The cat, as we know, is
already out of the bag
.
•
What are the pros and cons of the
college adopting the use of
cloud-based solutions for email, storage,
office applications, etc.?
•
How do you strike a balance
between information security and
the needs/desires of the college
community (students, faculty,
staff)?
pros and cons of adopting cloud-based solutions
It’s time to stop protecting what was and
start embracing what’s possible
.Cons
1. Potential privacy issues
2. Foil requests - archiving and backup limitations 3. Potential risk of data breach
4. Loss of flexibility
5. Technical support based on contract and offsite resources
6. Problem resolution response times will change 7. Application usage limited to the terms and
conditions of a contract. 8. Potential Section 508 Issues
Pros
1. System Availability – large mirrored data centers 2. FISM certified (Federal Information Security
Management) GMAIL 3. Built in SPAM filter GMAIL 4. Usage Cost Goggle APPS
5. Hardware service costs reduced or eliminated
6. Software licensing and support contracts reduced or eliminated
7. Reallocation of personnel and hardware resources 8. No patching or upgrading
9. Training materials in place and ready
10. Reduced communications bandwidth usage 11. Enhanced information security
Give me a one-handed economist! All my economists say, On the one hand on the other. - Harry S Truman
What’s
your
digital
Footprint?
The cat, as we know, is already out of the bag.
Staff, students and faculty all use Gmail and
Google Docs, many in institutions that have no
contractual relationship with Google. By their very
nature, these are cloud applications.
Cornell
Risk Mitigation
1. Establish comprehensive privacy compliance programs and make information management a
permanent part of the institution’s culture.
2. Establishing expectations with vendors early in negotiations is critical to an outcome that elevates colleges and universities in the enterprise cloud environment.
3. Compliance programs may never be perfect, compliance never is. But imperfection is no excuse for doing nothing.
4. Either we do it for ourselves, or cloud computing will do it to us
negotiating cloud computing agreements
• Contract Review
• Service Levels
• Data Security Breach Notification • Legal Process Notification
• Use of Customer Data
• Compliance with European Data
Protection Law
• Limits of Liability • Indemnity
• Representations and Warranties • Termination
• Termination Assistance
• Secure Destruction of Customer Data at
Termination
Although the quickening stampede to the cloud may be justified, the cloud services procurement process must include an informed analysis of the potential business, legal, financial and reputational risks involved.
Andrew Geyer and Melinda McLellan are senior associates in the Global Technology, Outsourcing and Privacy practice group at Hunton & Williams LLP.
Technology Trigger
Peak of Inflated Expectations
Trough of Disillusionment Slope of Enlightenment Plateau of Productivity Research Methodologies methodologies@gartner.com
Magic Quadrant and MarketScope
Cloud applications and storage
HYPE Cycle
6Ds of Exponential Growth
•
Deceptive
– early stages of exponential growth processes may be
deceptively linear
•
Disruptive
– once exponential growth reaches the inflection point,
they become truly disruptive
•
Digitized
– more information is becoming digitized
•
Dematerialized
– no longer do you have to buy a flashlight or digital camera, you can simply purchase an
app
•
Demonetized
– as manufacturing techniques improve, technologies are becoming less expensive
•
Democratized
– there will be 3 billion more people on the Internet by 2020, leading to more perspectives
In 10 years, it’s predicted that 40% of the Future 500 Companies will no longer exist. * Babson Olin School of Business, Fast Company April 2011, page 121. “The average lifespan of a company
listed in the S&P 500 has decreased from 67 years in the 1920’s to 15 years today.” - Richard Foster, Yale University Peter H. Diamandis MD Singularity University
“At the beginning of the day, it’s all about possibilities. At the end of the day, it’s all about results.”
