Private vs. Public
Cloud Solutions
Selecting the right cloud technology to fit your organization
Introduction
As cloud storage evolves, different cloud solutions have emerged. Our first cloud
whitepaper served as a high-‐level overview of solutions being utilized by companies, both
large and small, to improve business processes, provide excellent customer service, and compete in larger markets.
There are two widely used solutions today: the Public cloud and the Private cloud. Beyond these different solutions, there are also various cloud models available, including Software as a Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS). For the purposes of this whitepaper, we will be most closely comparing private and public cloud solutions.
When your organization chooses the appropriate cloud solution, it will experience increased security, availability, and cost-‐effectiveness. Selecting an appropriate cloud solution
requires thorough research and careful analysis in order to realize these benefits.
The whitepaper will read as follows:
1. We clearly define private and public clouds and provide their respective advantages. 2. We examine the similarities and differences between the two.
3. We detail security and data control options that are common with each solution. 4. We conclude with a careful set of questions to guide you toward select the right
cloud solution for your organization.
This whitepaper will outline the similarities and differences between the various cloud solutions and serve as a guide for choosing the right model. It can serve as a starting point to your careful research and analysis. We aim to provide you with information and steps for analysis, so you can use the cloud to your advantage.
What is a Private Cloud?
A private cloud, often referred to as a corporate cloud, is designed for a specifically
designated group of users. This type of cloud is ideal for businesses that require one or more of the following:
• Protecting confidential data
• Meeting strict security regulations, data privacy laws, or compliance standards • Utilizing the highest security measures
An example of a private cloud is a large corporation with authorized users in multiple locations, all accessing the same applications and data.
Organizations that typically use private clouds include government entities and healthcare companies.
Some advantages of a private cloud solution include:
• Secure control of company data • Ability to easily create a custom server • Scalability
What is a Public Cloud?
A public cloud is a shared infrastructure available to the general population. Public clouds are easily accessible portals that are designed for self-‐service.
If a private cloud is a locked facility, requiring specific admissions to the entire facility, a public cloud is an unlocked building in which each user has their own ‘locker’ containing their files and data. In the public cloud, users access the locker contents only when connected through the cloud. Billing for a public cloud is generally pay-‐per-‐usage, so customers are only charged for what they use.
A public cloud offers a multi-‐tenant infrastructure of shared resources including network availability, storage, and IT services on an as-‐needed basis. Depending on the nature of the business, public clouds can be a very attractive alternative to purchasing and maintaining a high cost infrastructure.
Companies using a public cloud solution include social media sites, marketplace websites, and various email service providers.
Some advantages of a public cloud solution include:
• Fast and inexpensive set-‐up • Pay as you go fee structure
• Scalable to meet the needs of each company • Location independent
Similarities and Differences: Private and
Public Clouds
When choosing a cloud application, it is important to fully comprehend how Public and Private clouds compare. Choosing the wrong technology can cause financial devastation for businesses of all sizes.
Similarities
Private and public cloud technologies share few similarities. Both fulfill the desire for simplicity within and across secure applications. Private and public clouds offer reliable, secure platforms and allow an organization to be time and location independent. Cloud solutions are cost effective, eliminating staffing, hardware, and software expenses.
Private and public clouds offer levels of security and reliability, with varying specifics. Both private and public cloud technologies fulfill the idea to eliminate a physical location for system access. The cloud was designed to easily share information over the Internet, which makes data available to users 24 hours a day, seven days a week, barring any serious
outages, network failures, or bandwidth limitations. Lastly, the financial model of cloud solutions is attractive, compared to traditional technology structures.
Differences
Despite some similarities, private and public clouds differ in many facets. These differences define which cloud might best serve an organization.
Architecture
Public Cloud
Public clouds are virtualized and managed data centers that fall outside of a business firewall. These third party solutions offer the cloud to clients on demand via the Internet.
Private Cloud
Private clouds are virtualized data centers within the firewall of a business. These internal clouds are available only to a specific group of authorized users.
Cost
Public Cloud
Initial startup cost for a public cloud may prove more cost effective than a private cloud. Many public cloud providers offer customized solutions at a very granular level; allowing you to select only the services needed. Long term data storage cost should always be examined when comparing cloud technologies.
Private Cloud
Private clouds are essentially an onsite data center; no matter the size. Therefore, ownership could include a hefty budget to purchase and maintain the required
hardware and other components to support the cloud. The cost of scalability to account for storage needs or company growth must also be considered.
Performance
Public Cloud
When public cloud users are affected by reduced performance or a widespread outage; they are 100% reliant on the cloud service provider to correct the issue.
Private Cloud
Public and private clouds may both experience reduced performance during peak usage timeframes. However, a private cloud will have more control over how to immediately address any usage spikes or outages.
Security and Data Control
Public Cloud Security
Public cloud security is typically scrutinized. Public cloud services do have security measures in place that are more than adequate for the average user, however, a Virtual Private
Network (VPN) enabled public cloud with additional security layers addresses many public cloud security concerns. First, an organization will need to decide how critical each
application is to the business. After this decision is made, the company will be able to determine how severe the security for each application needs to be.
In order to increase public cloud security, organizations should identify and utilize third-‐party auditing services. The auditors will continually test the cloud service to determine the safety of company data and your service providers for a minimum of six months. If deemed
necessary, additional authentication levels can be included in cloud computing services. An organization can add their own encryption levels to each of their applications. First, decide if additional encryption levels should be added only to certain applications, or to all
applications. Another option is to only include the organization’s least sensitive data in the public cloud. Privacy and security may not be an issue for a business that does not handle sensitive data that is required to follow strict security regulations or data privacy laws.
For businesses that uphold security and data privacy as their top priority, the risks of exposure far outweigh the benefits of a public cloud solution. Businesses held to government regulations or security requirements are simply not willing to trust their security needs to a third party and will need to opt for a private cloud.
Private Cloud Security
Private cloud security is generally less problematic. However, organizations should continue to take precautions because nothing is 100% risk free. A potential security breach can stem from someone in a department that has access to private cloud information. If he or she is not behaving properly or was recently let go, then this could potentially lead to problems in an organization’s private cloud. As in the public cloud, data and service providers should be tested regularly. When testing cloud technology, both inside the cloud and around the cloud’s perimeter should be reviewed.
Which cloud computing model should I
choose?
It is crucial for management to examine all costs involved before committing to any cloud solution. Performing a Cost Benefits Analysis or a Risk Analysis should be considered before making any cloud solution decisions.
It is important that an organization carefully review the following considerations as they select the appropriate cloud model that meets their needs and structure.
Our business could benefit from the ability to add computer capacity for peak times or company growth with ease.
Yes No Current organization could handle an onsite data center.
Yes No
Current organization cannot support an onsite data center at this time.
Yes No We handle various pieces of personal information and we must follow strict security regulations or data privacy laws.
Yes No
Our cloud service needs may vary month to month or even week to week.
Yes No Maintaining control of our data and security is our highest priority.
Yes No
Our business does not handle personal information protected by data security or privacy laws.
Yes No Unlimited customization of a cloud solution is a requirement for our business.
Yes No
If more than 2 of these statements are true for your business, you should further explore a public cloud option.
If more than 3 of these statements are true for your business, you should further explore a private cloud option.
