Pub. 3 2013-2014 Issue 6

14 O V E R A C E N T U R Y : B U I L D I N G B E T T E R B A N K S - H E L P I N G C O L O R A D A N S R E A L I Z E D R E A M S  Cloud Computing  continued from page 12 Hybrid clouds offer a combination of public and private clouds. This allows for application and data portability but doesn’t shift the bulk of data security administration to the provider. Choosing a Service Model Next you’ll need to consider which cloud computing service model will be worth undertaking. These models fall into three classifications: Software as a service allows you to use the provider’s ap- plications, which operate on the provider’s infrastructure. Your organization can access the application from any Web browser, and the only infrastructure you maintain is Internet connectiv- ity. Well-known examples are salesforce.com and Google Mail. Platform as a service allows you to deploy applications you create onto a cloud infrastructure using the provider’s program- ming tools—a good choice if your organization develops its own applications. Infrastructure as a service allows you to run operating systems and applications on a cloud provider’s infrastructure. It relies heavily on virtualization technology to scale systems quickly—a good option for organizations that don’t have sizable capital budgets to spend on server hardware or on-premises data centers. Amazon’s EC2 is a good example. Regardless of the deployment and service models you select, think about the following questions to avoid future hassles: What data security regulations do you need to consider before jumping into cloud computing? Does your data get replicated overseas? If so, where and how often? If your data is replicated to countries prone to government instability or unreliable power grids, youmay want to reconsider. Howoften do you refresh your server hardware? Older equip- ment may not provide the processing power needed. What are the procedures for disposing of your old equipment and hard drives? What are the penalties for failing to meet the requirements of your service agreement? Has an audit, such as a third-party service audit, been per- formed on your service providers controls related to the facili- ties? These audits often describe the facilities’ security controls. Reach your target audience a ordably. advertise get results DANI GORDEN Advertising Sales 801.676.9722 or 855.747.4003 dani@thenewslinkgroup.com What are the penalties for terminating your agreement early? These questions are not all-inclusive, but they’ll get you thinking about cloud computing possibilities for your organiza- tion. Cloud computing can be rewarding if you determine your current and future needs and do your homework on cloud service providers. Start small by placing development or test servers in the cloud, followed by e-mail or document storage. If you’re comfortable with the cloud service providers you’ve engaged and have confidence in their ability to deliver service and stay solvent, you may eventually consider hosting some of your key business applications in the cloud. Cloud computing is here to stay. Although it may not be suitable for all organizations, many can benefit fromwhat cloud computing has to offer. It’s especially worth considering if you have limited computing infrastructure funds, physical space constraints, stringent system availability requirements, or a need for quick, scalable application deployment. Francis Tam has practiced public accounting and consulting since 1994, with a focus on providing IT audits and internal control guidance to both public and private companies. You can reach him at (303) 295-3852 or francis.tam@mossadams.com.