evaluating cloud based software offerings · evaluating cloud based software offerings everything...
TRANSCRIPT
![Page 1: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/1.jpg)
2016 ARMA Houston Spring Conference
Evaluating Cloud Based Software Offerings
Douglas P Allen, CRM, CDIA+
![Page 2: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/2.jpg)
2016 ARMA Houston Spring Conference
2
Evaluating Cloud Based Software Offerings
![Page 3: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/3.jpg)
2016 ARMA Houston Spring Conference
3
Evaluating Cloud Based Software Offerings
AGENDAIntroduction & Background
Everything old is new again
What is the cloud and what are the advantages
& What are the risks?
What makes land records unique?
Internal Considerations
Legal Considerations
Vendor Related Considerations
Cautionary Tale
![Page 4: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/4.jpg)
2016 ARMA Houston Spring Conference
4
Evaluating Cloud Based Software Offerings
Introduction & Background
![Page 5: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/5.jpg)
2016 ARMA Houston Spring Conference
5
Evaluating Cloud Based Software Offerings
Cloud Datacenters exist SOMEWHERE!
![Page 6: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/6.jpg)
2016 ARMA Houston Spring Conference
6
Evaluating Cloud Based Software Offerings
Some Terminology
◦ IaaS - Infrastructure as a Service
◦ PaaS – Platform as a Service
◦ SaaS – Software as a Service
◦ Hosted Solutions
![Page 7: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/7.jpg)
2016 ARMA Houston Spring Conference
7
Evaluating Cloud Based Software Offerings
Infrastructure as a Service - IaaS
![Page 8: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/8.jpg)
2016 ARMA Houston Spring Conference
8
Evaluating Cloud Based Software offerings
Platform as a Service - PaaS
![Page 9: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/9.jpg)
2016 ARMA Houston Spring Conference
9
Evaluating Cloud Based Software Offerings
SaaS – Software as a Service
![Page 10: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/10.jpg)
2016 ARMA Houston Spring Conference
10
Evaluating Cloud Based Software Offerings
Hosted Solutions – What’s different from SaaS?
![Page 11: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/11.jpg)
2016 ARMA Houston Spring Conference
11
Evaluating Cloud Based Software Offerings
![Page 12: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/12.jpg)
2016 ARMA Houston Spring Conference
12
Evaluating Cloud Based Software Offerings
Everything Old Is New Again
◦ 1960s to 1980s – Computer Service Bureaus OR Large Centralized IT organizations delivering “green screen applications”
◦ 1990s to 2000s – Adoption of localized computing environments, increase in vendor-provided, on-premise application solutions
◦ 2010s and Beyond – Vendor provided Cloud Based Solutions / Cloud Service Providers
![Page 13: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/13.jpg)
2016 ARMA Houston Spring Conference
13
Evaluating Cloud Based Software Offerings
So… If you’re not “lost” yet…..
![Page 14: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/14.jpg)
2016 ARMA Houston Spring Conference
14
Evaluating Cloud Based Software Offerings
We Already Use “the Cloud”
![Page 15: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/15.jpg)
2016 ARMA Houston Spring Conference
15
Evaluating Cloud Based Software Offerings
Weighing Risks v Benefits
![Page 16: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/16.jpg)
2016 ARMA Houston Spring Conference
16
Evaluating Cloud Based Software Offerings
Benefits
◦ Limiting Capital Budget Needs
◦ Eliminate Need for Server Management
◦ Eliminate Need for Upgrades of Operating System & Database Management Software at Server Level
◦ Reduced Reliance on County IT Staff
◦ Ability to Incorporate Disaster Recovery Needs
◦ Ability to Scale for Increasing Storage Needs & Increased User Count
![Page 17: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/17.jpg)
2016 ARMA Houston Spring Conference
17
Evaluating Cloud Based Software Offerings
Risks (continued)
◦ Data Ownership
◦ Experience of SaaS Provider
◦ Qualifications of Provider’s Staff
◦ Financial Stability of Provider – Bankruptcy?
![Page 18: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/18.jpg)
2016 ARMA Houston Spring Conference
18
Evaluating Cloud Based Software Solutions
Benefits
◦ Limiting capital budget needs
◦ Limiting need for IT support staff
![Page 19: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/19.jpg)
2016 ARMA Houston Spring Conference
19
Evaluating Cloud Based Software Offerings
Eliminate Need for Upgrades of:
◦ Operating System
◦ Database Management Software at Server-level
◦ Server-level anti-virus software, anti malware software, hardware and software based firewalls
![Page 20: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/20.jpg)
2016 ARMA Houston Spring Conference
20
Evaluating Cloud Based Software Offerings
Ability to scale
◦ Increased numbers of end-users of applications
◦ Increased web access for end-users
◦ Potential for increased storage capability to accommodate data growth over time
◦ Potential for incorporation of disaster recovery (application and data)
![Page 21: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/21.jpg)
2016 ARMA Houston Spring Conference
21
Evaluating Cloud Based Software Offerings
Risks
◦ Accessibility
◦ Data Security
◦ Data Location
◦ Data Segregation
◦ Data Integrity
◦ Inability to Manage Life Cycle of Information
![Page 22: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/22.jpg)
2016 ARMA Houston Spring Conference
22
Evaluating Cloud Based Software Offerings
◦ Accessibility
Access at your office / Access for your clients or customers
Potential for down-time? Internet disruptions / Denial of service attacks
Potential for reduced responsiveness (slow response times)
![Page 23: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/23.jpg)
2016 ARMA Houston Spring Conference
23
Evaluating Cloud Based Software Offerings
Risks
◦ Security
Physical Security
Data Security
Internet Security
![Page 24: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/24.jpg)
2016 ARMA Houston Spring Conference
24
Evaluating Cloud Based Software Offerings
A Few Words About Security
◦ SSAE 16 (fka SAS 70)
![Page 25: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/25.jpg)
2016 ARMA Houston Spring Conference
25
Evaluating Cloud Based Software Offerings
Risks
◦ Data Security
Access Security
Firewalls
Intrusion Detection
Anti-Virus, Anti-Malware, etc. Protection
Operating System patches
Database and Application security
![Page 26: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/26.jpg)
2016 ARMA Houston Spring Conference
26
Evaluating Cloud Based Software Offerings
What is SSAE-16?
![Page 27: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/27.jpg)
2016 ARMA Houston Spring Conference
27
Evaluating Cloud Based Software Offerings
Inability to Manage Information Life-Cycle
◦ Retention management –
Storage for how long?
Ability manage disposition of records?
Ability to manage / document disposition of records?
![Page 28: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/28.jpg)
2016 ARMA Houston Spring Conference
28
Evaluating Cloud Based Software Offerings
Can the risks be mitigated? – Yes
Can the benefits be realized? – Yes!
![Page 29: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/29.jpg)
2016 ARMA Houston Spring Conference
29
Evaluating Cloud Based Software Offerings
What Makes Records Management Aspects Unique?
o On-premise ECM Solutions often support policy-compliant records disposition processes
“Storing forever” or Highly limited storage timeframes
Inability to provide security regarding records disposition
o Application-specific cloud based solutions may NOT support any particular disposition processes
Inability to document disposition of electronic records
![Page 30: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/30.jpg)
2016 ARMA Houston Spring Conference
30
Evaluating Cloud Based Software Offerings
Organizational Considerations
o Internet Bandwidth of office(s)
o Bandwidth Costs
o Reliability of Existing Internet Service Provider (ISP)
o Tolerance for Internet Outages
o Growth of Storage Over Time
oManagement of Retention and Disposition
![Page 31: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/31.jpg)
2016 ARMA Houston Spring Conference
31
Evaluation of Cloud Based Software Offerings
Vendor Considerations
◦ Financial health of vendor & subcontractors
◦ Vendor level of experience with cloud-based application
◦ Vendor “ownership” of cloud site or ability to manage/direct subcontractor
◦ Vendor experience – How many years? Number of clients? Prior data breaches?
![Page 32: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/32.jpg)
2016 ARMA Houston Spring Conference
32
Evaluation of Cloud Based Software Offerings
Vendor Considerations – Part II
◦ Vendor monitoring of cloud site – 24 X 7?
◦ Vendor fail-over capabilities (what happens when primary site is down?)
◦ Hosting location / locations
◦ Vendor testing processes for backup and recovery
◦ Vendor policies for refresh of hardware, operating systems, etc.
![Page 33: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/33.jpg)
2016 ARMA Houston Spring Conference
33
Evaluating Cloud Based Software Offerings
Legal Considerationso Contract Needs and Requirements
o Where is the cloud?
o Who owns the cloud? – Vendor? Subcontractor?
o What is included in the cloud based solution for security?
o Data Use and Ownership by County
o Uptime Requirements
o Vendor’s Disaster Recovery capabilities
![Page 34: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/34.jpg)
2016 ARMA Houston Spring Conference
34
Evaluating Cloud Based Software Offerings
Legal Considerations – Part 2
◦ Potential Security Issues
◦ Management of Authorized Users
◦ End of contract terms
![Page 35: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/35.jpg)
2016 ARMA Houston Spring Conference
35
Evaluating Cloud Based Software Offerings
What’s Happening on the Vendor Side of the Cloud?
◦ Hundreds of cloud vendors today
![Page 36: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/36.jpg)
2016 ARMA Houston Spring Conference
36
Evaluating Cloud Based Software Offerings
A Cautionary Tale
◦ Texas Education Agency – Bankruptcy of Cloud Provider
![Page 37: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/37.jpg)
2016 ARMA Houston Spring Conference
37
Evaluating Cloud Based Software Offerings
To SaaS or NOT to Saas?
◦ Depends on organizational needs, policies
◦ Benefits about as do risks
◦ Plan for managing potential risks
◦ Recommendation 1 – Do your homework
◦ Recommendation 2 – Learn what you need to know
◦ Recommendation 3 – Ask questions and evaluate which alternative is best?
![Page 38: Evaluating Cloud Based Software Offerings · Evaluating Cloud Based Software Offerings Everything Old Is New Again 1960s to 1980s –Computer Service Bureaus OR Large Centralized](https://reader034.vdocuments.site/reader034/viewer/2022042320/5f0a7be67e708231d42bdc32/html5/thumbnails/38.jpg)
2016 ARMA Houston Spring Conference
38
Evaluating Cloud Based Software Offerings