Why Should Nonprofits Care About Cloud Computing


Published on

What is cloud computing and why should you understand it? This presentation defines the different types of cloud computing, discusses how it is impacting nonprofits, outlines some criteria for use, and mentions some challenges of which you should be aware

Published in: Technology
1 Comment
  • I am not getting the link to download the slide show.
    Are you sure you want to  Yes  No
    Your message goes here
  • Be the first to like this

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide
  • The history of technology is characterized by periods of particularly rapid evolution. The adoption of the PC by businesses in the 90s dramatically altered the staid, mainframe/mini-computer dominated world of enterprise IT and empowered individuals to apply technology creatively and broadly across business to the point where – today – it’s almost unimaginable to consider working without a PC. In the middle of the 1990s the Web emerged, and a whole generation of Internet-facing Web applications, both Internet, and intranet within a corporation, were built using HTML and Web servers. And we see many, many thousands, hundreds of thousands of these being written every year. It is still a core model that people use for building modern applications. In the early 2000s Web services and SOA (Service-Oriented Architecture) enabled applications to communicate over standard-based Web protocols, be it Web services, or REST-based protocols, and this is also very popular particularly because it promotes the ideal of assembling – or composing – more complex solutions from simpler parts. In fact, it is a core building block for how we think about the Azure services platform. There are many advantages to the services model particularly with the immediacy of global reach, the ease of provisioning and, of course, allowing a 3 rd party with the greater expertise to run the computers, networks, data-centers and software on my behalf. However, there are many advantages to running software on premises too. Principally, the ability to tailor the software to most effectively address specific business needs and the level of privacy and control that can only be guaranteed when the software and data are within my control. The cloud platform builds on previous platform generations but it is a fundamentally different approach and it has its own unique advantages.
  • NIST also refers to 3 delivery mechanisms for cloud computing – the industry is converging on these as well. This is a slide from the Center for Digital Government showing those: Infrastructure as a Service (IaaS) – essentially vendors providing a data center as a service, where customers can buy server instances; Platform as a Service (PaaS) – development tools and environment allowing customers and ISVs to build applications that consume computing, storage, and other services in the cloud rather than relying on on-premise servers to provide those capabilities; and Software as a Service (SaaS) – software applications delivered across the internet.
  • Private cloud. The cloud infrastructure is operated solely for an organization. It may be managed by the organization or a third party and may exist on premise or off premise. Community cloud. The cloud infrastructure is shared by several organizations and supports a specific community that has shared concerns (e.g., mission, security requirements, policy, and compliance considerations). It may be managed by the organizations or a third party and may exist on premise or off premise. Public cloud. The cloud infrastructure is made available to the general public or a large industry group and is owned by an organization selling cloud services. Hybrid cloud . The cloud infrastructure is a composition of two or more clouds (private, community, or public) that remain unique entities but are bound together by standardized or proprietary technology that enables data and application portability (e.g., cloud bursting).
  • Add Azure
  • Source: Scalable definition, André B. Bondi, 'Characteristics of scalability and their impact on performance', Proceedings of the 2nd international workshop on Software and performance, Ottawa, Ontario, Canada, 2000, ISBN 1-58113-195-X , pages 195 - 203 Source: Three attributes for SaaS, Architecture Strategies for Catching the Long Tail, Frederick Chong and Gianpaolo Carraro Microsoft Corporation April 2006, http://msdn.microsoft.com/en-us/library/aa479069.aspx
  • There is not yet an IT system that is fully hosted in the cloud (e.g. You just get your computers to the Internet and everything you need is there). Cloud adoption will be gradual. For instance, you might find a database service that is useful, or an online meeting service like ReadyTalk, or begin using cloud based storage like Windows Live SkyDrive. As time goes on you’ll probably be using more cloud based IT software and services and fewer ‘on premises’ software and services.
  • Shifting costs, increased complexity, lower barrier to entry, easier access to more software outside the office
  • Some possible examples: * Seasonal workers or volunteers Campaigns (advocacy organization) that have spikes in requirements in election years or similar Maybe add some examples to each
  • Source SLA Zone: http://www.sla-zone.co.uk/ Wikipedia definition of SLA: http://en.wikipedia.org/wiki/Service_level_agreement
  • C&A: Certification and Accreditation of IT Systems
  • For some, services mark the culmination of the evolution of software. Indeed some – Salesforce.com’s CEO Marc Benioff – even go so far as to say that we’ve reached the end of software. In reality, the deployment choice of deploying software on-premises or handing software to a 3 rd party hosting provider to run as services should be based on business’ – not vendors’ technologies’ – requirements, on the unique advantages and limitations of each approach and in the knowledge that the decision will likely change at some point. For security or privacy reasons, for business differentiating purposes that require exquisitely detailed customization or even for the purposes of the peace of mind of knowing where applications and data reside, software will always have unique benefits over a services model. However, for the ability to deliver solutions readily planet wide, for the flexibility in being able to subscribe to and unsubscribe from services without having to deploy people and hardware within an organization and for the ability to offload – or outsource – non-differentiating technologies, services provide many benefits. The debate is not whether enterprises will run software or services but how they may combine the best of both.
  • Why Should Nonprofits Care About Cloud Computing

    1. 1. September 28, 2010 Why Nonprofits Should Care About Cloud Computing Anna S. Jaeger Co-Director of GreenTech TechSoup Global [email_address] www.techsoup.org/greentech
    2. 2. Topic and Objective <ul><li>Topic: Overview of Cloud Computing - Defining types of cloud computing and how it might apply to your organization </li></ul><ul><li>Take Aways: </li></ul><ul><li>Understand the different types of cloud computing, </li></ul><ul><li>Understand how it is impacting nonprofits, </li></ul><ul><li>Outline some criteria for use, </li></ul><ul><li>Mention some challenges of which you should be aware. </li></ul>
    3. 3. We are working toward a time when every nonprofit and social benefit organization on the planet has the technology resources and knowledge they need to operate at their full potential
    4. 4. TechSoup is an integrated offering of the Resources, Knowledge, and Connections that NPO ’ s need to effectively use technology to advance their work
    5. 5. Mission of GreenTech <ul><li>Help nonprofits and NGOs reduce their environmental impact through the effective use of technology. </li></ul><ul><li>____________________ </li></ul><ul><li>We help you, reduce the impact of your IT and use IT to reduce the impact of your organization. </li></ul>www.techsoup.org/greentech @TSGreenTech
    6. 6. Please Ask Questions <ul><li>What are some things you would specifically like to learn today? </li></ul><ul><li>____________________ </li></ul><ul><li>As we go along, please feel free to ask questions. </li></ul>
    7. 7. Valuable Prizes <ul><li>Pay attention, I have prizes to give away, but you must answer questions based on the presentation! </li></ul>Prizes!
    8. 8. Your Technical Experience Poll <ul><li>Technical Experience: </li></ul><ul><li>Accidental Techie </li></ul><ul><li>Some Technical Experience </li></ul><ul><li>Solid Tech Experience </li></ul><ul><li>Advanced </li></ul>
    9. 9. Quick Audience Poll <ul><li>Knowledge of Cloud Computing </li></ul><ul><li>Beginner </li></ul><ul><li>Intermediate </li></ul><ul><li>Advanced </li></ul>
    10. 10. Last Poll <ul><li>Do you use cloud computing in your organization or personally ? </li></ul><ul><ul><li>Yes </li></ul></ul><ul><ul><li>No </li></ul></ul><ul><ul><li>Who knows?! </li></ul></ul>
    11. 11. Defining Cloud Computing <ul><li>Understanding the Types </li></ul>
    12. 12. CyberOptic Group Cloud Definition <ul><li>“ … cloud computing enables computer software and hardware resources to be accessed over the Internet without the need to have any detailed or specific knowledge of the infrastructure used to deliver the resources, much like a utility model. You really don't need to know what the phone company or electric company does on there end to enable calls and allow the lights to go on when you flip the switch; and, you really don't want to know as long as when you plug into it, it works.” </li></ul>
    13. 13. Forrester Research Definition <ul><li>“ A standardized IT capability (services, software, or infrastructure) delivered via Internet technologies in a pay-per-use, self-service way .…” </li></ul><ul><li>From: TechRadar™ For Infrastructure & Operations Professionals: Cloud Computing, Q3 2009 , James Staten, Forrester Research, Inc., Oct. 2, 2009 </li></ul>
    14. 14. Fun Video <ul><li>Cloud Computing in plain English by CommonCraft </li></ul>
    15. 15. Slide by Microsoft
    16. 16. Cloud as Business Model <ul><li>Some say “cloud computing” is nothing new. </li></ul><ul><li>Despite all the hype, there’s very little, from a technical capability standpoint, that hasn’t been widely available for years. </li></ul>Image from: http://www.eci.com/blog/25-why-cloud-computing-is-right-for-your-hedge-fund.html
    17. 17. Why Should You Care? <ul><li>IDC forecasts that from 2009 through 2014 </li></ul><ul><li>Worldwide IT product spending will grow at an annual rate of 5.0% </li></ul><ul><li>Spending on Cloud Services will increase at an annual rate of 27%, i.e., _very_ fast. </li></ul><ul><li>Non-Cloud IT product spending will grow at an annual rate of 3.3%, i.e., positively, but slowly. </li></ul><ul><li>Source: IDC’s Public IT Cloud Services Forecast: New Numbers, Same Disruptive Story </li></ul>
    18. 18. Benefits of Cloud Computing <ul><li>Little to no upfront costs : watch out for recurring operating costs. </li></ul><ul><li>Little to no IT staff required : many applications available in the cloud require much less in-house IT support because the hosting provider takes care of installs, upgrades, backups, security, and standard maintenance for you. </li></ul><ul><li>No servers need to be researched, purchased, maintained, or recycled. </li></ul><ul><li>Rapid deployment: Often, accounts can be set up in minutes. More complicated pieces of software (CRM, accounting packages, donor management software) still require more set up and probably training. </li></ul><ul><li>Convenience: Staff and volunteers can access your applications from almost any Internet connection with their login information. No more setting up VPNs or systems to allow remote access to your servers. </li></ul><ul><li>Be on latest software vendor managed upgrades. </li></ul>
    19. 19. Green Benefits <ul><li>Fewer servers are built and running: </li></ul><ul><ul><li>fewer toxic materials and water used to build them </li></ul></ul><ul><ul><li>fewer toxic materials are dumped </li></ul></ul><ul><ul><li>less energy is consumed in the running of the servers </li></ul></ul><ul><li>Less powerful client computers: all the processing is performed on the hosted server(s). </li></ul><ul><ul><li>keep your older computers longer </li></ul></ul><ul><ul><li>reduces demand for new computers </li></ul></ul>
    20. 20. <ul><li>Green Benefits </li></ul>Slide by David Deal of Community IT Innovators
    21. 21. Cloud Computing <ul><li>“One of the biggest opportunities for decreasing an organization’s power and equipment usage is through the use of hosted software.… This offers significant environmental advantages, and typically also simplifies IT administration. ” </li></ul><ul><li>David Deal in Greening Your IT Through Your Software Choices </li></ul>
    22. 22. Some Helpful Reading <ul><li>Comparing Online vs. Traditional Office Software </li></ul><ul><li>Why Should Nonprofits Care About Cloud Computing? </li></ul>
    23. 23. Types of Cloud Computing <ul><li>IaaS: Infrastructure as a service </li></ul><ul><li>PaaS: Platform as a service </li></ul><ul><li>SaaS: Software as a Service </li></ul>
    24. 25. Examples of Cloud Providers <ul><li>Amazon – EC2 and S3(IaaS) </li></ul><ul><li>Google – App Engine(PaaS) </li></ul><ul><li>Microsoft – Azure(IaaS & PaaS)|BPOS(SaaS) </li></ul><ul><li>Salesforce – NPO Starter Pack(SaaS) </li></ul><ul><li>Caution: Make IT Green: Cloud Computing and its Contribution to Climate Change </li></ul>
    25. 26. NIST: 4 Cloud Deployment Models <ul><li>Private cloud </li></ul><ul><ul><li>enterprise owned or leased </li></ul></ul><ul><li>Community cloud </li></ul><ul><ul><li>shared infrastructure for specific community </li></ul></ul><ul><li>Public cloud </li></ul><ul><ul><li>sold to the public, mega-scale infrastructure </li></ul></ul><ul><li>Hybrid cloud </li></ul><ul><ul><li>composition of two or more clouds </li></ul></ul>From NIST: Presentation on Effectively and Securely Using the Cloud Computing Paradigm v26
    26. 27. NIST: 5 Essential Cloud Characteristics <ul><li>On-demand self-service </li></ul><ul><li>Broad network access </li></ul><ul><li>Resource pooling </li></ul><ul><ul><li>Location independence </li></ul></ul><ul><li>Rapid elasticity </li></ul><ul><li>Measured service </li></ul>From NIST: Presentation on Effectively and Securely Using the Cloud Computing Paradigm v26
    27. 28. Discounted Offerings Free offerings Slide by Microsoft Business Productivity Online Suite
    28. 29. NIST: Three Features of Mature SaaS Applications <ul><li>Scalable </li></ul><ul><ul><li>Handle growing amounts of work in a graceful manner </li></ul></ul><ul><li>Multi-tenancy </li></ul><ul><ul><li>One application instance may be serving hundreds of companies </li></ul></ul><ul><ul><li>Opposite of multi-instance where each customer is provisioned their own server running one instance </li></ul></ul><ul><li>Metadata driven configurability </li></ul><ul><ul><li>Instead of customizing the application for a customer (requiring code changes), one allows the user to configure the application through metadata </li></ul></ul>From NIST: Presentation on Effectively and Securely Using the Cloud Computing Paradigm v26
    29. 30. SaaS Common Examples <ul><li>Software as a Service </li></ul><ul><ul><li>Document Sharing - Google docs, Office Live, Zoho </li></ul></ul><ul><ul><li>CRM solutions – Salesforce, Blackbaud </li></ul></ul><ul><ul><li>Backup - Mozy </li></ul></ul><ul><ul><li>Collaboration/Training tools – ReadyTalk, WebEx, GoToMeeting, Unified Communication Tools </li></ul></ul><ul><ul><li>Social Networking: LinkedIn, Twitter, Flickr </li></ul></ul><ul><ul><li>HR Tools: Performance Reviews, Payroll </li></ul></ul><ul><ul><li>Project Management: Basecamp </li></ul></ul>
    30. 31. Prize Give Away <ul><li>What are the three types of Cloud Computing? </li></ul><ul><li>Hint: _aaS, _aaS, _aaS </li></ul>
    31. 32. <ul><li>How is the Cloud Impacting NPOs? </li></ul>
    32. 33. Slide by Microsoft
    33. 34. Impacting NPOs: More Complexity <ul><li>More IT choices = IT decisions more complicated and more confusing </li></ul><ul><li>Some cloud based services like webhosting, HR services, and conferencing (like Skype) are already well developed in the cloud </li></ul><ul><li>Others like security and disaster recovery will take longer to develop . </li></ul>Info from Forresters
    34. 35. Impacting NPOs: Lower Barrier to Entry <ul><li>Particular importance to smaller organizations: it lowers the “barrier to entry” for certain large-scale enterprise applications, that wouldn’t be cost-effective to install and run internally for a small staff; but can make sense, when available on a per-user subscription basis (Microsoft Sharepoint is a good example of this). </li></ul>
    35. 36. Impacting NPOs: Shifting Use <ul><li>More staff and volunteers have access to more systems outside the office . </li></ul><ul><li>Fundraising, volunteer management and donor management all have solid offerings in the cloud. </li></ul><ul><li>Many SaaS providers offer free or discounted services for NPOs: Salesforce, GrantStation, VolunteerMatters, Google Docs, Office Live </li></ul>
    36. 37. Impacting NPOs: Shifting Use <ul><li>Next 6 to 8 years we’ll be in a state of hybrid cloud adoption </li></ul><ul><li>More people will be using both ‘on premises’ and cloud versions of MS Office </li></ul><ul><li>Use of computers will change toward easier collaboration/sharing and better access to the office anywhere you are. </li></ul>
    37. 38. Impacting NPOs: Software Costs <ul><li>In the next 6 to 8 years, nonprofits will probably not be reducing software and IT staffing costs very much. </li></ul><ul><li>Migration to cloud software and services will be gradual and costs will be shifting, but not going down dramatically. </li></ul><ul><li>You’ll probably being paying more in monthly fees, and less on buying software packages. </li></ul>
    38. 39. Impacting NPOs: Hardware Costs <ul><li>IT hardware costs will gradually go down for nonprofits over the next 6 to 8 years. </li></ul><ul><li>You will probably need fewer on premises server computers, and less robust and expensive desktop or laptop computers as more of your work is online. </li></ul><ul><li>Telecom costs may increase as more bandwidth and stability is needed. </li></ul>
    39. 40. Summary: Cloud Economics <ul><li>Decreased captial costs </li></ul><ul><li>Usually, increased operating costs </li></ul><ul><li>Example 1: Preferred Hotel </li></ul><ul><ul><li>Traditional: $210k server refresh and $10k/month </li></ul></ul><ul><ul><li>Cloud: $10k implementation and $16k/month </li></ul></ul><ul><li>Example 2: Nevada Crisis Call Center </li></ul><ul><ul><li>Trimmed technology management work by $20,000 annually </li></ul></ul><ul><ul><li>Eliminated a recurring capital expense of $15,000 </li></ul></ul><ul><ul><li>More reliable IT services </li></ul></ul>
    40. 41. Prize Give Away <ul><li>Name 2 impacts the cloud is having on nonprofits </li></ul>
    41. 42. <ul><li>Some Criteria for Use </li></ul>
    42. 43. Usage Compute Time Average Inactivity Period Compute Time Average Usage Average Usage Compute Time Compute Time Average Usage
    43. 44. Criteria for Use: Questions for Vendors <ul><li>When selecting a service & provider, consider these items: </li></ul><ul><li>Costs: upfront, ongoing, utility model </li></ul><ul><li>Security & Compliance </li></ul><ul><li>Reliability & SLAs </li></ul><ul><li>Connectivity: stability & bandwidth </li></ul><ul><li>Features </li></ul><ul><li>Ease of startup </li></ul>
    44. 45. NIST: Service Level Agreements (SLAs) <ul><li>Contract between customers and service providers of the level of service to be provided </li></ul><ul><li>Contains performance metrics (e.g., uptime, throughput, response time) </li></ul><ul><li>Problem management details </li></ul><ul><li>Documented security capabilities </li></ul><ul><li>Contains penalties for non-performance </li></ul>From NIST: Presentation on Effectively and Securely Using the Cloud Computing Paradigm v26
    45. 46. Some Easy Targets <ul><li>Virtual PBX </li></ul><ul><li>VoIP – potentially eliminate your phone </li></ul><ul><li>Electronic fax services like MyFax and eFax </li></ul><ul><li>Email systems </li></ul><ul><li>Green Host for Websites </li></ul>
    46. 47. Questions for Green Website Hosting Providers <ul><li>When selecting a provider, consider these items: </li></ul><ul><li>$$: most are comparable or better than traditional hosts </li></ul><ul><li>Ease of startup </li></ul><ul><li>Features </li></ul><ul><li>Reliability </li></ul><ul><li>How green are they? Do they buy carbon off-sets or power their operations with their own solar panels? Do they virtualize their servers? Are they certified by anyone? </li></ul><ul><li>Lists of Green Web Hosts </li></ul><ul><ul><li>webhostinggeeks.com </li></ul></ul><ul><ul><li>TreeHugger </li></ul></ul><ul><ul><li>WebHostingReport.com </li></ul></ul><ul><ul><li>http:// twitter.com/greenwebsites </li></ul></ul>
    47. 48. <ul><li>Travel Reduction </li></ul><ul><li>Reduce commuter and business travel </li></ul><ul><li>Travel contributes to 50% of CITI’s total emissions </li></ul><ul><ul><li>(even with 75% of travel done via public transit, biking, and walking!) </li></ul></ul><ul><li>Ingredients: Remote & mobile access to ICT resources - data, voice, video </li></ul><ul><li>Numerous studies confirming moderate to significant positive environmental impact </li></ul>Slide by David Deal of Community IT Innovators
    48. 49. <ul><li>Video </li></ul><ul><li>Peer-to-peer, small groups: </li></ul><ul><ul><li>Skype </li></ul></ul><ul><ul><li>VuRoom add-on allows for group video </li></ul></ul><ul><ul><li>Quality? </li></ul></ul><ul><li>Hosted, better for groups: </li></ul><ul><ul><li>WebEx (for up to 6 people) </li></ul></ul>Slide by David Deal of Community IT Innovators
    49. 50. <ul><li>Working with Distributed Teams </li></ul><ul><li>Web conferencing: </li></ul><ul><ul><li>GoToMeeting, WebEx, Ready Talk </li></ul></ul><ul><li>File sharing: </li></ul><ul><ul><li>Box.net, Dropbox, Jungle Disk, Google Docs, BPOS/SharePoint </li></ul></ul><ul><li>Comprehensive hosted apps: </li></ul><ul><ul><li>Zoho, Google Apps, MS BPOS+Office Web Apps </li></ul></ul><ul><li>Extranets/project collaboration: </li></ul><ul><ul><li>Basecamp, SharePoint </li></ul></ul>Slide by David Deal of Community IT Innovators
    50. 51. <ul><li>Some Challenges </li></ul>
    51. 52. Challenges with Cloud Computing
    52. 53. Risks of Cloud Computing <ul><li>Loss of connectivity: If you have a slow or unreliable connection, cloud computing isn't right for your mission-critical needs. </li></ul><ul><li>Service levels: Ensure reputable provider & provides an acceptable level of uptime & rapid response to issues. </li></ul><ul><li>Regulatory compliance: If you need to be HIPAA - or PCI-compliant or conform to other regulations, make sure your service provider is certified. </li></ul><ul><li>Backups: Make sure you have copies of and access to your data, especially if your service should fail. </li></ul><ul><li>Security: There are a variety of concerns about storing sensitive client data in the cloud due to privacy and security standards, that include data security for phishing, spamming, and hacking concerns. The jury is still out on some of these issues, so for the time-being, we recommend caution when storing sensitive financial or personal information about your supporters and clients online. </li></ul>
    53. 54. NIST: Analyzing Cloud Security <ul><li>Some key issues: </li></ul><ul><ul><li>trust, multi-tenancy, encryption, compliance </li></ul></ul><ul><li>Clouds are massively complex systems that can be reduced to simple primitives that are replicated thousands of times and common functional units </li></ul><ul><li>Cloud security is a tractable problem </li></ul><ul><ul><li>There are both advantages and challenges </li></ul></ul>From NIST: Presentation on Effectively and Securely Using the Cloud Computing Paradigm v26
    54. 55. NIST: General Security Advantages <ul><li>Shifting public data to a external cloud reduces the exposure of the internal sensitive data </li></ul><ul><li>Cloud homogeneity makes security auditing/testing simpler </li></ul><ul><li>Clouds enable automated security management </li></ul><ul><li>Redundancy / Disaster Recovery </li></ul>From NIST: Presentation on Effectively and Securely Using the Cloud Computing Paradigm v26
    55. 56. NIST: General Security Challenges <ul><li>Trusting vendor’s security model </li></ul><ul><li>Customer inability to respond to audit findings </li></ul><ul><li>Obtaining support for investigations </li></ul><ul><li>Indirect administrator accountability </li></ul><ul><li>Proprietary implementations can’t be examined </li></ul><ul><li>Loss of physical control </li></ul>From NIST: Presentation on Effectively and Securely Using the Cloud Computing Paradigm v26
    56. 57. NIST: Cloud Security Advantages Part 1 <ul><li>Data Fragmentation and Dispersal </li></ul><ul><li>Dedicated Security Team </li></ul><ul><li>Greater Investment in Security Infrastructure </li></ul><ul><li>Fault Tolerance and Reliability </li></ul><ul><li>Greater Resiliency </li></ul><ul><li>Hypervisor Protection Against Network Attacks </li></ul><ul><li>Possible Reduction of C&A Activities (Access to Pre-Accredited Clouds) </li></ul>From NIST: Presentation on Effectively and Securely Using the Cloud Computing Paradigm v26
    57. 58. <ul><li>Simplification of Compliance Analysis </li></ul><ul><li>Data Held by Unbiased Party (cloud vendor assertion) </li></ul><ul><li>Low-Cost Disaster Recovery and Data Storage Solutions </li></ul><ul><li>On-Demand Security Controls </li></ul><ul><li>Real-Time Detection of System Tampering </li></ul><ul><li>Rapid Re-Constitution of Services </li></ul><ul><li>Advanced Honeynet Capabilities </li></ul>NIST: Cloud Security Advantages Part 2 From NIST: Presentation on Effectively and Securely Using the Cloud Computing Paradigm v26
    58. 59. NIST: Cloud Security Challenges Part 1 <ul><li>Data dispersal & international privacy laws </li></ul><ul><ul><li>EU Data Protection Directive and U.S. Safe Harbor program </li></ul></ul><ul><ul><li>Exposure of data to foreign government and data subpoenas </li></ul></ul><ul><ul><li>Data retention issues </li></ul></ul><ul><li>Need for isolation management </li></ul><ul><li>Multi-tenancy </li></ul><ul><li>Logging challenges </li></ul><ul><li>Data ownership issues </li></ul><ul><li>Quality of service guarantees </li></ul>From NIST: Presentation on Effectively and Securely Using the Cloud Computing Paradigm v26
    59. 60. NIST: Cloud Security Challenges Part 2 <ul><li>Dependence on secure hypervisors </li></ul><ul><li>Attraction to hackers (high value target) </li></ul><ul><li>Security of virtual OSs in the cloud </li></ul><ul><li>Possibility for massive outages </li></ul><ul><li>Encryption needs for cloud computing </li></ul><ul><ul><li>Encrypting access to the cloud resource control interface </li></ul></ul><ul><ul><li>Encrypting administrative access to OS instances </li></ul></ul><ul><ul><li>Encrypting access to applications </li></ul></ul><ul><ul><li>Encrypting application data at rest </li></ul></ul><ul><li>Public cloud vs internal cloud security </li></ul><ul><li>Lack of public SaaS version control </li></ul>From NIST: Presentation on Effectively and Securely Using the Cloud Computing Paradigm v26
    60. 61. <ul><li>Security & Privacy </li></ul><ul><ul><li>Customizability </li></ul></ul><ul><ul><ul><li>Visibility & Control </li></ul></ul></ul><ul><ul><ul><ul><li>Data Accessibility </li></ul></ul></ul></ul><ul><li>Global Reach </li></ul><ul><ul><li>Ease of Provisioning </li></ul></ul><ul><ul><ul><li>Business Agility </li></ul></ul></ul><ul><ul><ul><ul><li>Deployability & Manageability </li></ul></ul></ul></ul>Slide by Microsoft
    61. 62. <ul><li>Questions on Challenges? </li></ul>
    62. 63. Prize Give Away! <ul><li>Name a benefit, a green benefit, and a risk of Cloud Computing </li></ul><ul><li>Extra credit: Why should you care? </li></ul>
    63. 64. Conclusion <ul><li>Cloud has a lot to offer, esp. small nonprofits. </li></ul><ul><li>Cloud solutions are often greener, easier to implement, and more secure. </li></ul><ul><li>Cloud solutions are not right for every need or every organization. </li></ul><ul><li>Talk with your board, staff, volunteers and/or consultants. Decide which is the best first step for your organization. </li></ul>
    64. 65. Thank you! <ul><li>More Info: </li></ul><ul><li>Come to www.techsoup.org/greentech to find other tips and suggestions. </li></ul>Anna S. Jaeger TechSoup Global [email_address] www.techsoup.org @TSGreenTech