Procuremet Practice STANDARD The decisio to lease or purchase should be cosidered o a case-by case evaluatio of comparative costs ad other factors. 1 Procuremet should coduct a cost/ beefit aalysis
More informationCCH Accounts Production
CCH Accouts Productio accouts productio facig today s challeges Preparig statutory ad fiacial accouts is a core activity for our practice, as it is for may professioal firms. Although legislatio ad accoutig
More informationAgency Relationship Optimizer
Decideware Developmet Agecy Relatioship Optimizer The Leadig Software Solutio for Cliet-Agecy Relatioship Maagemet supplier performace experts scorecards.deploymet.service decide ware Sa Fracisco Sydey
More informationPrescribing costs in primary care
Prescribig costs i primary care LONDON: The Statioery Office 13.50 Ordered by the House of Commos to be prited o 14 May 2007 REPORT BY THE COMPTROLLER AND AUDITOR GENERAL HC 454 Sessio 2006-2007 18 May
More informationOnline Banking. Internet of Things
Olie Bakig & The Iteret of Thigs Our icreasigly iteretcoected future will mea better bakig ad added security resposibilities for all of us. FROM DESKTOPS TO SMARTWATCHS Just a few years ago, Americas coducted
More informationODBC. Getting Started With Sage Timberline Office ODBC
ODBC Gettig Started With Sage Timberlie Office ODBC NOTICE This documet ad the Sage Timberlie Office software may be used oly i accordace with the accompayig Sage Timberlie Office Ed User Licese Agreemet.
More informationPatentability of Computer Software and Business Methods
WIPO-MOST Itermediate Traiig Course o Practical Itellectual Property Issues i Busiess November 10 to 14, 2003 Patetability of Computer Software ad Busiess Methods Tomoko Miyamoto Patet Law Sectio Patet
More informationAgenda. Outsourcing and Globalization in Software Development. Outsourcing. Outsourcing here to stay. Outsourcing Alternatives
Outsourcig ad Globalizatio i Software Developmet Jacques Crocker UW CSE Alumi 2003 jc@cs.washigto.edu Ageda Itroductio The Outsourcig Pheomeo Leadig Offshore Projects Maagig Customers Offshore Developmet
More informationFlood Emergency Response Plan
Flood Emergecy Respose Pla This reprit is made available for iformatioal purposes oly i support of the isurace relatioship betwee FM Global ad its cliets. This iformatio does ot chage or supplemet policy
More informationDomain 1: Identifying Cause of and Resolving Desktop Application Issues Identifying and Resolving New Software Installation Issues
Maual Widows 7 Eterprise Desktop Support Techicia (70-685) 1-800-418-6789 Domai 1: Idetifyig Cause of ad Resolvig Desktop Applicatio Issues Idetifyig ad Resolvig New Software Istallatio Issues This sectio
More informationOn Interoperability Issues of Electronic Signature. Pavol Frič
O Iteroperability Issues of Electroic Sigature Pavol Frič O Iteroperability Issues of Electroic Sigature Cotet Motivatio The past What has bee achieved The Preset What problems we are facig The Future
More informationAssessment of the Board
Audit Committee Istitute Sposored by KPMG Assessmet of the Board Whe usig a facilitator, care eeds to be take if the idividual is i some way coflicted due to the closeess of their relatioship with the
More informationEnterprise Security & Risk Management. White Paper. Securing the Future with Next-Generation Data Center Security
Eterprise Security & Risk Maagemet White Paper Securig the Future with Next-Geeratio Data Ceter Security About the Author Prikshit Goel Prikshit Goel heads the Ceter of Excellece (CoE) for Maaged Security
More informationINVESTMENT PERFORMANCE COUNCIL (IPC) Guidance Statement on Calculation Methodology
Adoptio Date: 4 March 2004 Effective Date: 1 Jue 2004 Retroactive Applicatio: No Public Commet Period: Aug Nov 2002 INVESTMENT PERFORMANCE COUNCIL (IPC) Preface Guidace Statemet o Calculatio Methodology
More informationQUADRO tech. PST Flightdeck. Put your PST Migration on autopilot
QUADRO tech PST Flightdeck Put your PST Migratio o autopilot Put your PST Migratio o Autopilot A moder aircraft hardly remids its pilots of the early days of air traffic. It is desiged to eable flyig as
More informationCCH Practice Management
1 CCH Practice Maagemet practice maagemet facig today s challeges Every year it seems we face more regulatios, growig cliet expectatios ad lower margis o our compliace work. It s a tough time for a accoutig
More informationA Balanced Scorecard
A Balaced Scorecard with VISION A Visio Iteratioal White Paper Visio Iteratioal A/S Aarhusgade 88, DK-2100 Copehage, Demark Phoe +45 35430086 Fax +45 35434646 www.balaced-scorecard.com 1 1. Itroductio
More informationFIRE PROTECTION SYSTEM INSPECTION, TESTING AND MAINTENANCE PROGRAMS
STRATEGIC OUTCOMES PRACTICE TECHNICAL ADVISORY BULLETIN February 2011 FIRE PROTECTION SYSTEM INSPECTION, TESTING AND MAINTENANCE PROGRAMS www.willis.com Natioal Fire Protectio Associatio (NFPA) #25 a mai
More informationHow To Understand And Understand The Risks Of Compliace
A Valuable Tool to Uderstad ad Maage Your Compliace Risks The Uique Alterative to the Big Four Compliace is icreasigly beig idetified as a key risk withi a orgaizatio s eterprise risk maagemet (ERM) programs.
More informationOn-Premise CRM to Salesforce Migration - Benefits, Challenges and Best Practices
White Paper O-Premise CRM to Salesforce Migratio - Beefits, Challeges ad Best Practices With the advet of cloud computig, orgaizatios are lookig to move their Customer Relatioship Maagemet (CRM) applicatios
More informationRISK TRANSFER FOR DESIGN-BUILD TEAMS
WILLIS CONSTRUCTION PRACTICE I-BEAM Jauary 2010 www.willis.com RISK TRANSFER FOR DESIGN-BUILD TEAMS Desig-builD work is icreasig each quarter. cosequetly, we are fieldig more iquiries from cliets regardig
More informationDigital Enterprise Unit. White Paper. Web Analytics Measurement for Responsive Websites
Digital Eterprise Uit White Paper Web Aalytics Measuremet for Resposive Websites About the Authors Vishal Machewad Vishal Machewad has over 13 years of experiece i sales ad marketig, havig worked as a
More informationMessage Exchange in the Utility Market Using SAP for Utilities. Point of View by Marc Metz and Maarten Vriesema
Eergy, Utilities ad Chemicals the way we see it Message Exchage i the Utility Market Usig SAP for Utilities Poit of View by Marc Metz ad Maarte Vriesema Itroductio Liberalisatio of utility markets has
More informationIdeate, Inc. Training Solutions to Give you the Leading Edge
Ideate, Ic. Traiig News 2014v1 Ideate, Ic. Traiig Solutios to Give you the Leadig Edge New Packages For All Your Traiig Needs! Bill Johso Seior MEP - Applicatio Specialist Revit MEP Fudametals Ad More!
More informationAmendments to employer debt Regulations
March 2008 Pesios Legal Alert Amedmets to employer debt Regulatios The Govermet has at last issued Regulatios which will amed the law as to employer debts uder s75 Pesios Act 1995. The amedig Regulatios
More informationCCH Accountants Starter Pack
CCH Accoutats Starter Pack We may be a bit smaller, but fudametally we re o differet to ay other accoutig practice. Util ow, smaller firms have faced a stark choice: Buy cheaply, kowig that the practice
More informationSafety Requirements engineering and Proof of implementation
Presetatio to DVClub commuity October 20 th 2015 Safety Requiremets egieerig ad Proof of implemetatio Test ad Verificatio Solutios Deliverig Tailored Solutios for Hardware Verificatio ad Software Testig
More informationSecuring your business
Iteratioal Chamber of Commerce The world busiess orgaizatio Securig your busiess A compaio for small or etrepreeurial compaies to the 2002 OECD Guidelies for the security of etworks ad iformatio systems:
More informationAn Approach to Fusion CRM Adoption
White Paper A Approach to Fusio CRM Adoptio May eterprise customers are ivestig time ad effort to evaluate how ext-geeratio Oracle eterprise applicatios will chage iteractios with iteral ad exteral stakeholders.
More informationA Guide to Better Postal Services Procurement. A GUIDE TO better POSTAL SERVICES PROCUREMENT
A Guide to Better Postal Services Procuremet A GUIDE TO better POSTAL SERVICES PROCUREMENT itroductio The NAO has published a report aimed at improvig the procuremet of postal services i the public sector
More informationMunicipal Infrastructure
Muicipal Ifrastructure ROLES AND RESPONSIBILITIES of Natioal Sector Departmets, Provicial Couterparts ad Muicipalities dplg NT PW DWaF SRSa DoT DEaT DME Doh Policy Plaig Implemetatio Service Provisio M
More informationThe Forgotten Middle. research readiness results. Executive Summary
The Forgotte Middle Esurig that All Studets Are o Target for College ad Career Readiess before High School Executive Summary Today, college readiess also meas career readiess. While ot every high school
More informationELearning courses Competition / Antitrust
ELearig courses Competitio / Atitrust Clifford Chace ad Thomso Reuters elearig Regulators are takig a icreasigly tough stace o competitio / atitrust compliace. Failure to comply with the relevat legislatio
More informationIntelliSOURCE Comverge s enterprise software platform provides the foundation for deploying integrated demand management programs.
ItelliSOURCE Comverge s eterprise software platform provides the foudatio for deployig itegrated demad maagemet programs. ItelliSOURCE Demad maagemet programs such as demad respose, eergy efficiecy, ad
More informationSupply Chain Management
Supply Chai Maagemet LOA Uiversity October 9, 205 Distributio D Distributio Authorized to Departmet of Defese ad U.S. DoD Cotractors Oly Aim High Fly - Fight - Wi Who am I? Dr. William A Cuigham PhD Ecoomics
More informationBaan Service Master Data Management
Baa Service Master Data Maagemet Module Procedure UP069A US Documetiformatio Documet Documet code : UP069A US Documet group : User Documetatio Documet title : Master Data Maagemet Applicatio/Package :
More informationThe Canadian Council of Professional Engineers
The Caadia Coucil of Professioal Egieers Providig leadership which advaces the quality of life through the creative, resposible ad progressive applicatio of egieerig priciples i a global cotext Egieerig
More informationWILLIS FORTUNE 1000 CYBER DISCLOSURE REPORT
Securig cyberspace is oe of the most importat ad urget challeges of our time. I light of the growig threat ad the atioal security ad ecoomic ramificatios of successful attacks agaist America busiesses,
More informationDomain 1: Configuring Domain Name System (DNS) for Active Directory
Maual Widows Domai 1: Cofigurig Domai Name System (DNS) for Active Directory Cofigure zoes I Domai Name System (DNS), a DNS amespace ca be divided ito zoes. The zoes store ame iformatio about oe or more
More informationTo c o m p e t e in t o d a y s r e t a i l e n v i r o n m e n t, y o u n e e d a s i n g l e,
Busiess Itelligece Software for Retail To c o m p e t e i t o d a y s r e t a i l e v i r o m e t, y o u e e d a s i g l e, comprehesive view of your busiess. You have to tur the decisio-makig of your
More informationRadio Dispatch Systems
Radio Dispatch Systems ZETRON DISPATCH SOLUTIONS: AT THE CENTER OF YOUR CRITICAL OPERATIONS Your dispatch system is the ceterpoit through which your key operatios are coordiated ad cotrolled. That s why
More informationThe Importance of Change Management in Application Managed Services Outsourcing
A Poit of View The Importace of Chage Maagemet i Applicatio Maaged Services Outsourcig Itroductio Sice its arrival i the early 1960s, IT outsourcig has evolved sigificatly. Now ofte kow as maaged services,
More informationGrow your business with savings and debt management solutions
Grow your busiess with savigs ad debt maagemet solutios A few great reasos to provide bak ad trust products to your cliets You have the expertise to help your cliets get the best rates ad most competitive
More informationImproving NEC Contract Change Management with CCM
Improvig NEC Cotract Chage Maagemet with CCM Professor Mig Su Tejas Oza Jue 2008 The Authors Professor Mig Su is the Director of Costructio ad Property Research Cetre at the Uiversity of the West of Eglad.
More informationCREATIVE MARKETING PROJECT 2016
CREATIVE MARKETING PROJECT 2016 The Creative Marketig Project is a chapter project that develops i chapter members a aalytical ad creative approach to the marketig process, actively egages chapter members
More informationA GUIDE TO BUILDING SMART BUSINESS CREDIT
A GUIDE TO BUILDING SMART BUSINESS CREDIT Establishig busiess credit ca be the key to growig your compay DID YOU KNOW? Busiess Credit ca help grow your busiess Soud paymet practices are key to a solid
More informationKEY CONSIDERATIONS ABOUT SELECTING A CRM SYSTEM IN THE INSURANCE SECTOR
THOUGHT LEADERSHIP KEY CONSIDERATIONS ABOUT SELECTING A CRM SYSTEM IN THE INSURANCE SECTOR I a market where it costs eight times more to wi ew customers tha retai the oes you already have, ay errors caused
More informationSecuring the Virtualized Data Center with Next-Generation Firewalls
Securig the Virtualized Data Ceter with Next-Geeratio Firewalls November 2012 Palo Alto Networks: Securig the Virtualized Data Ceter with Next-Geeratio Firewalls Table of Cotets Executive Summary 3 Evolutio
More informationHow To Find FINANCING For Your Business
How To Fid FINANCING For Your Busiess Oe of the most difficult tasks faced by the maagemet team of small busiesses today is fidig adequate fiacig for curret operatios i order to support ew ad ogoig cotracts.
More informationXantaro Maintenance Services & Operations. XTAC User Guide. UK Edition
Xataro Maiteace Services & Operatios XTAC User Guide UK Editio XTAC WORKFLOW The Xataro Techical Assistace Cetre (XTAC) is the cetral iterface for all techical questios ad topics for products ad services
More informationCCH CRM Books Online Software Fee Protection Consultancy Advice Lines CPD Books Online Software Fee Protection Consultancy Advice Lines CPD
Books Olie Software Fee Fee Protectio Cosultacy Advice Advice Lies Lies CPD CPD facig today s challeges As a accoutacy practice, maagig relatioships with our cliets has to be at the heart of everythig
More informationThe suitability of XDS-I for national sharing in the NHS in England
The suitability of XDS-I for atioal sharig i the NHS i Eglad Movig to a XDS-I architecture to support image ad report sharig across the LSP-provided PACS ad RIS estate i Eglad is techically possible but,
More informationDomain 1: Designing a SQL Server Instance and a Database Solution
Maual SQL Server 2008 Desig, Optimize ad Maitai (70-450) 1-800-418-6789 Domai 1: Desigig a SQL Server Istace ad a Database Solutio Desigig for CPU, Memory ad Storage Capacity Requiremets Whe desigig a
More informationBusiness Intelligence on the Cloud: Overview and Use Cases
White Paper Busiess Itelligece o the Cloud: Overview ad Use Cases The use of Busiess Itelligece (BI) i the cloud is a game-chager, as it makes BI affordable ad easily available as compared to traditioal
More informationFull Lifecycle Project Cost Controls
Full Lifecycle Project Cost Cotrols EcoSys EPC is a ext geeratio plaig ad cost cotrols software solutio deliverig best practices for full lifecycle project cost maagemet i a itegrated, easy-to-use web
More informationThe Social Business System - connecting people and content
aslkj dlfkjd lk jdfjk lkj sldk a dlk ldkd alkskd kdkddkej k dkd e tkah kt hek lkejlke dlkeiueor wleeiueie iueor kd dlfkjd lk jdfjk lkj sldk a dlk ldkd keroi The Social Busiess System - coectig people ad
More informationAdvancement FORUM. www.acmaweb.org/advancement CULTIVATING LEADERS IN CASE MANAGEMENT
H E A L T H C A R E D E L I V E R Y S Y S T E M C A S E M A N A G E M E N T E D U C A T I O N Advacemet FORUM CULTIVATING LEADERS IN CASE MANAGEMENT DATES AND LOCATIONS LOS ANGELES, CA DECEMBER 11 DALLAS,
More informationA guide to School Employees' Well-Being
A guide to School Employees' Well-Beig Backgroud The public school systems i the Uited States employ more tha 6.7 millio people. This large workforce is charged with oe of the atio s critical tasks to
More informationauction a guide to buying at Residential
Residetial a guide to buyig at auctio Allsop is the market leader for residetial ad commercial auctios i the UK Aually sells approximately 1 billio of property at auctio i the UK Holds at least seve residetial
More informationEnabling Offshore Collaboration in German Engineering Services
White Paper Eablig Offshore Collaboratio i Germa Egieerig Services Germa egieerig compaies, who are market leaders i their respective domais, are experiecig challeges i terms of acquirig sufficiet egieerig
More informationANALYTICS. Insights that drive your business
ANALYTICS Isights that drive your busiess Eterprises are trasformig their busiesses by supplemetig their databases with real ad up-to-date customer data. Aalytics, as a catalyst, refies raw data ad aligs
More informationion Wellness Solution
ion Welless Solutio Overview As the competitio i the welless idustry grows more itese, players feel the eed to set i place effective systems to attract, service, ad retai customers. The focus today, is
More informationTrustwave Leverages OEM Partnerships to Deepen SIEM Market Penetration
Trustwave Leverages OEM Parterships to Deepe SIEM Market Peetratio Accelerated lauch of ew security appliaces delivers reveue growth with assist from UNICOM Egieerig ad Dell OEM Solutios Itroductio Trustwave
More informationInventoryControl. The Complete Inventory Tracking Solution for Small Businesses
IvetoryCotrol The Complete Ivetory Trackig Solutio for Small Busiesses Regular Logo 4C Productivity Solutios for Small Busiesses Logo Outlie Get i cotrol of your ivetory with Wasp Ivetory Cotrol the complete
More informationViswanathan Ganapathy Daniel Logan
Healthcare White Paper The Heart of Healthcare Data SecurityDe-Riskig Test ad Productio Eviromets About the Authors Viswaatha Gaapathy Solutios Director, Healthcare Techology Excellece Viswaatha Gaapathy
More informationDomain 1 - Describe Cisco VoIP Implementations
Maual ONT (642-8) 1-800-418-6789 Domai 1 - Describe Cisco VoIP Implemetatios Advatages of VoIP Over Traditioal Switches Voice over IP etworks have may advatages over traditioal circuit switched voice etworks.
More informationPlatform Solution. White Paper. Transaction Based Pricing in BPO: In Tune with Changing Times
Platform Solutio White Paper Trasactio Based Pricig i BPO: I Tue with Chagig Times About the Author(s) Raj Agrawal Curret Desigatio Raj heads the Platform Solutios Uit at TCS. I his career spaig over 19
More informationDigital Enterprise Unit. White Paper. Multi-Device & Multi-OS Enterprise Mobility Strategy: What Your Organization Needs To Plan For
Digital Eterprise Uit White Paper Multi-Device & Multi-OS Eterprise Mobility Strategy: What Your Orgaizatio Needs To Pla For About the Author Rahul Trisal Rahul is a seior digital strategy cosultat with
More informationContract Governance Guidelines. April 2014
Cotract Goverace Guidelies April 2014 1 2 Ackowledgemet The Departmet of Family ad Commuity Services (FACS) uder cotract with CPLI Pty Limited ad Terece Burke, ad usig The Burke Four Pillars Model of Cotract
More informationSupply Chain Management
Supply Chai Maagemet Douglas M. Lambert, Ph.D. The Raymod E. Maso Chaired Professor ad Director, The Global Supply Chai Forum Supply Chai Maagemet is NOT a New Name for Logistics The Begiig of Wisdom Is
More informationImproving corporate functions using shared services
Improvig corporate fuctios usig shared services REPORT BY THE COMPTROLLER AND AUDITOR GENERAL HC 9 Sessio 2007-2008 29 November 2007 The Natioal Audit Office scrutiises public spedig o behalf of Parliamet.
More informationManaged Oracle Database Service
Maaged Oracle Database Service maaged oracle database service As a orgaisatio you eed to esure the highest levels of iformatio availability ad data protectio to support your applicatios. Dimesio Data ca
More information*The most important feature of MRP as compared with ordinary inventory control analysis is its time phasing feature.
Itegrated Productio ad Ivetory Cotrol System MRP ad MRP II Framework of Maufacturig System Ivetory cotrol, productio schedulig, capacity plaig ad fiacial ad busiess decisios i a productio system are iterrelated.
More informationfacing today s challenges As an accountancy practice, managing relationships with our clients has to be at the heart of everything we do.
CCH CRM cliet relatios facig today s challeges As a accoutacy practice, maagig relatioships with our cliets has to be at the heart of everythig we do. That s why our CRM system ca t be a bolt-o extra it
More informationSANLAM DIRECT MARKETING DIVISION BELLVILLE, SOUTH AFRICA
JANSSEN RESEARCH FOUNDATION SANLAM DIRECT MARKETING DIVISION BELLVILLE, SOUTH AFRICA AFRICA EXCELLENCE AWARDS: WORKFLOW, MERIT EXECUTIVE SUMMARY The life isurace busiess i South Africa is curretly uder
More informationCreating an Agile BI Environment
White Paper Creatig a Agile BI Eviromet The rapidly chagig IT ecoomy has iflueced the Busiess Itelligece (BI) systems to look at iovative ways to be equally fast ad flexible. There is a eed to be more
More informationFive Effective Testing Practices to Assure Meaningful Use of Electronic Health Records
Poit of View Five Effective Testig Practices to Assure Meaigful of Electroic Health Records Abstract Meaigful ' has bee the buzzword i the US healthcare commuity as every care provider is gearig up for
More information