Emergence of the Digital VMO - be ready for multi-sourcing BIG scale
CIF Self Certification MSP Oct15
1. Cloud Industry Forum
Self Certification
Background
The Cloud Industry Forum (CIF) is an independent trade membership
body representing Managed Service Providers (MSPs) and technology
companies, which aims to:
Champion and advocate the adoption of Cloud Services by businesses and
individuals.
Raise industry standards and bring greater transparency and trust to doing business
in the Cloud with its Code of Practice for MSPs.
Give end users the tools and information required in order to make informed
business decisions about adoption of the Cloud.
In June 2015, CIF surveyed 250 UK-based organisations. When asked about their biggest
concerns during the decision-making process to move to the Cloud, 70 per cent cited
data security and 61 per cent data privacy, both up from the 2014 figures of 61 per cent
and 54 per cent respectively. There has been an even more marked increase in those
worried about losing control/manageability of their IT systems; in 2014, just 24 per cent
cited this as a concern, compared with 40 per cent today.
The primary issues relate to trust; the CIF Code of Practice clearly addresses these
concerns as suppliers are required to address key questions and provide evidence to the
certification body to substantiate claims. The Code covers 3 main areas.
Transparency: Specified information must be made publicly available (e,g, ownership,
board, locations) or during contracting process (e.g. migration paths, licensing and
provisions for data protection and business continuity). Commercial terms in particular
must be clear, including disclosure of fully burdened pricing, contract periods and
renewal processes.
Capability: Suppliers complying with the Code are required to have documented
management systems and resources in place to deliver specified capabilities such
as service levels, information security management (including data protection), data
management and service continuity.
Accountability: The executive(s) of the service provider are required to make binding
commitments to the Code of Practice, including complaint resolution procedures with
customers for code related practices.
CIF - SELF CERTIFICATION
www.cloudindustryforum.org
CIF Certification
now formally
recognised by
EU Commission
through CCSL
Bringing greater
transparency and
trust to doing
business in the
Cloud with its Code
of Practice for
MSPs