Next on my cloud computing survey list is BT Global Services Enterprise Intelligence survey.  The survey is broader than cloud computing, covering “CIOs and their relationship with senior corporate executives and IT systems users.”  The survey report includes:

  • the relationship between corporate information business performance
  • demand for information
  • successful collaboration
  • what the CIO needs to do in the recession
  • the challenges facing cloud services
  • security in the cloud
  • global attitudes to business success
  • the role of the CIO

As someone interested in active information and the business-IT relationship, I found interesting points throughout the report.  However, the one cloud computing finding I want to call out is cloud location. 

Many of the clouderati will tell you that the physical location of the cloud computing environment shouldn’t matter to adopters.  While technically and architecturally this might be true, given appropriate and reliable network connections, there are business implications of physical location.  Most notably, regulatory and compliance concerns for cloud-resident data

The BTGS Survey focused on the likelihood to use cloud computing environments in another country:

“For example, the majority of CIOs (57%) and senior executives (53%) around the world are not happy to run applications and store data on servers based outside their country, for IT security reasons.

Perceptions of where servers should be based revealed a pro-European focus. For CIOs and senior executives, the UK was the most popular place in the world for servers to be based, with a quarter (25%) saying they would be extremely comfortable with servers being based there.  This was followed by North America (22%), Western Europe (20%) and Nordic Europe (18%).

Conversely, two thirds (68%) of CIOs and senior executives said they would be uncomfortable with servers being based in Africa, closely followed by Latin America (53%), Russia/Central Asia (43%) and the Middle East (40%). The reasons cited for such unease were security/political issues, service quality, distance and time zone issues and cost.  Perceived high cost was specifically mentioned in relation to North America and Nordic Europe.”

Survey methodology: “Conducted by Datamonitor Ltd. Total sample sizes were 274 CIOs and other senior corporate executives in 12 countries and 2,476 employees who use corporate IT systems in 13 countries. Fieldwork was undertaken between 1 September 2009 and 30 September 2009. The survey was carried out online.”

Posted by brenda michelson at 3:00 pm in 100-days, Cloud Watch, adoption, assurance, compliance, cyber risk, data, regulatory | Permalink | Comments(0)
| Trackback URL

Bessemer Venture Partners published a winter release of their 10 Laws of Cloud Computing and SaaS.  These laws are written for cloud computing providers – potential investees.  However, the laws are also interesting to anyone interested in the cloud computing marketplace. 

As I was reading the full whitepaper (pdf), I found one law to be pertinent for potential cloud computing customers.  Law #8: Leverage and Monetize the data asset. (emphasis is mine)

“BESSEMER CLOUD COMPUTING LAW #8: Leverage and monetize the data asset. While Cloud Computing is about providing a subscription service to your customers, one of the happy consequences is that you end up hosting their data. This becomes a critical asset that you can monetize by increasing the value of your offering; by leveraging it across your customer base in the form of benchmarks; or for specific businesses, by using the data to generate leads (within the contracted obligations). In these difficult economic times, where prices are under pressure and customers are tightening their budgets, data can be a difference maker.

As a Cloud Computing service, your company captures a lot of business information on each individual customer, information that is typically peripheral to the delivery of your service, but could be very interesting for your customer’s executives. This information can generally be packaged and synthesized into a set of management dashboards that you can provide to your customers, potentially for an incremental subscription fee, or as a way to expand usage and increase product stickiness. Within our own portfolio, successful examples include the “CMO dashboard” (Eloqua), “Merchandising Dashboard” (Retail Solutions), “CFO Dashboard” (Intacct), and “HR Dashboard” (Cornerstone OnDemand) .

A second way to monetize your data is to identify the key performance indicators that you can derive from them – typically the ones that you have identified for your executive dashboards – and develop benchmarks across your customer base. These benchmarks can be customized along several dimensions (e.g., by company size, sector, geography) and be provided separately to your customers and even included in the executive dashboard. One of the early companies to sell benchmarks was Concur, the leading public company in the expense management space. With Concur reports, customers can compare their travel costs and business expenses against their peer group and track the evolution over time. We believe this “data-as-a-service” model has a lot of potential and will become more prominent as companies mature and need to find additional revenue streams.

Finally, another way to take advantage of your data is to use it to generate leads. While we recognize that this may not be possible for many of the B2B businesses for obvious reasons, this practice has proven to be successful for the lower end of the market, including small businesses and consumers. A company like Mint for example (now part of Intuit), even based its business model around it. Mint launched a SaaS financial application for consumers, competing against Quicken, but while the Quicken and Quicken Online business models used a license or a subscription fee, Mint was free and generated revenue by using its consumer insights to generate leads that were sold to service providers. For example, if Mint identified that your savings account had a 2% rate, it would notify you by email that another bank could offer you 2.5% and sell your click (or whatever action you would perform if interested) to a provider. Mint was so successful in this customer acquisition model that it ended up being acquired by Intuit in 2009 and will now replace the Quicken Online product.”

Certainly, there is no malice or wrongdoing here, as the above Law explicitly states “within the contracted obligation”.  And, there can be great value to your organization to receive benchmark, trend, lead or other aggregated data.  However, the use of your hosted data must correspond with your organization’s privacy and IP practices.  Therefore, it’s critical to understand, and if necessary, negotiate any data usage components of your service contracts.

Posted by brenda michelson at 6:15 pm in Cloud Watch, SaaS, compliance, customer-provider agreements | Permalink | Comments(0)
| Trackback URL

David Berlind is our Evening in the Cloud host. David says the discussion shouldn’t be about cloud computing definition, it should be about cloud computing benefits. The benefits will lead to the ‘right’ definition. Panel Format, each panelist has 8 minutes to “pitch us” as though they were visiting our organization. more >>

Posted by brenda michelson at 7:13 pm in Blog, adoption, compliance, cyber risk, data, provider positions | Permalink | Comments(0)
| Trackback URL

This evening, we are at Cloud Camp.  For background, check out this interview with Cloud Camp co-founder Dave Nielsen.  Dave is also our host today. 

The lightening rounds are done.  For insights, search on twitter with either of these tags: #cloudcamp #cloudcampinterop

Now, Dave is building an un-panel session.  He started with 5 empty chairs and no questions.  Filled the chairs with folks who raised hands to “Folks that know a lot about cloud computing”.  No one admitted expertise.  Now, he’s asking the audience to build a list of 10 questions.

 more >>

Posted by brenda michelson at 9:41 pm in Blog, compliance, data, fundamentals, security, standards | Permalink | Comments(0)
| Trackback URL

Session: Security, Risk, Legislation, and Compliance: Pandora’s New Box. 

Speakers:

Drew Bartkiewicz, Vice President of Cyber Risk and New Media Markets, The Hartford

Robert Parisi, SVP & National Technology, Network Risk & Telecommunications Practice Leader, FINPRO, Marsh USA

I happened to sit next to Drew this morning, and we chatted a little on what he’s doing at The Hartford.  Drew isn’t in IT.  He runs the business line that covers (insures) the cloud operators, and it sounds like, in the near future smart cloud consumers.  He mentioned a phenomenal month-to-month business growth, which makes me believe that not only is the cloud real, but operators are serious about protecting against business risk, for themselves and their customers.

 more >>

Posted by brenda michelson at 7:35 pm in Blog, assurance, compliance, cyber risk, data, regulatory, security | Permalink | Comments(0)
| Trackback URL

David Snead on Virtualization and Legal implications.  David is a practicing attorney focusing on web infrastructure concerns.  From a legal perspective, David shares that from a legal perspective, virtualization and cloud computing are similar.

Three aspects to be considered:

Software or Operating System

Expectations – your own, that of your users, that of your customers

Contract Review

Goal of session to give information on how to parse legal risk.  Lawyers who say “no legal risk” are misstating the truth. 

 more >>

Posted by brenda michelson at 4:08 pm in Blog, assurance, audit, compliance, cyber risk, regulatory, virtualization | Permalink | Comments(0)
| Trackback URL