openbrighton - the cloud and your business

Open Source, Cloud and your Business – 11/14 – Brighton - #OpenBrighton

The “Cloud” and your BusinessUnderstanding Cloud, benefits and risks


Background informationBackground information

Paolo Vecchi– CEO of

• Omnis Systems Ltd (UK)

• Omnis Systems Srl (Italy)

– Scouting for and distributing Open Source and Linux based solutions.

– Passionate about Linux, Open Source and security.


Omnis Systems is the only distributor

specialised in Open Core and

Open Source solutions

Background informationBackground information


What is “Cloud”?What is “Cloud”?


Some say...Some say...


……but actually ...but actually ...


… … it's a lot of blinking lightsit's a lot of blinking lights


NIST definition of Cloud ComputingNIST definition of Cloud Computing

On-demand self-service

Log-in & buy

Broad network access

Access from any device

Resource pooling

Shared resources

Rapid elasticity

Assign & release resources automatically

Measured service

Pay as you go

Characteristics



Software as a Service (SaaS)

Just use pre-deployed software

Email/Office365/Google Apps/Zarafa

Platform as a Service (PaaS)

Application environment

Develop & deploy your apps

Infrastructure as a Service (IaaS)

Processing power, storage, networking

Using hardware without owning it

Service Models



Private cloud

Hardware reserved to customer

Shared connectivity/in-house deployment

Public cloud

Hardware shared with other users

Shared infrastructure

Hybrid cloud

Mixed provisioning in-house/datacentre

Moving workload when necessary

Deployment Models


Already seen it somewhere?Already seen it somewhere?

For the past 20 we had:

Outsourcing

Hosting

Housing

CDN (content distribution networks)

But now we have:

Better tools

Better connectivity

Better marketing


Cloud, what is it good for?Cloud, what is it good for?

Marketing

A lot easier to sell “Cloud”

than the NIST definition

or as JBOS(Just a Bunch Of Servers)

with very good management software & resiliance


Cloud, a lot more than JBOSCloud, a lot more than JBOS

Multiple, redundant, self-replicating datacentres


Understanding what you getUnderstanding what you get

The Cloud service models


But this is not CloudBut this is not Cloud

These are services or hosted applications


Public Cloud can be a risky business

Not all fluffy things are nice


Our view about Public “Cloud” servicesOur view about Public “Cloud” services

What are the major “Cloud” players doing?


Did anybody say “Safe Harbor”?Did anybody say “Safe Harbor”?

US-EU Safe Harbor principles:

Notice - Individuals must be informed that their data is being collected and about how it will be used

Choice - Ability to opt out of the collection and forward transfer of the data to third parties

Onward Transfer - Transfers of data to organizations that follow adequate data protection principles

Security - Reasonable efforts must be made to prevent loss of collected information

Data Integrity - Data must be relevant and reliable for the purpose it was collected for

Access - Individuals must be able to access information held about them, correct or delete it if it is inaccurate

Enforcement - There must be effective means of enforcing these rules.


Lack of control as cloud clients may no longer be in exclusive control of their data

Lack of availability due to lack of interoperability (vendor lock-in)

Lack of confidentiality there is a risk that personal data could be disclosed to (foreign) law enforcement agencies without a valid EU legal basis

Lack of intervenability due to the complexity and dynamics of the outsourcing chain

Lack of isolation: A cloud provider may use its physical control over data from different clients to link personal data

The EU view about Public “Cloud” servicesThe EU view about Public “Cloud” services

The Data Protection Working Party was set up under Article 29 of Directive 95/46/EC.It is an independent European advisory body on data protection and privacy.

Data protection risks of cloud computing(extract from the EU Data Protection Working Party document WP 196)


More small issues about Public “Cloud”More small issues about Public “Cloud”


Public “Cloud” can be a dangerous placePublic “Cloud” can be a dangerous place

How is our data being used?

As a private users you have a choice.

But when your data is shared by your Council?

Inconsistent privacy laws

Or UK Parliament with Office365?


So, is Cloud secure?So, is Cloud secure?

Security is not like installing an antivirus

Methodologies and procedures should be in place

All employees should be trained for security

Credentials are one of the many weak links

Any connected device can be an entry point

Any software running in your Cloud can contain vulnerabilities

When a breach will happen, how will you know?

Remedies?

Use a provider you can sue, they'll work harder to keep your data secure

As much as your PC


Cloud security matters Cloud security matters (most of the times)(most of the times)

Are you a potential target for industrial espionage or deal with valuable data?

Then you may have to look at the many aspects of data security.


Decentralising the InternetDecentralising the Internet

?

Taking back control of our data and applications

Alternatives are available and costs can be even lower


Cloud can be good for you

but read the small print


Cloud can be usefulCloud can be useful

Enabling IoT Provides “burstable” resources

Good for mobile workers Interconnecting devices globally


Cloud can be usefulCloud can be useful

Large workloads

Email marketing

Primary MXAV/Anti-Spam

Distributed usersand offices

Some examples of Cloud use

Disaster recovery

Web services

Backup

Data synchronisation

… and many other services but...

check what you put in the Cloud

You are the data controller


So, is Cloud for me?So, is Cloud for me?

Distributed workforce

Web services

Need flexible computing power

Increase resiliency

Move from CAPEX to OPEX

Verify requirements


Does Cloud save money?Does Cloud save money?

Startups needing computing power

Businesses with no internal IT

Temporary pay as you go services

Internet facing services

Shared services (Public sector)

Some large infrastructures

Reducing tech support costs (employees)

Yes, no, maybe...

Must evaluate short term saving with long terms benefits



Open Source can cost less than generic Cloud services

Disadvantages:- No control over the technology- No control over future services & features- Security issues- Requires additional infrastructure for secure communications- Loss of data and complex migration to other solutions- Difficult to integrate local and legacy services



Open Source can cost less than generic Cloud services

Additional benefits:- Open Source based solution and infrastructure- Low cost/low maintenance in-house solution- Reduced storage usage thanks to attachments deduplication- It can be integrated with DMS/ECM and Cloud based storage


First of all, check what you haveFirst of all, check what you have

Is this the optimal configuration? Consolidate first

Some move to Cloud services because of complex infrastructures

Cloud still useful?


Do you need a global service?Do you need a global service?


Look at your “Cloud” in the eyesLook at your “Cloud” in the eyes

Your Cloud provider could be just around the corner


Questions?Questions?


Disclaimer:

The information included in this presentation may not be complete and could be misinterpreted as more information and explanation was provided during the event.

The Open Source, Cloud and your Business event included several sessions that looked at how Open Source and Cloud could help businesses and public sector organisations be more efficient with presentations from various Open Source and Cloud services providers.

If you think some of the data is incorrect or depict your organisation in a way you don't like we are happy to discuss your concerns at our next public event.

Images used are believed not to be covered by copyright or any restriction when used in public presentation. If you believe any of the content should not be used in this presentation please let us know and we'll act on your request promptly.

Logos, names and trademarks are propriety of their respective owners.

openbrighton - the cloud and your business

Technology