Securing public cloud

Transcription

1 Securing public cloud The value of trust in the supply chain John Parkinson SaaS Assured Business Manager

2 The shift to cloud and SaaS SaaS dominant due to maturity, benefits and widespread acceptance (Juniper) SaaS market will reach $131 billion by 2020 (Forester) Benefit and Opportunity Investment and development of cloud platform technologies and tools The commercial benefits of IaaS/SaaS services Availability, flexibility, scalability, accessibility, speed of deployment CIO survey using/planning to use cloud apps by end of 2014 Three quarters of medium sized organisations ( employees) Two thirds of large organisations (over 3000 employees) *Survey conducted by Vanson Bourne for NCC Group in May 2014

3 Risk and consequence The obvious risks. Public data security & availability Public service continuity. and the not so obvious 88% apps are not enterprise ready * 35% apps non-approved ** 2e2 Hosting provider running many application services Doors closed without notice High cost payments and delays to gain access Nirvanix software Failure of major supplier Client notification of impending failure Data extraction difficulties, costs and losses Energy sector company SaaS application in use when the supplier failed Software code available and installed successfully Problems encountered in managing the environment *Netskope Cloud Report July 2014 **Survey conducted by Frost and Sullivan for McAfee in Sept 2013

4 Supply chain failure impact Location really matters. On-premise software Application Continuity No loss of data Off-premise hosted software Immediate loss of service Loss of data to last client backup

5 What are the issues for public service users? What happens if my cloud supplier fails? Move on? Can I get all my data? Is it readily useable? Is my data secure? Keep the service running? Who will do this? What about other users? How would it work? Bring the service in-house? Do I have the knowledge? Do I have the resources? How would it work? What about contractual protection? Can I avoid service disruption? Do I have the knowledge?

6 Quantifying the issues *Survey conducted by Vanson Bourne on behalf of NCC Group November 2013 & May

7 Trust is a market opportunity. 32% of large organisations claim supplier viability as the principal reason for not adopting cloud applications 25% of all organisations say Disaster Recovery data availability is their main reason for not adopting cloud applications 40% of organisations say supplier viability is their major concern when adopting cloud applications, whilst 50% of all organisations say Disaster Recovery data availably is a major concern. Over 50% of SaaS Providers offered no contingency against failure *Survey conducted by Vanson Bourne on behalf of NCC Group in May

8 . and a public service issue 66% of organisations have no contractual plan to protect against supplier failure Over 50% have no continuity or data availability plan 53% surveyed said it will take them between 1-4 weeks to implement their contingency plan, whilst 21% stated over one month. What price public service impact and public perception? *Survey conducted by Vanson Bourne on behalf of NCC Group in May

9 The value in securing the cloud Proactive approach to business continuity Secure customer relationships and close new business deals Reassurance to customers using SaaS that the cloud is secure Competitive positioning and differentiation Service innovation in addressing cloud-specific risks Avoidance of public service interruption & loss of confidence Prevention of data loss & reputation damage Time to transition to alternative arrangements Proactive risk mitigation Demonstration of good governance Business development and retention Public confidence and enhanced cloud utilisation

10 North America Atlanta Austin Chicago Mountain View New York San Francisco Seattle Europe Manchester - Head Office Cheltenham Edinburgh Leatherhead London Milton Keynes Amsterdam Copenhagen Munich Zurich Australia Sydney