Cloud Computing--Efficiency and Security

Transcription

1 Cloud Computing--Efficiency and Security Mick Atton, VP & Chief Architect Thomson Reuters--Legal July 22, 2013

2 Thomson Reuters Thomson Reuters is the leading source of intelligent information for the world's businesses and professionals Headquarters Thomson Reuters 3 Times Square New York, NY 2012 Revenues $US 12.4Billion Americas: 58% EMEA: 30% Asia: 12% Footprint Approximately 60,000 employees in more than 100 countries 2

3 What is Cloud Computing? "A model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (i.e., hardware and software) that can be rapidly provisioned and released with minimal management effort or service provider interaction" from NIST Special Publication The NIST Definition of Cloud Computing (Sept. 2011) 3

4 How is Cloud Computing used? Deployment options PUBLIC (Available to everyone) Cost efficient & scalable, but information is more vulnerable to security breaches PRIVATE (Available to a single org.) More secure and configurable, but higher start-up & on-going costs HYBRID (Public and Private) Using Public cloud for interaction with citizens, and Private Cloud for storing confidential data COMMUNITY (Shared) Computing resources are shared between orgs. with common needs Service options SaaS (software as a service) Shared use of standard software such as Concourse, Case Logistix, Case Notebook, Box, Office365 PaaS (platform as a service) Shared use of technology platforms like Amazon Web Services, Windows Azure IaaS (infrastructure as a service) Shared use of hardware such as Rack Space, EMC Atmos Storage, Skydrive 4

5 Where could Cloud Computing be applied? Top services or applications moving to the Cloud (Feb. 14, 2013) 40% FEDERAL STATE AND LOCAL 0% 39% 37% 33% Conferencing Messaging Office and and Productivity Collaboration Suites 19% 17% 15% Storage Conferencing and Collaboration Messaging / Business Process Apps / Compute Power Internal Assessment Conduct internal review of IT asset portfolio--age/sophistication/interdependence, organizational readiness and management processes before forming a strategy Make realistic assessment of usability of initial cloud hosted services concentrating on low complexity to implement especially with respect to legacy integration Identify & engage a trusted technology partner in legal & professional workflow rather than a purely commercial cloud supplier 5

6 What issues are being faced in Cloud Computing? Ensuring security of systems and data 68% Compatibility with legacy systems, processes 51% Lack of expertise/experience in this area Standards are still evolving 31% 29% Lack of government framework 24% Cloud products/services still unproven Cultural resistance within agency or IT department Establishing a compelling business case Lack of acquisition vehicle for cloud services Other 17% 15% 10% 4% 4% 0% 70% Note: Three responses allowed Base: 83 respondents in September 2012 and 108 in February 2011 using or assessing cloud services Data: Information Week Federal Government Cloud Computing Survey of federal government technology professionals 6

7 Cloud Computing--balancing risk & benefit Benefits Lower operational costs due to resource pooling and metered consumption On-demand self-service & rapid expansion/contraction of capacity Sophisticated, secure infrastructure approach offered by commercial providers (look for NIST , ISO 27001, SOC2 attestation) Reliable disaster backup & recovery Consistent workflow integration Risks Advanced persistent security threat Ability to manage complex environments across the cloud Loss-of-control of IT infrastructure Incompatibility or inability to integrate with legacy products Nascent government & professional standards Cultural and technical resistance from IT department 7

8 Cloud Computing industry example-thomson Reuters Concourse A SECURE, CLOUD-HOSTED SUITE OF PRODUCTS TO HELP GOVERNMENT LAW DEPARTMENTS BE MORE EFFICIENT Manage matters with features such as integrated legal research and Outlook synchronization Organize, share & repurpose documents Collaborate with individuals inside and outside the department Apply new workflow tools across entire matter collection CONCOURSE DATA IS HOUSED AT THOMSON REUTERS' WORLD-CLASS DATACENTERS OPERATED IN EAGAN, MINNESOTA Concourse's AES 256-bit encryption is at the highest industry & defense standard ensuring that confidential documents are protected against unauthorized access The infrastructure and operating policies protecting your sensitive data follow the same strict standards and audited compliance that has served government, legal and corporate organizations for many years 8

9 Thomson Reuters a trusted partner in legal technology [email protected]