SaaS and Cloud applications have been a huge help to businesses across the world, enabling organisations to be more productive and reducing the workload for IT departments providing complex systems – however, there is a hitch. Even though they can help individuals and departments, these systems, if they are not known about or managed, can cause serious problems for compliance, security, and bring unexpected costs. These types of applications which are unknown to the IT department are often referred to as Shadow IT. Finding what SaaS / Cloud apps are in play is not an easy task as there are over 14,000 of them. Understanding more about what they do, how much they cost and who is using them is something every IT manager needs to get to grips with.

2. Application Ecosystem
Application ecosystems are growing in size, scope and complexity……
SaaS

4. Lift and shift
Rearchitect
Innovation
Shifting Landscape
‘Vendors are shifting their business models from on-
premises licensed software to public cloud-based
offerings, this trend will continue.’ - Gartner
Applications that are lifted and
shifted to the cloud can't take full
advantage of native cloud features -
may not be cost-effective.SaaSification

5. The SaaS Challenge
▪ Loss of Authority
▪ SaaS providers market direct to consumers
▪ Self selection – Consumerisation of IT
▪ Decentralised decision making
▪ Loss of Control
▪ Vendors define the architecture and deployment
▪ All that’s required is a browser and connectivity!
▪ Your data is managed by the vendor
▪ But IT retain Accountability
▪ Risk of security and regulatory infringement
▪ Fewer control points, reduced visibility
▪ Total dependence on many more vendors

6. Privacy Rectification Erasure Access Location
Is the data
adequately secured
and encrypted in
transit and at rest?
Who can access the
data, who stores
the data, can the
cloud provider
access it?
Is it easy to change
customer data on
request, do you
know where it is
located?
Can a customer’s data
be completely
deleted under your
control?
Is the data stored in
an approved
country with
adequate security and
privacy laws
Compliance
Can you prove that the SaaS applications your employees have
signed up to provide appropriate GDPR regulatory compliance ?
GDPR and SaaS

7. Criticality Threshold
Irreversibility Threshold
Discovery Rejection Withdrawn
Uncontrolled Adoption
Understanding Retirement
Unplanned Commitment
Adoption
Institutional
Lingering
Planned Commitment
Niche
Planned
Decline
Conscious
Uncoupling
Discovery Threshold
Cloud Adoption Lifecycle: Managed Adoption
Discovery: Evaluated by IT department as they test configurations, deployment, support processes
Understanding: Pilot with selected users who put the solution through it’s paces
Adoption: Controlled roll-out to departments and teams
Planned Commitment: In use across the organisation
Pilot
Rollout
Evaluation

8. Criticality Threshold
Irreversibility Threshold
Discovery Rejection Withdrawn
Uncontrolled Adoption
Understanding Retirement
Unplanned Commitment
Adoption
Institutional
Lingering
Planned Commitment
Niche
Planned
Decline
Conscious
Uncoupling
Discovery Threshold
Cloud Adoption Lifecycle: Viral Adoption
Discovery: Adopted by a single user, who immediately invites their colleagues to join
Uncontrolled Adoption: Makes the team’s life easier, they enthusiastically adopt it
Unplanned Commitment: Integral to the business, it’s impossible to imagine life without it
Network Effects
Viral Adoption
Independent Discovery

9. Take Back Control

10. Ampliphae Cloud Analytics Overview
Identify all the Cloud
Applications in use
within your
organisation.
Understand who uses
each application,
when, where and why.
Discovery
Highlight security,
regulatory and
commercial
considerations for
each Cloud
Application, and make
an appropriate
decision.
Governance
Block or optimise
access to individual
Cloud Applications.
Give your people the
information they need
to make informed
decisions.
Control
Continuously monitor
for new Cloud
Applications, and
audit cost and risk.
Cost and compliance
reporting
Audit Analyse
✓ Discover which applications your people are using
✓ Know where your data is stored
✓ Understand how secure it is and who can access it
✓ Govern and manage the vendors
✓ Control applications and activities in the Cloud
✓ Manage your risks and exposures
Deep insights into the
usage and adoption of
cloud applications.
Predict application
growth, identify
security threats and
anomalies