CSO Cloud Computing Study January 2012
Purpose and Methodology Survey Sample Survey Method Fielded Dec 20, 2011-Jan 8, 2012 Total Respondents Margin of Error +/- 7.3% Audience Base Survey Goal 178 security decisionmakers CSOonline.com Collection Number of Questions Online Questionnaire 25 (incl. demographics) To measure cloud computing trends among security decision-makers including usage and plans across various cloud service and deployment models, investments, business drivers and impact on business strategy and plans. 2
Cloud Computing Definitions Cloud Computing a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction. Cloud Deployment Models Community Cloud Shares infrastructure between several organizations from a specific community with common concerns (e.g., security, compliance, jurisdiction), whether managed internally or by a third-party and hosted internally or externally. Public Cloud The cloud infrastructure is provisioned by the cloud provider for open use by the general public. It may be owned, managed, and operated by a business, academic, or government organization, or some combination of them. Private Cloud Infrastructure provisioned solely for a single organization, whether managed internally or by a third-party and hosted internally or externally. Hybrid Cloud A composition of two or more clouds (private, community, or public) that remain unique entities but are bound together, offering the benefits of multiple deployment models. It can also be defined as multiple cloud systems that are connected in a way that allows programs and data to be moved easily from one deployment system to another. Cloud Service Models Software as a Service (SaaS) Employs the provider s applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (e.g., web-based email), or a program interface. The provider manages or controls the underlying cloud infrastructure with the possible exception of limited user-specific application configuration settings. Platform as a Service (PaaS) Consumer-created or acquired applications supported by the provider are deployed onto the cloud infrastructure which the provider manages or controls. The consumer has control over the deployed applications and possible configuration settings for the application-hosting environment. Infrastructure as a Service (IaaS) The consumer provisions processing, storage, networks, and other fundamental computing resources where the consumer is able to deploy and run arbitrary software, which can include operating systems and applications. The provider manages or controls the underlying cloud infrastructure while the consumer has control over operating systems, storage, and deployed applications; and possible limited control of select networking components (e.g., host firewalls). 3 Source: National Institute of Standards and Technology (NIST)
Private Cloud Most Readily Adopted and Growth Expected to Continue 30% 31% 23% 23% 19% 15% 11% 13% 11% 12% 8% 7% 8% 5% 4% 4% Private Cloud Public Cloud Hybrid Cloud Community Cloud Currently (1,000+) Currently (<1,000) 18 Months from Now (1,000+) 18 Months from Now (<1,000) 4 Q. Approximately, how much of your organization s information presently resides in each of the following cloud deployment models? Q. Approximately, how much of your organization s information do you expect will reside in each of the following cloud deployment models 18 months from now?
Enterprise Cloud Budgets Increasing Enterprise organizations to invest an average of $2,884,000 in cloud-based services computing in the next year 32% 36% 2% 1% 63% 67% 34% Of IT Budgets Currently Allocated to Cloud-Based Services Computing with a +9% overall change in the next year 2012 (1,000+) 2011 (1,000+) Increase Decrease No Change 5 Q. Do you expect the percentage of your organization's IT budget allocated to cloud-based services computing to increase, decrease, or remain the same over the next 12 months? Approximately how much will your organization invest in cloud-based services computing (including software, services, training and other related costs) in the next 12 months?
Security Measures Instill Confidence 80% 14% 6% Not very confident Not at all confident Very confident/ Somewhat confident 6 Q. Considering the current polices and security measures in place at your organization how confident are you in the security of the data your organization has placed in the cloud?
Vendor Security Capabilities Key to Strategic Value Experience in establishing effective security policies and procedures in the cloud Proven post-sales support & service Experience in establishing effective governance policies and procedures in the cloud 76% 82% 79% Offers the most cost effective model Ability to understand my business goals and objectives Experience in building and operating cloud environments in my vertical industry In-depth insight and expertise regarding cloud trends and direction 67% 65% 59% 58% Ability to differentiate their portfolio from that of their competitors Knowledge of how my organization operates/organizational structure 51% 51% Innovative ideas 40% Prior experience with this vendor 32% 7 Q. Please rate the importance of the following factors when evaluating cloud computing technology vendors as a strategic partner for your organization
Conclusions Migration to the Cloud is on solid ground and continuing. Private cloud is the most readily adopted, but public and hybrid are clear growth areas. Cloud budgets are expected to increase in the next year and spending will be divided among different types of cloud services. Cloud is expected to provide cost savings in the long run, however, it is difficult to calculate what those savings might be. IT is almost always consulted when business units/departments make cloud purchases. Cloud is driving the evolution of the IT department by requiring them to become more critical across the organization, develop new roles or acquire new skills. Establishing security in the cloud is key when it comes to vendor selection. 8
Contact To view the full deck, please contact your CSO Sales Executive. www.csomediakit.com/contacts.html 9