1. Cloud Computing and Records Management – How proper planning can ensure you don’t miss the next wave in IT Services and Platform Delivery: George Broadbent Director, Entium Technology Partners [email_address] Jamie Brown Director, Colt Telecom [email_address]
10. History of Computing Cloud Computing Individual Computers Networked Computers Peer-to-Peer File Servers Knowledge management Records Management (electronic) Sneaker Net Shared Folders Storage Area Networks Software As A Service Infrastructure As A Service Folders ECM Web Based Apps Level of Complexity / Ease of Sharing 25 + Years
25. Types of Clouds Private Private Public Public Public Your Company Your Company Your Company
26.
27.
28.
29. Communication Tiers ECM: Livelink, FileNet, Sharepoint, etc Desktop: E-mail, Office Suite Social Networks: Facebook, Twitter Photos Source: commons.wikimedia.org
30.
31.
32.
33.
Editor's Notes
Slide 1: Title Slide Insert the ARMA approved title for your session (this title can be found in your contract or by visiting http://www.arma.org/learningcenter/facilitator/programdetails/index.cfm Click on My Program Details for your finalized title.) Insert the facilitator’s name. If you choose, insert the facilitator’s job title and company name. Insert the Education Code. This also can be found on the website at: http://www.arma.org/learningcenter/facilitator/programdetails/index.cfm
Slide 4: Bullet Slide Format Font sizes may be adjusted as needed. Please keep in mind that font smaller than 24 is very difficult to read.
example
Example of utility
Slide 4: Bullet Slide Format Font sizes may be adjusted as needed. Please keep in mind that font smaller than 24 is very difficult to read.
Slide 4: Bullet Slide Format Font sizes may be adjusted as needed. Please keep in mind that font smaller than 24 is very difficult to read.
Slide 4: Bullet Slide Format Font sizes may be adjusted as needed. Please keep in mind that font smaller than 24 is very difficult to read.
Electricity – This is an area that I like to compare the modern computer industry to. Originally the Power industry was a local event. Water Wheels and such powered the local manufacturing plants, much the way that today almost every corporation has their own data centers. As the Power Industry matured, it became more of a utility, more of a central service provider. Much the way that the advent of cloud computing allows for companies to “tap” into the resources that they need when they need them. However, the rate of change for the Power Industry was far slower than the computer industry .. Next slide.
The evolution of the modern computer industry (post 1980) is fraught with rapid change and disruption to corporations. This rapid change has caused law makers to have a knee jerk reaction in many cases to issues of data security and privacy. This has created a speckled landscape of regulations that have a direct impact on your organization.
Source: http://news.cnet.com/8301-13953_3-9977100-80.html?tag=mncol A style of computing which is massively scalable, having IT related capabilities as a service, using internet technologies, capable of serving multiple external customers What is COLT Doing? COLT Customers are already gaining real benefit from virtualization and utility based managed service. For a variety of reasons –migration from old technology; implementing development environments; cost-effective new application introductions; scalable new business offerings; on-demand IT services. ING – UK: Mixed physical and virtual infrastructure – new trading application 150 servers - Hybrid - 30 Virtualised – multi-site UK and Germany Direct Line Insurance - Germany: Migration to virtualised environment To create a demand-based utility service that can be tailored to meet demand COLT Managed Utility Services, virtual utility servers providing high availability, performance and flexibility to meet demand. In the months of October and November last year, around 600,000 users found out about their premiums for Direct Line car insurance – in peak periods, up to 20,000 users per day accessed the direct insurer’s portal. COLT provides the Utility Service as virtual servers in the COLT Telecom’s own Data Centre in Frankfurt.. Neversa – Germany: New IT Services approach Provides insurance services primarily the occupational pensions of employees of the Nestlé Group. COLT provides a Managed workspace offering which goes beyond simple IT Services - Managed Workspace is an all-inclusive service package. Here are all the relevant software applications "on demand "basis. Whether specific Applications, standard office programs or Internet access. Mondial Assistance – France: Development environment Virtualisation solution running for more than 1 year – 20 servers – development environment Europe’s largest ticket exchange – new company UK: 10 servers – web servers, application servers, database servers – dual site -– managed to scale to cope with simultaneous demand for U2 and Michael Jackson ticket sales. 232% annual growth in transactions last year.
Reduction in CAPEX costs Reduction in fixed assets Ability to Align IT resources with business needs, cost-effectively
There is a challenge between the need for consistent services driven by a centralised control mechanism in a dynamic manner vs. the level of perceived control of physical assets and thereby the freedom to innovate within the customer company’s IT group. Importantly, Cloud Infrastructure Services must be part of the business – not merely a service to it The Cloud Infrastructure Services potentially threatens internal IT heads and groups and creates a tension between what the IT part of every business must become as opposed to what it presently is today.
InformationWeek Google Apps Contract In LA Hits Security Headwind The City of Los Angeles faces worries about privacy and security as it considers moving to Google Apps. By Thomas Claburn, InformationWeek July 20, 2009 URL: http://www.informationweek.com/story/showArticle.jhtml?articleID=218501443 Los Angeles Mayor Antonio Villaraigosa was asked on Friday to weigh potential privacy and security risks before allowing the City of Los Angeles to ditch Microsoft and Novell for Google. In a letter to the Mayor, Pam Dixon, executive director of the World Privacy Forum, urges "a thorough analysis and risk assessment of all privacy and other confidentiality impacts that may occur" if the City of Los Angeles goes through with its proposal to replace its e-mail system and office applications with Google Apps. "Our concern is that the transfer of so many City records to a cloud computing provider may threaten the privacy rights of City residents, undermine the security of other sensitive information, violate both state and federal laws, and potentially damage vital City legal and other interests," Dixon wrote. Dixon's letter follows a week of handwringing about Web security after a hacker who broke into Twitter in May began distributing the company's internal documents to media sites and bloggers. The $7,250,000 contract under consideration in Los Angeles is expected to cost $8,312,410 over five years and to save the city $6,253,373 in Microsoft Office and Novell GroupWise license fees over that same period. The City expects to realize an additional $7,528,324 in "soft savings," through shifting IT personal devoted to GroupWise to other purposes. It's also considering reducing its software license expenses through layoffs. About $1,507,209 of the potential funding for the Google transition is expected to come from Los Angeles' portion of a $70 million class action antitrust settlement with Microsoft that occurred in June, 2006. A report on the proposed contract from the Office of the City administrative Officer states that Microsoft Office is generally considered to have a larger feature set that Google Apps and that because some City employees rely on those features, about 20% of the City's computer users are expected to continue using Microsoft Office indefinitely. The report assumes that about 30,000 workers will transition to Google Apps. The Los Angeles Police Department, however, is still evaluating the security and privacy implications of the proposed change. If the LAPD chooses not to make the change, only 17,000 City employees are expected to shift to Google Apps. Google says that government agencies on all levels are considering cloud computing as an option. "We're excited that Los Angeles is considering joining other cities like Washington, D.C. and Seattle who have chosen cloud computing for their technology solutions," a spokesperson said in an e-mail. "Hosted software is designed to be extremely reliable, safe, and secure." According to the City's report, the City's Information Technology Agency (ITA) "has stated that the level of security for City data will be higher under the proposed contract than is currently the case." Nonetheless, the LAPD and the City Attorney have a considerable amount of highly sensitive information. The ITA believes that document confidentiality can be maintained through enterprise encryption options available through Google. Rick Gordon, managing director of the Civitas Group, a security consulting firm, has concerns about lack of a reliable audit standard, data lock-in, and Google's opacity regarding its internal data security procedures. He characterizes the City report as "hand-waving at its worst." "While the City will audit the service provider, neither has articulated a reliable standard to which the provider will be audited," he said in an e-mail. "More troubling is that LA will rely on the contract winner to help define a security standard -- an incestuous practice. Rather than having the provider define the security itself, the City should be looking to established third-party standards that hold the provider accountable to a reasonable level of security." Concerns about lock-in, however, aren't exclusive to Google. According to the City's report, the LAPD currently uses 1,200 Microsoft Access databases and until Google offers an alternative that can import the data from Access, the City will have to continuing to support Access. Chances are, however, security and privacy worries will be addressed to the satisfaction of most stakeholders. The Obama administration is specifically promoting cloud computing as a major government initiative to save money and better serve users of government systems. With Seattle and Washington, D.C. already committed to cloud computing, and Los Angeles on the verge of doing the same, further federal, state, and local conversions to the cloud seem likely to follow.
Facebook Privacy Issues A Canadian privacy commission report released on Thursday says that Facebook breaches privacy laws there. The report, outlined by Canadian Privacy Commissioner Jennifer Stoddart at a press conference in Ottawa, criticizes the fact that Facebook retains user information after users have closed their accounts. Facebook has around 12 million Canadian users, which equates to 1/3 of the population; and yet the country’s privacy commission expressed “an overarching concern” that Facebook’s privacy information displayed to users is “often confusing or incomplete.” Other criticisms were targeted at Facebook’s apps program: the report says too much private data is provided to 3rd party developers. Meanwhile, Facebook’s retention of data from deactivated accounts violates the Personal Information Protection and Electronic Documents Act, the commission claims. Facebook has been given 30 days to implement the changes, and has already agreed to “most” of them, according to a release. FacebookFacebookFacebook Chief Privacy Officer Chris Kelly is quoted in an AFP report on the issue as saying “We continue our dialogue and have every confidence that we will come to acceptable conclusions. I think the concerns are fully resolvable.”
Microsoft Moves Cloud Microsoft's Drag-And-Drop Windows Azure Cloud Posted by John Foley @ 09:45:AM | Aug, 7, 2009 Citing an unfavorable change in tax laws, Microsoft is moving its Windows Azure cloud from a data center in Washington state to one in Texas. It's an interesting new twist in the cloud computing market—moving a cloud across state lines in response to the regulatory climate. In a blog post on its Windows Azure site on Tuesday, Microsoft revealed that it's moving Azure-based apps from its Northwest region, citing "a change in local tax laws." According to an article on DataCenterKnowledge.com, Microsoft faces a 7.9% tax on new data center gear, following a period in which it apparently paid no such tax. In February, SeattlePI.com reported that a tax exemption could be worth more than $1 billion to Microsoft and other data center operators in Washington. Michael Manos, the former GM of Microsoft data center services and now senior VP with data center specialist Digital Realty Trust, suggests that we're witnessing the beginning of "a cat and mouse game that will last for some time on a global basis." In a blog post, Manos provides examples of how government regulation can affect data center location and cost, and he makes the point that laws and regulations can change after a data center gets built. What then? The answer is to move the data center or, in the case of Microsoft, to move the services that represent the data center's biggest area of growth, its Windows Azure cloud services. (Azure is due for availability in November.) "The 'cloud' will ultimately need to be mobile in its design," Manos writes. Moving the data center itself would be an extreme measure, though within the realm of possibility. While at Microsoft, Manos helped conceive a blueprint for modular data centers that can be assembled like Lego blocks and, presumably, disassembled and reassembled.
Notice - Individuals must be informed that their data is being collected and about how it will be used. Choice - Individuals must have the ability to opt out of the collection and forward transfer of the data to third parties. Onward Transfer - Transfers of data to third parties may only occur to other organizations that follow adequate data protection principles.
Our control over the communications tiers lessens as we move further away from the corporate user. Social networks pose a unique challenge from a corporate policing perspective. Capturing that information is critical for regulated environments.