2
Purpose and Methodology
Survey Sample
Fielded Dec 20, 2011-Jan 8, 2012
Total Respondents 178 security decision-makers
Margin of Error +/- 7.3%
Audience Base CSOonline.com
Survey Method
Collection Online Questionnaire
Number of Questions 25 (incl. demographics)
Survey Goal
To measure cloud computing trends among security decision-makers including usage and plans across various cloud service and
deployment models, investments, business drivers and impact on business strategy and plans.
3
Cloud Computing Definitions
Cloud Computing – a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction.
Cloud Deployment Models
Community Cloud – Shares infrastructure between several organizations from a specific community with common concerns (e.g., security, compliance, jurisdiction), whether managed internally or by a third-party and hosted internally or externally.
Public Cloud – The cloud infrastructure is provisioned by the cloud provider for open use by the general public. It may be owned, managed, and operated by a business, academic, or government organization, or some combination of them.
Private Cloud – Infrastructure provisioned solely for a single organization, whether managed internally or by a third-party and hosted internally or externally.
Hybrid Cloud – A composition of two or more clouds (private, community, or public) that remain unique entities but are bound together, offering the benefits of multiple deployment models. It can also be defined as multiple cloud systems that are connected in a way that allows programs and data to be moved easily from one deployment system to another.
Cloud Service Models
Software as a Service (SaaS) – Employs the provider’s applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (e.g., web-based email), or a program interface. The provider manages or controls the underlying cloud infrastructure with the possible exception of limited user-specific application configuration settings.
Platform as a Service (PaaS) – Consumer-created or acquired applications supported by the provider are deployed onto the cloud infrastructure which the provider manages or controls. The consumer has control over the deployed applications and possible configuration settings for the application-hosting environment.
Infrastructure as a Service (IaaS) – The consumer provisions processing, storage, networks, and other fundamental
computing resources where the consumer is able to deploy and run arbitrary software, which can include operating systems and applications. The provider manages or controls the underlying cloud infrastructure while the consumer has control over operating systems, storage, and deployed applications; and possible limited control of select networking components (e.g., host firewalls).
4
Private Cloud Most Readily Adopted and Growth Expected
to Continue
Q. Approximately, how much of your organization’s information presently resides in each of the following cloud deployment models?
Q. Approximately, how much of your organization’s information do you expect will reside in each of the following cloud deployment models 18 months from now?
Source: CSO Cloud Computing Survey, January 2012
23% 8% 11% 5% 23% 11% 7% 4% 30% 13% 15% 8% 31% 19% 12% 4%
Private Cloud Public Cloud Hybrid Cloud Community Cloud
5
Enterprise Cloud Budgets Increasing
Q. Do you expect the percentage of your organization's IT budget allocated to cloud-based services computing to increase, decrease, or remain the same over the next 12 months? Approximately how much will your organization invest in cloud-based services computing (including software, services, training and other related costs) in the next 12 months?
Source: CSO Cloud Computing Survey, January 2012
63%
67%
1% 2%
36% 32%
2012 (1,000+) 2011 (1,000+)
6
Security Measures Instill Confidence
Very confident/
Somewhat confident
Not very confident
Not at all
confident
80%
6%
14%
Q. Considering the current polices and security measures in place at your organization how confident are you in the security of the data your organization has placed in the cloud?
7
Vendor Security Capabilities Key to Strategic Value
32% 40% 51% 51% 58% 59% 65% 67% 76% 79% 82%
Prior experience with this vendor Innovative ideas Knowledge of how my organization operates/organizational
structure
Ability to differentiate their portfolio from that of their competitors
In-depth insight and expertise regarding cloud trends and direction Experience in building and operating cloud environments in my
vertical industry
Ability to understand my business goals and objectives Offers the most cost effective model Experience in establishing effective governance policies and
procedures in the cloud
Proven post-sales support & service Experience in establishing effective security policies and
procedures in the cloud
Q. Please rate the importance of the following factors when evaluating cloud computing technology vendors as a strategic partner for your organization
8
Conclusions
Migration to the Cloud is on solid ground and continuing.
Private cloud is the most readily adopted, but public and hybrid are clear
growth areas.
Cloud budgets are expected to increase in the next year and spending will be
divided among different types of cloud services.
Cloud is expected to provide cost savings in the long run, however, it is difficult
to calculate what those savings might be.
IT is almost always consulted when business units/departments make cloud
purchases.
Cloud is driving the evolution of the IT department by requiring them to
become more critical across the organization, develop new roles or acquire
new skills.
9
