Brass tacks: Answering the security questions that matter

Enterprise security can be a labyrinthine, complex beast with many moving parts, dozen upon dozen of requirements, needs, implications, options and alternatives.

But when we get down to the nitty gritty (the brass tacks if you will), security can be simplified by six simple questions:

WHO is logging in?

WHAT are they accessing/viewing?

WHERE is the device from which that person logs in?

WHEN was any asset changed/modified/moved

HOW are they authorised/credentialed?

WHAT is the impact of the event?

Now determining the answers to those questions might require a bit of...

By Cloud Security, 23 April 2013, 0 comments. Categories: Architecture, Enterprise, Infrastructure, Security.

Proactive security is required in highly regulated industries

Andrew Kellett, Principal Analyst, Infrastructure and SecurityMaintaining security that meets the risk and compliance requirements of the enterprise is a constant challenge. Systems and networks are becoming more open and accessible, but at the same time, threats have become more advanced, persistent, and complex. This is a particularly important issue in highly regulated markets such as financial services, where failure to protect sensitive information will have a negative effect on the business and how it is...

By Ovum StraightTalk, 22 April 2013, 0 comments. Categories: Architecture, Data & Analytics, Enterprise, Hacking, Infrastructure, Security.

Amazon announces S3 cloud storing two trillion objects

What’s the best way to put the kibosh on your competitor’s latest key cloud release?

Make a statement loaded with braggadocio yourself, as Amazon has done by announcing that two trillion (2 x 10¹²) objects are now stored on its S3 cloud – a turnaround of 1.1m requests per second.

Microsoft, of course, launched Windows Azure Infrastructure Services earlier this week, and knocked off the price of compute, storage and bandwidth between 21% and 33% in a bid for direct competition with...

By James Bourne, 19 April 2013, 0 comments. Categories: Architecture, Public, Trends, Vendors.

Choosing a cloud provider: The importance of compliance transparency

Looking beyond HIPAA, SOX or PCI-DSS compliance claims

The scary part about shopping for a cloud solution is that even if the managed services provider claims compliance, this doesn’t mean that they actually are compliant. In fact, the provider may not even realise they are being misleading. Because regulatory compliance is too often left open to interpretation, your definition of HIPAA, SOX or PCI-DSS compliance might be different...

By Ray Vallillo, 12 April 2013, 0 comments. Categories: Architecture, Compliance, Infrastructure, Regulation, Vendors.

IBM backs OpenStack as the path to wider cloud adoption

Roy Illsley, Principal Analyst, Ovum SoftwareIBM recently made three significant announcements about its vision for how cloud computing will be adopted by enterprise customers. First, IBM believes that open standards are needed to drive increased customer demand for workload portability in a hybrid cloud environment. Second, IBM has segmented the adoption of cloud computing as two different strategies serving two different reasons to adopt cloud computing, namely a cloud-enabled approach and a cloud-centric approach. A...

By Ovum StraightTalk, 03 April 2013, 0 comments. Categories: Adoption, Architecture, Infrastructure, Vendors.

Amazon Web Services’ OpsWorks is a positive move

Laurent Lachal, Senior Analyst, Software – IT SolutionsIn February 2013, Amazon Web Services (AWS) launched the beta version of AWS OpsWorks, a configuration and deployment service for AWS public cloud-based applications and their related resources. While AWS usually creates its services from scratch, OpsWorks is based on third-party technology, namely the open source Chef-based SaaS offering, Scalarium, developed by Peritor, a small Germany-based IT service provider that AWS acquired in 2012.

OpsWorks reflects the...

By Ovum StraightTalk, 02 April 2013, 0 comments. Categories: Architecture, PaaS, Public.

MaaS implements small data and enables personal clouds

Abstract – MaaSTM (Model as a Service) sets a new concept to order and classify data modeling design and deployment to the Cloud. MaaS changes the way to move data to the Cloud because allows to define data taxonomy, size and contents. Starting from data model design, MaaS might guide the DaaS (Database as a Service) lifecycle, providing data granularity and duty rules: as a consequence, MaaS implements the new concept of Small Data. In fact, Small Data answers to the need of controlling...

By cloudbestpractices.net, 28 March 2013, 0 comments. Categories: Architecture, Best Practice, Big Data.

Gartner predicts the death of the traditional sourcing model by 2015

Gartner’s been gazing at its crystal ball again, and has forecast that service-led solutions – software as a service (SaaS), infrastructure as a service (IaaS), platform as a service (PaaS) and so forth – will displace more traditional sourcing methods by 2015.

The analyst house stresses that IT companies need to “bridge legacy offerings and new services”, again pointing a future to the cloud for service providers.

And cloud services appear to be growing at a much quicker rate...

By James Bourne, 26 March 2013, 0 comments. Categories: Architecture, Enterprise, Forecasts, IaaS, PaaS, SaaS .

Retail: The next industry to be disrupted by the cloud?

I watched with interest recently an interview with NetSuite CEO, Zach Nelson on Bloomberg TV. During the interview Nelson stated his belief that retail wasn’t dead and that Apple had shown the way to all retailers with regards customer experience. Nelson also stated that in his mind, retail would be the next industry to be “disrupted by the cloud”.

In this blog I will examine some of the...

By Euan Harris, 27 February 2013, 0 comments. Categories: Architecture, Industry, Mobility.