Cloud Computing Technology - Coursework Example

? Contents Introduction 2 Cloud Computing Advantages 3 3 Analytics on Big Data Loves the Cloud 5 4 Cloud Computing Accessibility 8 5 How the CLOUD Control Distractions 10 6 Cloud Computing Security 11 7 Open Source Licensing 13 8 Disaster Recovery 13 9 Conclusion 15 1 Introduction Cloud computing is considered as the cost saving technology that can be easily available worldwide for business functions. It is used to sustain difficult infrastructures globally for business organizations. Moreover, cloud computing is a cost efficient tool for maintaining business functions. However, there are certain security risks are involved that are now owned by cloud computing vendors according to the latest contract of cloud computing. Martin Sandler, Director Systems security lab HP says’ “People often think of virtualization as adding to security problems, but it is fundamentally the answer to a lot of those problems,” (Anthes 2010). Overall, cloud computing includes a number of advantages and some disadvantages as the data must be secured while using cloud computing methods from possible security breaches. Likewise, transferring information on the cloud determines that it is not manageable by the organization anymore and any consequence or a breach of data occurring on the vendor side will be a prime threat to the organization. Therefore, information security is the part of due care and due diligence that is derived from the responsible employees of the organization. 1.1 Cloud Deployment Models The private and confidential property and data must be secured by the ‘Business Cloud’ that contains trading secrets, customer’s information and other data. It is the main responsibility of business cloud to ensure proper security for the above mentioned information. Security breach can cause permanent damage to business that leads towards bankruptcy and other legal complications. Similarly, it is also necessary to analyze service models and implementation methods before making any plans related to critical applications transfers of the cloud. In order to implement right services and to avoid any possible risks, business requirements must be aligned. Furthermore, cloud computing implementation methods are selected by the ‘Business Cloud’ according to the organizations requirements. There are four types of implementation factors available to choose from. (Shelton 2013). 1.1.1 Private Cloud The private cloud is also referred as a neologism. However, the concept of this term out dates cloud computing by 40 years. Private clouds are recommended for organization requiring advanced security and privacy measures (Shelton 2013). The private cloud is administered exclusively for only a single organization, in order to maintain strict level of security. 1.1.2 Community Cloud As compared to a private cloud, the community cloud is shared among many organizations having identical business requirements. Moreover, the required infrastructure is shared among all the organization that is connected to the cloud saving the cost and demonstrates one of the advantages of cloud computing (Shelton 2013). 1.1.3 Public Cloud Public computing is a traditional approach where the resources are accessible on the Internet. Third party providers, known as the cloud vendors, organize the hosting for these resources on the Internet. The services and resources on this cloud are accessible to the public and groups of various industries (Shelton 2013). 1.1.4 Hybrid Cloud A hybrid cloud comprises of a mixture of all types of clouds i.e. public, private and community. Most organizations deploy this type of cloud as it provides a range of options in the context of accessibility. By incorporating hybrid clouds, issues such as PCI compliance can be eliminated (Shelton 2013). 2 Cloud Computing Advantages Cloud computing will derive many valuable benefits for ‘Business Cloud’, as they are discussed below (Wu, Shen et al. 2011): The first factor is justifiable, as there is no requirement of managing or maintaining software, hardware and infrastructure associated with network area storage (NAS) because cloud is taking care of the application as a whole. Secondly, the most important factor is the cost. For instance, an information security manager needs to sell security to the business by using an efficient business case. Total Cost of Ownership (TCO) is the core component of the business case that may justify the cost required for implementing security on the cloud. Therefore, low TCO enables information security managers to justify minimal expenses and more cost savings for getting approval on security projects. Likewise, availability of cloud services is also high resulting in value delivery i.e. low cost of ownership and high availability. Moreover, cloud services also eliminate the requirements of a high profile hot site that may involve a lot of cost. In case of unplanned service outage, cloud computing ensures reliable delivery of core business applications that eliminates the needs for off-site storage. On the other hand, cloud computing also reflects significant risks, principal risks of cloud computing is associated with federal agencies and regulations. Any vulnerability found in the software, platform or infrastructure of the vendors will expose serious exposures, as information may be related to more than one organization. Moreover, employees working internally on the cloud computing premises of ‘Business Cloud’ may also expose a serious threat if no proper background employee checks were performed during recruitment procedures. Furthermore, if any governmental agencies for instance, military or other sensitive body is also using the same cloud from the same vendor is also most likely to be compromised, if any breach of any one of these fundamental concepts Confidentiality, Integrity and Availability is successful. In addition, the incident response function may not be efficient and effective if any incident occurs and affect the customer or employee. For instance, if a security incident affects the customer, the incident response function of the organization will trigger in a timely manner to isolate and investigate the root cause via root cause analysis. In a cloud computing scenario, it may be a different case and result in ambiguity, as from where the investigation should begin. If an incident is triggered from the vendor’s site, evidence is required to act accordingly and may consume more time that is always a critical success factor. Therefore, compliance of cloud computing vendors and implementing security controls as per the governmental information security requirements is the major concern of organizations associated with services on clouds. Moreover, organizations have also concerns on assessment of security controls and independent audit and limitations of the vendor because data of many organizations are located at the vendor site that may increase risk of the CIA (Wilshusen 2011). Therefore, an agreement is in process for establishing an independent organization that may conduct security audits and assessment. In this way, organizations can select vendors who are approved by these independent organizations maintaining the required security controls and standards. Cloud computing continues to benefit business by lowering down the cost associated with hardware, software and human resource. However, some of the debatable issues including personal privacy, lack of security control and sharing data are still seeking a solution. Likewise, providing superior benefits for ease of development, minimized costs, high scalability along with next generation architecture are facilitating Information technology to evaluate cost benefit analysis while doing risk assessment. At the same time, open source has played a vital role in cloud computing and facilitated to enable low cost input that can also be considered as free of cost and rich features for cloud service providers. Moreover, buzz in the industry concludes that the cloud computing service will utilize the open source to gain power and control to establish next generation proprietary platform-as-a service that is similar to Web 2.0. 3 Analytics on Big Data Loves the Cloud In recent years, the size of data or information is overwhelmed in organizations and thus it is growing on daily basis. In addition, the diversity, speed and complexity of the information are escalating rapidly. Thus it is important for the organizations to process and investigate these complex information sets that include both structured and unstructured data in order to keep up the record. Fortunately, Analytics is one of the major procedures that help any organization to control effectively huge data or information. However, the relationship is mutually dependent. According to the old statistical axiom “the larger the data sample, the more precise the measurements can be” (GRIFFIN 2012). The larger information sets helps the customers to apply the analytical techniques and procedures effectively. For example, the predictive and prescriptive modeling to enhance or to make better decisions. On the contrary, the cost needed for the management of larger data can be massive. For this reason Cloud come in. In fact, Cloud helps the organization in controlling the huge information and other helpful tools for financial controls. Thus by using the Cloud, companies can reduce their cost easily. It is also easy for the organizations to deploy the analytics by implementing data and analytics capabilities in the Cloud. Whenever there is a need for analytics, companies can utilize through platforms and infrastructure. The organizations only pay for the services that are needed in order to run their business but on the other hand, the Cloud service providers suffer for their operational complications. For this reason, organizations only bear the reduced cost or can only predict cost based on the desired needs. A recent joint report from Deloitte and Financial Executives Research Foundation, Leveling the Playing Field, inspects how the user-friendliness of analytics in the Cloud can level the playing field for mid-sized organizations, helping them to participate with larger business in a cost-effective manner by enhanced understanding their clients, operations and overall business. 3.1 Enhanced Mobility In modern days, the availability of mobile solutions has stimulated the trouble free tools in order to improve the customer services and business modernizations. The mobility can help the organization to hire better staff to take actions for the given information, so that they can understand the reason for any mishaps in the business and can react promptly. For instance, for game days, one sports specialist team has deployed a mobile analytics solution for the purpose of customer service enhancement. Moreover, management of the team has located the staff all the way through the gaming zone in order to observe customers behavior and mark the issues. 3.2 Amazon The amazon cloud computing department tends to be a shining star for any organization and helps to generate good profit as described by the renowned analyst Morgan Stanley. Conversely, the estimation conducted for the increased profit margins does not show any radiant signs but it does not mean that the evolution related to A recent research shows puzzled reviews from the analyst that conducted this research. According to Scott Devitt, Nishant Verma and Andrew Rudd’ “After analyzing Amazon.com cost structure in detail and by segment, we conclude that there are far more variable costs than investors believe, leading to an overly optimistic timeline for margin expansion”. The cost structure of Amazon.com is closely analyzed in detail. This study reveals that there are a number of changeable costs are present that leads towards positive margin expansion. In the year 2011, the Amazon Web Services (AWS) was responsible for the profit gain of approximately $1.19 billion as estimated in a report. In October, same year the business was estimated as a billion-dollar run rate and out of which around $108 million or 9% was mentioned as a pure profit for Amazon Web Services. However the company was able to maintain its profit gaining history constantly by lowering the cost spent on cloud services. This is acknowledged because the company utilizes a cost-plus pricing model. In addition, the cost of delivering the services adds up to 10% premium that continues to fall as, Amazon leverages its economies of scale to purchase and operate more gear and bandwidth at less prices. Though, the margin related to profit remains flat as mentioned in a report. Conversely, the Amazon Web Services (AWS) compromises on a particular portion of Amazon’s overall technology expense in order to drive slowly, predictable profit from it is a good thing. The analysts estimate that the non-AWS technology expenditures are approximately 4 percent of the total sales “representing the largest opportunity for operating margin expansion in the near-term.” The cost lowering technique leads the company towards great percentage of profit. Conversely, the report submitted by the Morgan Stanley does not represent the possibility for the Amazon Web Service (AWS) to actually start rising on a margin because the company is expanding its services beyond pure infrastructure and managed services. The database services NoSQL DynamoDB for instance; it provides a service for the Amazon that helps the company to add value or cost outside the delivery services of Cloud-based infrastructure. There are also stories of huge data analytics services that are able to provide higher-level services as compared to Amazon Web Service (AWS) and its current Elastic Map Reduce offerings. However, there is still a possibility of AWS expanding its licensing activities as it is embedded as the de facto clod computing platforms for several companies, other service providers and software specialist. 4 Cloud Computing Accessibility For accessing cloud computing online services via a web browser requires an updated or couple of years old workstation that supports all features of current Web browsers. However, for a fast and rich experience of cloud computing applications, a fast Internet connection is required along with an updated operating system with all critical updates installed. Likewise, upgrading old systems to Windows 7 will cost around ?70, however, hardware compatibility issues must be addressed, as Windows 7 or Vista does not support all VGA drivers or chipset available in the old system. As ‘business cloud’ websites are text based and no significant multimedia capture or editing is required, a nominal Internet connection is required. Moreover, for addressing storage requirements, all the documents, critical files and other stuff can be stored online that will significantly save the cost of maintaining and installing large storage devices. As shown in figure 1.1, only a generic overview of the network design is demonstrated. The network is built on a CAT 5 cable with a star topology. Likewise, 2 switches are adequate to connect the 11 staff members of ‘Business Cloud’. Moreover, printers are also connected to the network and can be shared among all the users connected. Furthermore, to avail cloud servicer, a WAN connection is required. In general, cloud computing service providers recommend bandwidth of the Internet connection required to establish fluent and robust connectivity between applications that are accessed from the cloud. We can assume that a broadband connection is used for establishing connectivity with the cloud service provider. Moreover, the router is connected with the two available switches. For security purpose, a firewall is installed after the DSL router or MODEM that will establish connectivity with the WAN. Furthermore, three servers are proposed that includes Customer Relationship Management Server, Email server and Application server. 4.1 Data Services The intelligent design of data sources along with the ease of use, data manipulation speed are critical factors for a successful business analytics deployment. Likewise, if native data source is not suitable for reporting, there will be a requirement of a data mart or data warehouse. This job will be considered as an initial discovery stage with the customer. “The tool will only be good from the data that resides on top of”. As the company is already an expert in data warehousing, data marts, data modeling, it can facilitate customer to establish a well-structured and optimized analytical data stores that will support their business requirements. After the creation of a data warehouse or a data mart along with the reports, a periodic maintenance process is required that may incorporate required upgrades. For continuous support of the customers, managed service agreements can be established. Moreover, relying on the time period decided with the customers, the organization can provide an ongoing support for data services along with additional requirements for developing reports. 5 How the CLOUD Control Distractions The most effective sources that influence customer’s sentiments and reactions are considered huge information, mobility and evaluation of social media that helps to estimate the user’s potential and interest towards information technology. But on the other hand, if it is for in business then it can be troublesome as usual. However, the financial executives can control the past and future operations and can construct a firm foundation that helps an organization in achieving their goals (GRIFFIN & DANSON, 2012). 5.1 Cloud Computing Storage Cloud computing store needs a lot of space in order to store application. Therefore, humongous data centers are established for the collection and management of data. There are numbers of security risks are involved that may shock the data storage machines. Moreover, these threats may include both cyber criminals and the cloud service providers. In fact, slight security breach may lead towards system stoppage such as; in 2008 the serves of Amazon’s Simple Storage Service (S3) were corrupted by a small bit that contains a message which turned off the system for several hours. Another example of security breach occurred in 2009, password was hacked of an employee that results in violation of email security page present in Google apps account. 6 Cloud Computing Security Cloud computing also reflects significant risks, principal risks of cloud computing is associated with federal agencies and regulations. Any vulnerability found in the software, platform or infrastructure of the vendors will expose serious exposures, as information may be related to more than one organization. Moreover, employees working internally on the cloud computing premises of ‘Business Cloud’ may also expose a serious threat if no proper background employee checks were performed during recruitment procedures. Furthermore, if any governmental agencies for instance, military or other sensitive body is also using the same cloud from the same vendor is also most likely to be compromised, if any breach of any one of these fundamental concepts Confidentiality, Integrity and Availability is successful. In addition, the incident response function may not be efficient and effective if any incident occurs and affect the customer or employee. For instance, if a security incident affects the customer, the incident response function of the organization will trigger in a timely manner to isolate and investigate the root cause via root cause analysis. In a cloud computing scenario, it may be a different case and result in ambiguity, as from where the investigation should begin. If an incident is triggered from the vendor’s site, evidence is required to act accordingly and may consume more time that is always a critical success factor. Therefore, compliance of cloud computing vendors and implementing security controls as per the governmental information security requirements is the major concern of organizations associated with services on clouds. Moreover, organizations have also concerns on assessment of security controls and independent audit and limitations of the vendor because data of many organizations are located at the vendor site that may increase risk of the CIA. Therefore, an agreement is in process for establishing an independent organization that may conduct security audits and assessment. In this way, organizations can select vendors who are approved by these independent organizations maintaining the required security controls and standards. For achieving optimal benefits from Information technology, IT must be aligned with business objectives via strategic alignment, value delivery, risk management, resource management and performance management. The reason for selecting Wizni Incorporated is the acquisition of most up to date technology i.e. cloud computing supporting business analytics. By focusing on agile solution methods, that company will facilitate organizations to gain insights and competitive advantage that is a key objective for any organization. Moreover, the most positive factor of the company is the focus on key business objectives. In contrast to cloud computing, a more advanced and extended form of technology is Next Generation Business Analytics that facilitates organizations to analyze massive data available in large data sets collected by automated information systems and applications. Likewise, next generation solution provide assistance to the legacy system along with the provision of robust, elastic and low cost knowledge based tools of deeper exploration and understanding for processing massive data right to the end users. Moreover, the next generation solution business analytics provides in depth understanding of company clientele and product presentation. Moreover, these next generation technologies cover the below mentioned three aspects that were not covered by previous technologies: Detailed operational data on one location for thorough in-depth analysis IT development efforts are required and related lead times to produce and maintain standards and ad hoc reports No provision of ‘easy to use’ tools for end users 7 Open Source Licensing A number of application sources are related with cloud computing. In fact, these sources are managed by several commitments including proper license of open source. Similarly, in order to fulfill all the requirements regarding licensing address issues and migrating risks are involved. However, new risks are not introduced by cloud computing but other applications that are included in cloud contains risks. Like any other software, applications are distributed but not shared in cloud computing. Therefore, no calculation and investigation is needed for incorporating restrictions of copy left licenses. 8 Disaster Recovery In order to minimize the likelihood of the system, there must be a stress test for all the core components on the network on monthly or weekly basis, depending on the size of the network. The stress test examines the stability of the system on while handling many simultaneous functions and processes. Stress testing is far beyond normal operations as it can be categorized in to application stress testing and hardware stress testing. In order to minimize the likelihood of the system, there must be a stress test for all the core components on the network on monthly or weekly basis, depending on the size of the network. The stress test examines the stability of the system on while handling many simultaneous functions and processes. Stress testing is far beyond normal operations as it can be categorized in to application stress testing and hardware stress testing. The strict security measures, both in terms of physical and software security. Biometric identification system and encryption techniques can be implemented to minimize database security. Moreover, the third step would be to replicate the core services that are running on a specific server or workstation. This will facilitate the employees to entertain the patients, whenever a primary server goes down. 8.1 Plans and Changes In order to minimize system failure for future, risk analysis is required that will identify all the critical systems on the network. It will also demonstrate the factors that may disrupt the critical system on the network. Moreover, it also includes the implementation of adequate controls in order to prevent system failures. Daily backups are required on daily basis and a mechanism is required that will check the integrity of the backup at the same time, if the backup is corrupt, new backup can be requested at the same time. It is essential to prevent the backup database also by applying adequate security measures, as database contents are highly classified. In case of a natural disaster, data must be relocated on a separate data center situated far away geographically. Furthermore, to eliminate power issues, ‘PoE’ can be implemented to minimize electric outage as it contains its own separate electric channel for the workstation and network devices. 8.2 Root Cause Analysis The major impact that contributed to the system failure problem is the instability of Tech Med system as well as the application that creates database backup. However, primary source of power was restored instantly and replaced by the secondary link. The impact of Tech Med system resulted in halting all the operations associated with Jones Regional Medical Center (JRMC). Moreover, the impact of corrupt database backup resulted in a major halt in system operations of the medical center. Manual entries were conducted, as full database recovery is required from journal articles to transactions. Likewise, when the system is not operational, the staff at the medical center has noted all the operational processes manually so that they can be entered, when the system becomes operational. 9 Conclusion The concept of the cloud provides vast variety of advantages and at the same time, there are some disadvantages as well. One major advantage for acquiring cloud computing incorporates no physical infrastructure that may lead to low total cost of ownership, as well as residing risks associated with them. Moreover, availability of services is available round the clock and service level agreement can be made with the cloud service provider. Moreover, the cost is also minimized along with high availability and low cost of ownership. Furthermore, risks associated with the applications and data is also transferred. References ANTHES, G., 2010. Security in the Cloud. Communications of the ACM, 53(11), pp. 16-18. BISONG, A. and RAHMAN, S.M., 2011. An Overview of the Security Concerns in Enterprise Cloud Computing. International Journal of Network Security & Its Applications, 3(1), pp. 30-45. GRIFFIN, J., FORREST, 2012. Analytics and the Cloud - the Future is Here. Financial Executive, 28(9), pp. 97-98. SHELTON, T., 2013. Business Models for the Social Mobile Cloud: Transform Your Business Using Social Media, Mobile Internet, and Cloud Computing. Wiley. WU, J., SHEN, Q., WANG, T., ZHU, J. and ZHANG, J., 2011. Recent Advances in Cloud Security. Journal of Computers, 6(10), pp. 2156-2163. WILSHUSEN, G.C., 2011. INFORMATION SECURITY: Additional Guidance Needed to Address Cloud Computing Concerns. GAO Reports, , pp. 1. Read More