Category Archives: Security

Seven technology predictions for 2014

Posted on by
Reply

The year 2014 will be where current trends will accelerate the transformation already underway in how we consume information and do business and live. Organisations will need to evaluate their information strategy to take advantage of the emerging opportunities.

Here are seven trends to consider in the New Year:

Trend # 1 – the era of personal cloud

The cloud has exploded in popularity over the past few years, as companies exhaust backup, storage, network, security, and management systems. Consumer awareness of cloud storage is now increasing and usage is following suit.

Despite concerns that many industries have about cloud storage ability and their willingness to keep information secure, consumers will have little choice but to keep more information on these systems as opposed to their hard drives.

The push for more personal cloud technologies will shift toward services and away from devices. As mobile applications crowd the market, personal cloud services will become the new hub for content.

The risk for organisations is that being a consumer and being an employee is separate, but will the use of personal cloud be? Will someone taking a Friday off to work from home save documents to their personal cloud, which has different security measures to the organisations cloud, and put at risks the secrets of the new client pitch or new product development?

For 2014: Consider how personal and organisational cloud will interact for your business. Could they be at loggerheads before you have time to prepare your policies and inform your employees accordingly?

Trend # 2 – biometric authentication to replace passwords

Long gone are those days where a single password acted as a secure means of authentication. Today, a basic password takes minutes, if not seconds to break through. A string of characters can no longer keep your accounts and devices secure.

When was the last time you created a new password? As you were typing it in did a bar on the right hand side tell you whether it was weak, medium or strong? How many upper case letters or numerals did you include? Did I use the dog’s name or my favourite summer holiday spot for my internet banking password?

We are in the age where each and every person needs a little black book for their infinite passwords. But what happens if we lose the book?

The rapid proliferation of new devices has created additional security requirements for organisations attempting to increase its presence in the online market.

For enterprises that have not revisited their authentication strategies in several years, it may be time to take a fresh look. As identity becomes the driving force behind new security paradigms, biometric authentication will become the new practice as fingerprint and eye retinal scans become a part of our everyday activity.

For 2014: Be prepared! Adopt a security strategy built on advanced authentication techniques that will manage user access. Encourage regular password updates and educate your employees on what a strong password looks like. No dog names allowed.

Trend # 3 – out with the old and in with the new: embedded technology

Embedded systems are part of our daily lives. Can you imagine your life today, without a smart phone for communication?

2014 will see an uptake in embedded technology as the pressure will be on to add more intelligent functions into devices. The technology that initially drove mobile phones is now driving the adoption of smart devices. Touchscreens, smaller gadgets, and high performance sensors are just some of these innovations.

Wearable technology is a trend that will embrace the workforce. It is already starting. There will be more productivity apps in wearables as medical professionals begin using devices that overlay images on goggles. Google Glass is just the beginning, with other inventions to monitor, anticipate and feedback, well on their way.

For 2014: Anticipate the evolution of everyday products as technology becomes cheaper, smaller and more energy efficient. Technology will lead to automated homes, intelligent automobiles, smart buildings, and ubiquitous measure / control systems. How can your business embrace and jump on board?

Trend # 4 – go mobile or go home

The bring-your-own-device (BYOD) trend has completely changed the way businesses work. Executives using devices such as smartphones and tablets to access the corporate network is quickly becoming ubiquitous with an uptrend in remote working.

According to a report by Gartner, 70 per cent of mobile professionals will conduct their work on personal smart devices by 2018. The increase in mobile devices will challenge technology and finance departments as they try to manage mobile devices. But what type of personal smart device? Where are the tablet / smart phone headed? We are at the beginning of what the future world of personal smart devices might look like. If left unmanaged, BYOD can lead to data leaks and loss of control, which could potentially result in legal penalties.

With BYOD, the genie is out of the bottle as users expect to be online in more places at high speeds and with robust security levels. With the right solutions in place, BYOD can create new exciting opportunities.

For 2014: Create a clear policy around BYOD strategies that encompasses enabling secure, trusted, and convenient access. Be sure to implement a security model that has minimal impact on an employee’s experience, whilst maintaining the same security standards that your organisation upholds.

Trend # 5 – do more with less: the future is in M2M technology

Machine-to-machine’ (M2M) communication has given businesses the capability to monitor, control, or manage the operation of remote equipment. Today, M2M services have entered a renaissance period, playing a significant role as new products communicate with each other wirelessly without any human intervention.

This deregulation in the market will eventually garner new opportunities making it possible to map and monitor an entire system of remote hubs which could be anything from a building to a vehicle, to a fully armed security system.

The Internet of Things will enable devices to communicate with each other, while working out problems without interference. For instance, an M2M device will be able to automatically control the temperature of an air conditioner, while switching it on or off when required. These core capabilities will reduce error, save time, increase efficiency, and generally optimise the performance of any physical system.

For 2014: Maintain a strong and clear position in the market by developing plans and procedures that incorporate M2M technologies NOW rather than later. Prepare your organisation for change.

Trend # 6 – the new age of apps

With the continued growth and inescapable presence of BYOD, individuals have the capability of accessing all sorts of applications and information they need using their own devices anytime and anywhere.

Consumers are more technologically savvy and flock to app stores linked to their mobile platforms and devices while companies are investing in apps almost every day.

From 2014 onwards, there will be an app for almost everything, from everyday bills to mobile banking and much more. Something as simple as karaoke, which used to be entertained in restaurants is now a downloadable app. The same applies to music, where consumers can listen to unlimited songs using the appropriate app. This innovation will continue to increase, with the app market expected to reach $38 billion in just two years.

Propriety apps will become common, as more and more employees create and develop apps that support their business.

For 2014: Consider individual user’s needs for mobility, and get involved in the discussion. Organisations need to adapt their digital marketing campaigns to fit the small screens and the evolution of the app world.

Trend # 7 – the social dimension where everything is shared

We have reached a new communication age where social media is well established. Today, technology has enabled us to profile any individual or business by simply tapping into the material available online on social networks. Facebook itself has approximately 1.19 billion active users and roughly 507 million daily active mobile users, while twitter has roughly 554 million active registered users, with approximately 58 million tweets a day.

With the popularity of social networks it becomes easier to share information across the globe with a simple click of a button. This takes on a new level of urgency as organisations shift from an information age to a communication age. Facebook itself revealed what is known as “frictionless sharing”, which automatically posts updates on your page from everything you listen to, read or watch.

The concept of 3D printing is another trend that will explode the marketplace in 2014 and will assist in local and custom fabrication. New competition will enter the market using 3D Printers to challenge business models. Users will take advantage of new paradigms in replicating products, designs, and devices.

For 2014: Be careful with what information you disclose and to whom you disclose this too. Businesses need to pay close attention to ensure that all information or objects shared are subject to copyright or is trade market protected.

2014 will see an uptake in the adoption of smart technologies, innovative devices, and a plethora of cloud applications. With new technologies seemingly always on the horizon, keeping a hold over IT systems is becoming increasingly complicated. It is therefore important that businesses embrace the new trends and prepare for the opportunities ahead.

Original Publication

 

Technology predictions for 2014 & beyond

Posted on by
Reply

predicting technology futures – what’s in store for 2014?

Original publication

2013 has seen a number of technologies enjoy varying levels of success and growth, with mobile devices, cloud computing and enterprise app stores all continuing to gain momentum. As I have written about throughout the year on this blog, these technologies have all had that disruptive business model impact which makes them popular and shakes up the existing landscape.

As we approach the end of 2013, I see no reason to expect 2014’s emerging technologies and trends to be any different. So what do we have to look forward to?

wearable technology and absolute mobility

Mobile everywhere and mobile for everything. 2014 will be the year that mobile is ubiquitous, smarter, faster and our reliance on mobile connectivity becomes absolute.

2013 saw the emergence of bring your own device (BYOD) as a mainstream concept, with end-users pretty much eschewing the notion of work/life balance and taking their smartphones and tablets into the workplace as a matter of course and taking their work on the move with them, presenting companies with new security challenges. But the trend will continue and 2014 will see users expecting to be online in more places than ever, at high speeds and with more robust security levels.

This increased mobility will continue to be driven forward by the latest advances in mobile devices, with wearable technology to the fore. The announcement that Burberry’s chief executive has just jumped ship to join Apple is a good indicator of how technology and fashion will merge over the coming year.Google glass, smartwatches and other wearable devices will all connect to the internet and each other through the Cloud like never before. And speaking of the connected planet. . .

the Internet of things goes mainstream

The internet is dead, long live the internet of things. There are now more networked devices and machines on the planet than there are people and 2014 will see still more devices, appliances and vehicles come online and begin communicating with each other.

The internet as we know it has already changed the world and many aspects of our daily lives. It has benefited businesses, individuals and nations, often helping to transform the way governments deliver education, health and social services and making information more democratically available. The internet of everything addresses the next generation of networked devices, with machine-to-machine (M2M) communications powering new ways of doing everything. Right now our phones and tablets are our most common networked devices, but the internet of things will see the networking of cars, homes, appliances, televisions, meters, indeed most electrical and electronic appliances and devices. There is even a company in the Netherlands that has helped a farmer to connect his cows.

Forecasts vary, but recent research projects that by 2020 there will be 75 billion ‘things’ connected to the internet and communicating with one another. 2014 will be the year that everything being networked goes mainstream.

hybrid cloud and XaaS model

2014 will see IT architectures continue to evolve and bring greater flexibility to companies and end-users. In previous blogs I have written about the future impact of cloud computing on various IT disciplines, notably procurement, storage and business continuity and even the role of the traditional CIO.

The cloud will continue to transform throughout the coming year, and the direction it will take will be that of hybrid cloud. Companies with private cloud architectures in place should be ready to embrace personal cloud and make the shift to the hybrid model. The hybrid approach gives organizations greater operational flexibility and optimized costs without compromising security. Network performance is improved too.

The ‘as a service’ (XaaS) model will continue to grow in popularity as well, as organizations adopt its agility and flexibility benefits while also recognizing that the OPEX model carries major advantages over the traditional CAPEX, investment-up-front approach.

software-defined architecture

Software-defined architecture will also come to the fore in 2014 – a practice whereby the software or the application defines the purpose of the device itself. This can be a storage device or a server, or a personal device such as the music boxes or wristband and apps that tracks how you sleep, move and eat—then helps you use that information to feel your best. The function defines the form.

The software-defined approach can help revolutionize the way we program, use and interact with devices because it makes them completely customizable. Devices of any kind will become defined by their apps, making them directly programmable, more agile, centrally managed and configurable and giving us greater control.

share, share and share again

End-users are now, thanks to the rise and rise of social media, so used to sharing that it is second nature. There are now 1.15 billion active Facebook users and over 288 million active Twitter users, all sharing thoughts, information, news, opinions and more, all the time. There have been more than 16 billion photos shared on Instagram. And this is just the beginning.

3-D printing is one area where the sharing of ideas and designs is going to take off in a big way in 2014 and beyond. Sales of 3-D printers are forecast to grow by 75 per cent in 2014, as the technology takes hold in the mainstream. 3-D printing could have a massive impact on many industries, not least the manufacturing sector. It represents a new way of sharing, with companies no longer needing to produce things the same way. For example one company or individual can come up with a design or bright idea one day and that design can be shared and copied tomorrow. Manufacturing, product development, design and prototypes – all of these disciplines could be hugely affected. This does of course present a challenge similar to that faced by the music and movie industries; when you have moved from the physical world to the virtual, and people are so used to sharing, how do you protect intellectual property? Innovative smart machines may be the solution to that. But that’s for another blog post.

Happy 2014.

Original Publication

Digital Futures

Posted on by
Reply

Today cloud is about more than “just‟ cost reductions.

Research shows that 74% of companies that invest in were more competitively agile.

<div style=”margin-bottom:5px”> <strong> <a href=”https://www.slideshare.net/gordonmakryllos/digital-futures&#8221; title=”Digital Futures” target=”_blank”>Digital Futures</a> </strong> from <strong><a href=”http://www.slideshare.net/gordonmakryllos&#8221; target=”_blank”>gordonmakryllos</a></strong> </div>

More details can be found at ……    Digital Futures 

Cloud is home to next generation storage and business continuity

Posted on by
Reply

I’ve written several times recently on the disruptive nature of cloud computing and how its omnipresent nature is removing complexity from traditional business processes and practices. Another increasing trend I am seeing is significant change in business continuity (BC) and disaster recovery (DR) options driven by cloud technologies.

Most senior business leaders have been involved in some level of ICT disaster recovery at one time or another throughout their careers, and they can be stressful times. Sensitive corporate data is thrown into the wind, private employee information can also be put at risk, and daily business operations are disrupted by something more often than not beyond your control.

The key to ensuring smooth BC in the event of an unforeseen emergency is to have backup systems in place in at least one other location to allow your organization to transfer operations and processes – and today the cloud is providing a truly viable, cost-effective and flexible alternative location.

a question of costs

The cloud did take a little while to gain the trust of business owners and leaders, particularly when it comes to the storage of sensitive and confidential company information. There was a fear factor in place for quite a long time, but as the cloud continues to become an accepted mainstream tool, that attitude is changing.

With greater acceptance, more organisations are exploring cloud storage for BC and DR purposes. A number of cloud service providers now offer Backup “as-a-Service” and organisations are considering the many benefits of this option for cloud-based BC and DR  for servers and PCs, which can be scaled up or down depending on customer need.

It is this flexible nature which, as with all things cloud, is proving popular; customers want to control their costs and a cloud-based backup solution helps them to reduce their CAPEX outlay. There is no need for unnecessary in-house infrastructure for backup and storage since it is hosted in the cloud under the as-a-service model, freeing up budget and also internal data center capacity for other purposes.

gathering momentum and trust

BC and DR “as-a-Service” offers  real opportunity, and one which is only really beginning to be fully understood by customers who have long been used to the off-site but on company premises backup approach. We are in the Big Data era, meaning that as companies continue to build up more IT assets – laptops, PCs, tablets and smartphones – they are generating more data than ever before. As such more storage than ever is needed and storage costs are escalating.

So as organisations look to manage these escalating storage costs, one of the options is to engage with a cloud provider to investigate alternative storage and backup systems.  Cloud providers who can mutualise their costs across multiple user organisations and reduce costs can offer significant savings (in some cases as much as 50%) by taking BC and DR strategy into the cloud. But as with any other disruptive technology, there is a learning curve involved – some companies still need to get out of their comfort zones to reap the benefits of the cloud. The positive side for them is that in many areas of their business they are already doing just that; most organizations already engage with numerous third-party suppliers for business-critical services and processes. So the step into BC and DR in the cloud need not be such an intimidating one.

Industry research backs up the trend. IDC predicts that over 102 exabytes of external storage capacity will be sold in 2017, up from 20 exabytes in 2012, while the next four years will see external storage space purchased by companies grow by between 30 per cent and 40 per cent.

picking the right way forward

But companies need to decide the right way forward for their needs. Having decided to place BC and DR in the cloud, should they choose public, private or hybrid? There are many different options available on the market, but organizations must be wary of merely selecting an anonymous black box – their cloud storage solution can end up being based on no relationship with the supplier, without any visibility and only interacting via a web interface.

So it is worth evaluating the hybrid cloud approach which gives you a more traditional relationship with your supplier, including SLAs, greater trust and an on-going partnership – global enterprise organizations in particular need this kind of underpinning.

be aware of the pitfalls

So while evaluating the many benefits of BC and DR in the cloud, companies do still need to be aware of the potential hazards. Since breaking onto the scene as a disruptor, the cloud has almost become something of a drug. We utilize the cloud for so much of our daily lives now, both personal and professional, that it can become second nature and somewhat taken for granted. Consider the many stories of tourists going on holiday only to return home to massive roaming charges from their mobile service provider – this second nature of the cloud can mean racking up out of sight, out of mind bills.

So once you decide to take an as a service approach to storage and backup, be aware that you are now in the massive content and data generation era. A staggering 90 per cent of all the data generated ever has been generated over the last two years, and it all needs to be stored and backed up somewhere. We are creating more and more data all the time, and show no sign of stopping any time soon. But with organizations needing to manage this on-going data explosion on a cost-effective basis, I believe that the era of cloud storage and backup based on the OPEX model has truly arrived.

Original Publication

 

Unified communications: leading the cloud revolution

Posted on by
Reply

The term unified communication (UC) is a popular subject that has been floating around the workplace for some time….but is it really an essential component for businesses today? Do employees, or businesses for that matter, really understand the pros and cons?

The problem with the current workforce is that it is dependent but scattered: 78 per cent of workers are part of global teams that can be scattered across the world.

Being part of the global workforce isn’t in itself a hindrance: technology allows communication. It is estimated that the average worker carries 2.9 devices, increasing their accessibility. While having multiple devices – from email, to mobile phones, to desk phones, to videoconference and beyond – should make getting in touch with someone easier, it can actually hinder the process.

A simple example is this: calling someone on their office phone could see you leaving a message at reception, to be emailed to their inbox with the request to call you back. Ultimately, the excess in opportunity to contact someone wastes time and resources.

Unified communications (UC) is a solution that streamlines this process, uniting full time employees, managers, top level staff and part time workers to communicate in a new way, across broad geographic space and time zones.

UC integrates a variety of communication tools, from the traditional non real- time to the advancing real- time. Simplified down, a unified communications system should have five core capabilities: email, telephony, real time communications, calendars and directory services.

Originally, UC was the natural progression for a world where multiple communications channels could be accessed all at once. Now, however, it is a strategic business choice which enables easier workflows and more efficient workplace operations. According to a report by Frost and Sullivan, globally, the UC market is expected to grow from US$1144.8 million to US$2287.6 million by 2019.

The network effect

Regardless of the catalyst, as an organisation moves to UC, a platform can be adopted to integrate with existing frameworks – be it emails with a particular provider or a cloud solution. The UC platform, Unified Communications as a Service (UCaaS), intrinsically changes processes within an organisation. As UCaaS takes hold, employees begin working more efficiently, adapting to the ease of communicating in real time via a single interface, but across multiple communication styles.

This hyper connectivity will benefit performance and capability but could also cause network performance issues. Things that need to be considered are:

– An increase in network traffic and applications and the need to address incidents
– Monitoring UC components to assess if they are working correctly across the network
– In-depth or packet level monitoring

With the growth of unified communications and additional new applications, the management of each new service is becoming far too complex for IT departments. Finding the right UCaaS provider can actually address all of these issues, by generating a customised and optimised solution strictly for your business.

If UCaaS is running optimally, the benefits to the end user and the broader business are extensive. Shorter time frames and less follow-ups results in increased productivity. The allowed interactivity can also increase decision making, reducing time lines, and increasing satisfaction and budget delivery.

Data, cloud and the security conundrum

These benefits are undeniable, which largely explains why 88% percent of enterprises have deployed or are planning UC deployment. Increasingly, UCaaS is deployed across a hybrid cloud scenario. In any business running UC, unstructured data is being created, and at a rapid pace. When UC is run either wholly or partially via the cloud, this data and the security risks alongside it increase.

The cornerstone of a successful UC implementation is having up-to-date accurate user information. This raises the question of security and privacy. Do I really want others to see my personal details?

The implementation of UC also changes business workflow and the need of a middle man to assign telephony UC. Some other core security threats include:

• Host and network-based intrusion – something that we have lived with since the dawn of computer technology.
• A VoIP-enabled form of phishing – basic phishing techniques are applied to the UC suite, meaning confidential information can be revealed over the phone by appearing to call from an official location, but actually infiltrating the organisation.
• Toll fraud – the incorrect lodging and pricing of media traffic (images, videos etc.) and voice and video calls. Toll fraud means that attackers can create a video call, but it appears as a telephone call. This misrepresentation means incorrect charging and scamming the system.

The top concern for organisations is the tapping of endpoint UC devices – laptops, smart phones etc. These breaches could infiltrate VoIP, IM or other traffic, potentially unleashing not only sensitive organisational information in the form of documents, but intercepting telephone calls, and sensitive emails. While this is the base level risk of unauthorised access, the next step is an organisation’s full network security being compromised. If a hacker infiltrates the network, there is the potential to not only access information but launch attacks and alter network settings – jeopardisinge the organisation on many levels.

These kinds of malicious attacks can come in many forms. Two common ones are denial of service attack and platform compromise. While different styles of attacks, both disrupt the communications infrastructure on different levels and in different manners.

Companies of all sizes are adopting unified communications and the collaboration capabilities it fosters to boost productivity and innovation, increase mobility and enhance flexibility. However the risks apparent in the cloud environment are also booming in.

UCaaS is the turning point for communications as we know it, and the way the cloud is utilised. At the beginning of this, the cloud revolution, we are looking to a more interactive, available yet accommodating time. To ensure that as UC takes hold of business it maintains the same robust nature and safety standards we are used to, the same considerations need to be at play. The same guidelines need to be put in place, including:

1. Develop a strong defence strategy
Assess the enterprise infrastructure and identify where vulnerabilities lie and how infiltrations could occur. Look at servers, endpoint UC devices and the actual network. Your security strategy should already address these core areas, but launching into the field of UC only enhances the demand.

2. Secure your infrastructure
As UCaaS becomes a reality, your organisation needs to build a secure infrastructure. This includes all aspects of ‘locking down’ your organisation, from data regulations, to securing PCs and tablets to the phone network and the protection, integrity and confidentiality of calls.

3. Check the legal side
The platform that you deploy UC on might be stock standard or could be strategically developed for your organisation. In any scenario, you need to ensure that the platform complies with all relevant laws and regulations of your region.

Original Publication

 

Six tips for mobile device management security

Posted on by
Reply

There has been a lot of discussion this year about the increasing influx of consumer devices being used for both professional and personal purposes. Many organisations are feeling a little overwhelmed as they try to work out appropriate security levels and device management boundaries. When you take into consideration all the platform and application updates chewing through corporate bandwidth, plus the potential for rogue applications and malware to gain illicit access to company data, there are many headaches for security managers to deal with.

Here are six tips to help get the efficient and secure management of mobile devices under control:

1. Have a strong mobile policy

This may seem like an obvious tip, but there is often a clear disconnect between employees and employers’ expectations of how consumer devices will be used in the enterprise. Research from IDC found that not only were workers using their devices at twice the rate, they also tended to think employers were far more permissive of the use of consumer devices than they actually were. It is therefore very important to have a mobile use policy clearly defined to avoid these kinds of misunderstandings.

A mobile usage policy is a framework that defines who the users are and what devices, platforms and applications they can and can’t use. Enterprises must clearly define policies around reimbursement for services and what applications users can access via personal devices, along with clear guidance on who controls the data on devices.

2. Create an inventory of assets

How can you be assured of the security of employees’ mobile devices if you don’t know how many are out there and what they are? Implementing a robust and regularly updated inventory management system is a vital part of any mobile device management system. While many businesses do have an inventory of fixed and wireless assets, the majority of them are not updated and validated on a regular basis, leading to the potential for security issues to slip through the cracks via unknown devices or inappropriate usage. Businesses with accurate inventories have much clearer insight into their telecommunication environments and as such, more reliable information on which to base policy decisions.

3. Ensure proper configuration of devices

The sheer number of different devices and platforms out there can make the configuration of devices a challenging process. Factor in entry level handsets, smartphones, tablets with different operating systems and employees working in numerous different locations and the issue becomes even more complex. However, if a device is enrolled with a mobile device management server, a configuration profile defined and managed by IT admin can be implemented, enabling the device to interact with enterprise systems. An appropriate level of encryption can also be added to any commands coming from the server to ensure that settings cannot be altered without proper authorisation.

4. Implement appropriate security

Despite the influx of consumer devices into the workplace, many organisations haven’t implemented stronger security controls in response, leaving them at risk of security breaches or loss of sensitive data. Data encryption is a powerful piece of the mobile security puzzle and yet many businesses do not use it on a regular basis. In addition to implementing data encryption, enterprises need to inform workers about the risks of failing to comply with security protocols – there is a good chance that they are unaware of the risks associated with using their personal devices for professional purposes.

5. Regulate application protocols

Taking into consideration that there are thousands upon thousands of mobile applications out there, strong protocols need to be instituted for the deployment of any new applications and the management of existing applications. Malware is steadily creeping into the app world, so even applications from the app store need to be checked before they are allowed into the enterprise. Such malicious applications can take over the mobile device and operate in the background without the user knowing, searching for sensitive information such as passwords or banking details.

6. Provide training and end-user support

A relatively small percentage of the overall functionality of the average mobile device is used on a regular basis. With devices becoming more and more sophisticated, users could end up massively under-utilising all the functions that are at their disposal. As a result, most enterprises would benefit from providing user training, including how to set up email, device customisation, application selection and usage, understanding browser capabilities, using instant messaging, and mobile data services and understanding device functions and shortcuts. Support and training can increase worker efficiency and also reduce security risks, as employees better understand how their devices work.

Managing employee mobility doesn’t need to be a nightmare. With the right systems put into place, employees and employers alike can reap the benefits of mobility.

Original Publication

Unified Communications: Leading the Cloud revolution

Posted on by
Reply

Original Publication

The 101 of UC

The term unified communication (UC) is a popular subject that has been floating around the workplace for some time….but is it really an essential component for businesses today? Do employees, or businesses for that matter, really understand the pros and cons?

The problem with the current workforce is that it is dependent but scattered: 78 per cent of workers are part of global teams that can be scattered across the world.

Being part of the global workforce isn’t in itself a hindrance: technology allows communication. It is estimated that the average worker carries 2.9 devices, increasing their accessibility. While having multiple devices – from email, to mobile phones, to desk phones, to videoconference and beyond – should make getting in touch with someone easier, it can actually hinder the process.

A simple example is this: calling someone on their office phone could see you leaving a message at reception, to be emailed to their inbox with the request to call you back. Ultimately, the excess in opportunity to contact someone wastes time and resources.

Unified communications (UC) is a solution that streamlines this process, uniting full time employees, managers, top level staff and part time workers to communicate in a new way, across broad geographic space and time zones.

UC integrates a variety of communication tools, from the traditional non real- time to the advancing real- time. Simplified down, a unified communications system should have five core capabilities: email, telephony, real time communications, calendars and directory services.

Originally, UC was the natural progression for a world where multiple communications channels could be accessed all at once. Now, however, it is a strategic business choice which enables easier workflows and more efficient workplace operations. According to a report by Frost and Sullivan, globally, the UC market is expected to grow from US$1144.8 million to US$2287.6 million by 2019.

The network effect

Regardless of the catalyst, as an organisation moves to UC, a platform can be adopted to integrate with existing frameworks – be it emails with a particular provider or a cloud solution. The UC platform, Unified Communications as a Service (UCaaS), intrinsically changes processes within an organisation. As UCaaS takes hold, employees begin working more efficiently, adapting to the ease of communicating in real time via a single interface, but across multiple communication styles.

This hyper connectivity will benefit performance and capability but could also cause network performance issues. Things that need to be considered are:

– An increase in network traffic and applications and the need to address incidents
– Monitoring UC components to assess if they are working correctly across the network
– In-depth or packet level monitoring

With the growth of unified communications and additional new applications, the management of each new service is becoming far too complex for IT departments. Finding the right UCaaS provider can actually address all of these issues, by generating a customised and optimised solution strictly for your business.

If UCaaS is running optimally, the benefits to the end user and the broader business are extensive. Shorter time frames and less follow-ups results in increased productivity. The allowed interactivity can also increase decision making, reducing time lines, and increasing satisfaction and budget delivery.

Data, cloud and the security conundrum

These benefits are undeniable, which largely explains why 88% percent of enterprises have deployed or are planning UC deployment. Increasingly, UCaaS is deployed across a hybrid cloud scenario. In any business running UC, unstructured data is being created, and at a rapid pace. When UC is run either wholly or partially via the cloud, this data and the security risks alongside it increase.

The cornerstone of a successful UC implementation is having up-to-date accurate user information. This raises the question of security and privacy. Do I really want others to see my personal details?

The implementation of UC also changes business workflow and the need of a middle man to assign telephony UC. Some other core security threats include:

• Host and network-based intrusion – something that we have lived with since the dawn of computer technology.
• A VoIP-enabled form of phishing – basic phishing techniques are applied to the UC suite, meaning confidential information can be revealed over the phone by appearing to call from an official location, but actually infiltrating the organisation.
• Toll fraud – the incorrect lodging and pricing of media traffic (images, videos etc.) and voice and video calls. Toll fraud means that attackers can create a video call, but it appears as a telephone call. This misrepresentation means incorrect charging and scamming the system.

The top concern for organisations is the tapping of endpoint UC devices – laptops, smart phones etc. These breaches could infiltrate VoIP, IM or other traffic, potentially unleashing not only sensitive organisational information in the form of documents, but intercepting telephone calls, and sensitive emails. While this is the base level risk of unauthorised access, the next step is an organisation’s full network security being compromised. If a hacker infiltrates the network, there is the potential to not only access information but launch attacks and alter network settings – jeopardisinge the organisation on many levels.

These kinds of malicious attacks can come in many forms. Two common ones are denial of service attack and platform compromise. While different styles of attacks, both disrupt the communications infrastructure on different levels and in different manners.

Companies of all sizes are adopting unified communications and the collaboration capabilities it fosters to boost productivity and innovation, increase mobility and enhance flexibility. However the risks apparent in the cloud environment are also booming in.

UCaaS is the turning point for communications as we know it, and the way the cloud is utilised. At the beginning of this, the cloud revolution, we are looking to a more interactive, available yet accommodating time. To ensure that as UC takes hold of business it maintains the same robust nature and safety standards we are used to, the same considerations need to be at play. The same guidelines need to be put in place, including:

1. Develop a strong defence strategy
Assess the enterprise infrastructure and identify where vulnerabilities lie and how infiltrations could occur. Look at servers, endpoint UC devices and the actual network. Your security strategy should already address these core areas, but launching into the field of UC only enhances the demand.

2. Secure your infrastructure
As UCaaS becomes a reality, your organisation needs to build a secure infrastructure. This includes all aspects of ‘locking down’ your organisation, from data regulations, to securing PCs and tablets to the phone network and the protection, integrity and confidentiality of calls.

3. Check the legal side
The platform that you deploy UC on might be stock standard or could be strategically developed for your organisation. In any scenario, you need to ensure that the platform complies with all relevant laws and regulations of your region.

 

Mobility and the mobile workspace: the new demands on the CIO

Posted on by
Reply

Technology, as we knew it, is no longer relevant. Every day we are bowled over with a new app, toy or technique. We are moving to a world of smart technology at a pace that is almost impossible to keep up with.

The era of “smart technology” spans the time of smart phones, 3D printers, and beyond. A recent survey by Forrester Research anticipates that shipments of wearable computing devices will reach almost 30 million units this year. This realm is undefined and endless, and relates to anything from items tracking physical activity, to Bluetooth connected watches and the much anticipated Google glasses. 3D printers, currently fitting the bill for the art world alone, are expected to cost less than some PC’s by 2016, at under $2000.00 US dollars. The possibility is endless.

And now, with tablets expected to outsell laptops this year, this mobility aspect is become less and less a preference or request but rather a demand of employees.

The role that consumerism and trend technology plays in driving business structures and styles can no longer be ignored. Gartner expects that 80 percent of organisations will support a workforce using tablets by the end of 2013. This expectation will have a flow on effect: whether organisations are supplying the tablets, or supplying the application and platform for a personal device to be used in a corporate manner.

Regardless of the process, the outcome is the same. Business is changing, and it is becoming increasingly difficult to keep up. The majority of organisations across the world, are not ready to house these technologies. The time has come for a new approach.

The context surrounding this change is also moving at what appears to be the speed of light. Faster broadband availability and the increasing availability of 4G networks will help enhance the way employees use mobile devices, and give further incentive to those considering investing in one.

From the perspective of the CIO, these new networks could redefine business practice and process, offering potentially game changing opportunities.

Working in parallel to these advances is the announcement of new privacy laws legislation. This herald’s big change on the horizon, changes that the CIO needs to understand and incorporate.

To throw a spanner in the works, let’s consider all of these advances in the context of the cloud.

Couple this with Gartner’s expectation that by 2014, 90 per cent of organisations will support corporate applications on personal devices, and you have a problem.

Data is now a defining factor. If the majority of employees start using devices, like tablets, to access both corporate applications and personal data and data security have the potential to spiral out of control. So pertinent questions are begging to be answered:

How safe is the cloud?
What is actually stored in the cloud?
How it is stored?

The list goes on. The combination of the growth in mobility and the continued dominance and reliance on the cloud means CIOs must start considering their organisational structure and if it can cater to this changing environment.

There is no time like the present to consider how to manage risk in the mobile cloud space – what privacy safe guards and good parameters are in place, and what needs to change.

1. Define your organisational policies in relation to Bring Your Own Device (BYOD)

BYOD is a phenomenon occurring in every organisation regardless of size and structure. You must assess whether or not BYOD can have a negative effect on your organisations workings – Is your bandwidth being compromised? Is it introducing large security risks to your network?

Your organisation may decide to ban BYOD and supply devices, or alternatively to create a more structured and regimented use of BYOD through the use of dedicated access points and tracking usage and activity.

Assessing current usage patterns and doing a cost analysis is a good step towards understanding employee and business requirements alike.

2. Assess network based security policies

This is especially relevant for companies who encourage the use of BYOD and don’t offer other devices. Setting these policies up can be difficult and time consuming, but it is an effective way of regulating consumer behaviours and enforcing some hard limits.

Often the issue with BYOD is that there is no limit defined, so building from the bottom up will allow you to gain an understanding of current usage, expectations, and develop a framework to cater these to the organisation’s security benefit.

3. Manage risk across multiple device platforms

Mobility trends encompass smart phones, tablets, PCs, laptops and the next generation of wearable computing devices, including items like the Jawbone UP system. This then becomes a multi-platform environment.

When your employees are reading emails on a smart phone, updating documents on a tablet, and downloading information on a laptop, there is inherent risk. For CIOs, managing risk becomes so much more difficult because each platform is different, and so each platform needs a tailored policy. Investigating and investing in a security policy that addresses all known device platforms will dramatically reduce risk and secure organisational information.

4. Controlling data on the cloud – centrally managing user accounts

Because the cloud is an essential storage device, you need to understand how to control the data you are storing. When you have multiple users in multiple locations moving in and out of your cloud, there is an increased likelihood that something could go wrong. You need to control the way your users can use the cloud, and what they can access. Your cloud service provider should allow you to manage user accounts, create shared folders to enhance collaboration, restrict access based on managerial level, and other tailored solutions to ensure a secure space when dealing with a mobile workforce.

5. Develop a policy plan and take control

The development of a security policy should be organic. After running through steps one through four – define, assess, manage and control – you should already understand what you need in your organisation’s policy.

Your policy should aim to minimise the use of rogue cloud usage by employees, ultimately reducing the likelihood of unfriendly events such as data leakage, malware outbreaks, or hacker theft. To be sure nothing slips through the cracks, develop a list of your top ten concerns, and then make sure these are addressed in your policy.

Some questions you might like to consider include: do we have an existing policy we need to adapt? Where is our data going to be stored? Does the service provider have any ownership of your data? What is the financial credibility of the provider? If things go wrong, what is our exit strategy?

Original Publication

 

Leading Chief Executive Officers (CEOs) on Twitter

Posted on by
Reply

A survey of the world’s top CEOs, found that CEO sociability increased from 36% to 66% between 2010 and 2012. Details at …….

Weber Shandwick’s audit of the online engagement activities of the world’s top CEOs

A Social CEO can improve employee engagement….

…  52% of employees said they felt more inspired by their social CEO.

A Social CEO can also improve customer engagement and a sample of some leading CEO’s who use Twitter to improve and influence employee and customer engagment can be found at the following link ….

The top 50 social CEOs that you should consider following on Twitter.

…………………

The Ins and Outs of Cloud and Outsourcing

Posted on by
Reply

The speed at which IT is developing and the general nature of modern business means that many enterprises rely on specialists to manage our systems and applications. Economic and competitive pressures have made it imperative for organisations of all sizes to focus on their core competencies and turn to third-parties to assume responsibility for key corporate functions. The most common form of outsourcing is the cloud. The cloud simplifies many aspects of IT and the business services world.

Outsourcing is by no means a new or revolutionary concept and to date, it continues to deliver consistent financial benefits. By engaging a cloud service, a small organisation can have access to leading technology without large investments, while global enterprises can ensure that business sectors are managed effectively and efficiently.

Aside from obvious financial benefits, the list of incentives continues to grow: service quality, access to innovation, the removal of non-core functions, access to leading IT skills and resources, and forecast future IT spending all contribute.

For any enterprise, the benefits of outsourcing to the cloud are only guaranteed if certain guidelines and precautions are put in place, and in order to do this, you must understand the challenges:
• Potential loss of control over certain business functions
• Rigidity and a general lack of flexibility in the services received
• Time and effort involved in managing the service provider

The key is to select a provider whose cloud portfolio is as flexible and varied as the workloads it may handle—today and into the future. For many enterprises, the cloud is no longer a curiosity, but an opportunity to transform IT. As they think beyond one or two isolated workloads, their criteria in selecting a cloud provider become more stringent. To meet business goals for efficiency, cost-reduction, and simplification of processes, enterprises must look for a cloud provider that offers a range of services that meet today’s needs and can grow with the business.

Understanding the organisation you are outsourcing to is pivotal in addressing potential security problems, so below are some basic guidelines:

Understand the current security model

It sounds obvious, but often it is taken for granted. Evaluating the security controls currently in place in your organisation and what risks they should be eliminating, is important in knowing what you need to ask for when you seek a cloud service. This process also helps identify what is working and what isn’t, and provides you with the ability to request the same security standards in your cloud service provider (CSP). If this assessment uncovers gaping holes, you have the opportunity to rectify this with your new CSP, or if your security is up to scratch, then you have a benchmark by which to measure. Ensuring that internal security measures and your new CSP security credentials matchup is critical in delivering the safest environment possible for your organisation.

The variety of cloud solutions available – from infrastructure through to network – your cloud choice may need to integrate with existing security standards. In such cases, firewalls and other traditional security measures can be adapted to integrate with new security policies. In theory, this is the case; however a full assessment and understanding of these traditional measures may uncover non-compatibility with current systems. Understanding the full scope of your business, your requirements and your current security measures will direct you to what you need from your CSP.

Keep in mind: Change can be difficult, and risky. Have a safety net in place. Your security systems are going to change in your organisation, and to make sure it is for the better means you need to understand the security bottom line.

Don’t be afraid to: Take this security investigation as an opportunity to give your security system an overhaul.

 Ask tough questions and assess the risks

Managing your outsourcers’ security levels should not be overlooked. The CSP’s internal security policies, regulations and laws (if you are looking offshore) need to be understood and evaluated. They will help develop a picture of what the security spectrum of your business will look like in an outsourced environment and most importantly identify any current gaps.

A cloud has different avenues for attack than would otherwise be available in a traditional data centre. The increased surface of a cloud increases its vulnerabilities which puts your organisation at higher risk. Things such as virtual switches, the item connecting virtual machines with virtual networks by directing communication and data packets, and software programs that allow machines to communicate with each other, are characteristics that previously your organisation may not have been exposed to, so it is critical to understand the potential impact of this new environment.

Transferring part or all of your organisations IT footprint to the cloud is a big change with sometimes unpreventable mishaps. If a problem arises based on an unexpected incident, who is to blame? The organisation or the provider? Allocating the right responsibility needs to be determined in the initial phase to avoid any confusions in the long run. Responsibility here is in relation to your organisation and the outsourcer. Be upfront when embarking on this new relationship and opening the doors between your current IT staff and your future provider to ensure that expectations and responsibilities are measured and tracked.

Keep in mind: What you expect your outsourcer to deliver may not always be clear. Define and determine responsibilities. Ensure that your CSP offers the levels of customer service you are accustomed to, with access to expert technicians (either on-staff or through a certified partner network). For additional levels of support, find a provider that offers a range of managed and professional services to help you develop a cloud strategy, migrate to the cloud, and maintain optimal cloud performance.

Don’t be afraid to: Look up specific international security standards and be informed and aggressive when dealing with your future (or current) CSP.

 Investigate the environment

Knowing what needs to be outsourced is very different from knowing what the ripple effect will be when that segment of your organisation is actually outsourced and placed on the cloud.

Your cloud provider is now the first line of defence in your external incident management process. They must be able to detect, evaluate and report any incident in a suitable timeframe and in the process already expected by your company. Consider, too, the legal and operational impacts. By outsourcing, you are in a way, joining with another organisation, so be sure of the overall compatibility.

Consider this, too: Multi tenancy. You could be one of numerous companies that the CSP is providing service to. There is no physical separation. Investigate whether you are entering into a multi-tenant environment, and what exactly this means for your organisation and its information.

The outsourcer will be retaining a lot of information about your internal organisation workings, too. If any internal incidents occur, accessibility around records must be agreed upon and understood. Identifying individuals within the outsourcing organisation will help increase transparency and reaction around any issues.

Keep in mind: Your information is now housed inside other organisations (metaphorical) walls. This is an integrated service, designed to know the ins and outs of your organisation. Don’t be afraid to: Look for evidence that shows whether each service provider has experienced serving enterprises like yours. These include sample customer lists, reputation, track record, and existing customer base. Service providers with experience in your company’s industry or have similar customers are likely to understand your business and technology needs.

Original Publication