12 Cloud Questions Every Company Should Ask Itself

Demand for cloud services continues to surge, driven by corporations interested in software flexibility and scalability. But how secure is the cloud? No surprise, analysts predict security products and cloud-based security services will be a nearly $9 billion market by 2019.

With recent high profile cyber-attacks at companies like Sony and U.S. government agencies, cloud security is in sharp focus.

As we said in August, the C-suite likes the cloud’s flexible OpEx model (often deployed as a subscription-based cloud service) but may not totally grasp the implications of adopting the cloud. This can lead to well-founded (and not so well-founded) fears about the security of a cloud solution. As a result, many large companies are investing in the private cloud, while slowing their use of the public cloud.

According to one estimate, companies with more than 1,000 employees use an average of 1,154 cloud-based services, “ranging from enterprise-ready services procured by the IT department such as Office 365 to far lesser known and riskier services such as FreakShare.”

The report further estimates that sensitive corporate data makes its way to the cloud routinely, with 15.8 percent of documents in file-sharing services containing some form of sensitive content.

As we mentioned in our mid-year review, “Cybersecurity concerns have led many decision-makers to take a step back and consider private cloud or hybrid solutions as the starting point. Intrusions into corporate databases at Target, Sony, Home Depot and, just recently, the hacking of 22.1 million Federal employee records have led companies to think twice. Security issues, which have always been part of the cloud debate, are now center stage.”

While the above-named breaches generated quite a bit of attention, a study by the Ponemon Institute showed that breaches are much more widespread, with an estimated 43 percent of companies having experienced at least one data breach in 2014. Clearly, the enterprise cloud and local applications are both under attack. So what are corporations expected to do?

The bright side of this story is that many of the same security practices used to secure traditional enterprise applications also apply to the cloud.

To focus on preventing the risk of data breaches, ask yourself:

#12: What is your company policy when it comes to managing sensitive data and file sharing? On average, more than 25 percent of employees will upload files containing sensitive data to the cloud. 

#11: Are your cloud-based applications being monitored for inbound and outbound traffic anomalies? The difference between a minor incident and massive breach often comes down to the ability to quickly detect, contain and mitigate an attack. Analysts at the Ponemon Institute estimate it took retailers, on average, 197 days to identify an advanced threat and 39 days to contain it, while financial services organizations needed 98 days to identify and 26 to contain.

#10: How flexible and collaborative is your IT department in meeting the challenges associated with new technologies and quickly responding to security threats? The majority of IT managers are seeing a shift toward more collaboration and pooling of previously siloed resources, opening up opportunities for better cloud security measures.

#9: Is your cloud service provider responsible for security? To fully secure data in the cloud, enterprise IT teams should never solely rely on their cloud provider. Ensure you have a solid security strategy in place that is agnostic to the location of your data and applications. 

#8: How do you handle the riskiest of apps, storage? Cloud-based storage applications have access to very sensitive corporate data, particularly financial data.

#7: When do you identify and stop malicious insiders? A 2015 Experian study claimed that employees, particularly those working remotely or using their own mobile device, accounted for more than half of security incidents last year. A current or former employee, contractor, or a business partner with access through IaaS, PaaS, SaaS or traditional infrastructure, can often be the source of an enterprise’s greatest risk.

#6: How do you protect credentials from theft? In 2010, Amazon was subject to a cross-site attack that used malicious scripts in a benign account to launch more attacks. Many companies are prohibiting the sharing of accounts and now require strong two-factor authentication techniques. 

#5: Are you ready for next-generation technology and the Internet of Things (IoT)? Gartner predicts that the IoT market will grow to 26 billion units by 2020. With the proliferation of connected devices, is it any surprise that IT managers are increasingly concerned about the security risk of those devices? 

#4: Do you allow employees to use their own devices? The rise of bring-your-own-device (BYOD) and bring-your-own-application (BYOA) means that many cloud services and tools are sneaking into organizations under the noses of IT leaders. In a recent survey, more than half of the IT respondents said that when it came to cloud services, the biggest challenge was assessing the security risk before employee adoption. 

#3: How do you define and determine the best ways to deal with cloud abuse? The Cloud Security Alliance defines cloud abuse as “a bad guy using a cloud service to break an encryption key too difficult to crack on a standard computer. Another example might be a malicious hacker using cloud servers to launch a DDoS attack, propagate malware, or share pirated software.” 

#2: What cloud technologies are being shared, and with whom? Cloud service providers often share infrastructure, platforms and applications to deliver their services in a scalable way.

“Whether it’s the underlying components that make up this infrastructure (e.g. CPU caches, GPUs, etc.) that were not designed to offer strong isolation properties for a multi-tenant architecture (IaaS), re-deployable platforms (PaaS), or multi-customer applications (SaaS), the threat of shared vulnerabilities exists in all delivery models,” writes the Cloud Security Alliance. 

#1: Are you using the right tools? 60 percent of UK IT managers surveyed by The Register‘s cloud survey said they were using VPN connections, but only 34 percent said they were using cloud firewalls or encrypting data at rest. “The numbers continued to drop in regards to other preventative measures until the bottom of the list where only 15 percent percent said they were using obfuscation or tokenization of sensitive data,” The Register reported.

How do you secure your cloud applications? How many cloud-based apps are your employees using today?

Follow me on Twitter at @Pat_Patterson_V

Related Articles:

Avaya Solutions Connect People Across the World

During a recent vacation cruise, I found myself playing cards with a group of six strangers. As we got to know one another I was asked, “What do you do for work?” The question quickly became a discussion, and I’d like to share that conversation with you.

Who is Avaya?

A couple of people at the table knew of Avaya. One asked, “Doesn’t Avaya make phone systems?” Another asked, “I hear about cloud all the time. Are you guys doing cloud?”

While both of these questions are relevant and somewhat factual, both miss what makes Avaya special. In my opinion Avaya is a connection company. The whole reason Avaya exists is to connect people with people. In my experience, it really is that simple.

Avaya makes it easy to get work done by connecting teammates with other teammates, regardless of where they are, what device they have, and what network they’re connected to. At the same time, Avaya connects consumers who need help with the exact resource who can fix whatever is challenging them, helping to create lasting impressions and ongoing relationships.

More than 90% of Fortune 100 companies are running Avaya Solutions. I believe that each and every day almost every human being on the planet is impacted by Avaya solutions in one way or the other. Heck, thanks to the cruise line using Avaya solutions, everyone with me at the table had their cruise questions answered prior to boarding the ship.

This led to the most interesting part of the discussion. If people connect with people using Avaya, how do we make the world better? The answer lies in two areas, and we’re deeply invested in fixing both.

  1. Making it Easier to Work. While Avaya tools make it easier to connect with teammates wherever they are, there is still room for improvement in making it easier for you to actually get work done. People have so many tools and apps it’s confusing to know what to use when, and there are still a ton of manual steps to getting people together to work on projects. Using Artificial Intelligence, the Internet of Things, and Avaya Breeze we automate a lot of the manual stuff that makes work so frustrating, which means when something happens at work, you waste less time reacting and more time responding with a tool that’s built to be easy to use, puts everything you need at your fingertips, is always available, and is super secure.
  2. Making Customer Service Experiences Better. Avaya recognizes how frustrating customer service has become, and we’re helping companies fix it. Over the years, customer service was designed around the company’s needs not the consumer’s. Things like auto attendants, long hold times, and constantly repeating yourself are too common. Using Artificial Intelligence and our experienced consultants, we help businesses change both the technology and the business processes to create more magical experiences for consumers.
     

    For example, booking a cruise online can be super frustrating, especially if you get a discount code that doesn’t seem to work. The last thing you want to do is call customer service. But what if when you call, the auto attendant knows who you are and greets you by name. Instead of telling you what it can do, it knows you’re calling because of the trouble you had on the website. When you’re connected with an agent, they not only know why you’ve called but they already know how to fix the problem. Instead of wasting time trying to talk you through which fields to change, they ask to share your screen so they can show you how to use the discount. Avaya eliminates the frustration and replaces it with a near magical experience … all by improving the connection between you and the cruise ship company.

Simply put, Avaya solutions make the world a better place because we make connecting with the people you need easier, faster, more secure, and even slightly more magical than ever before.

Avaya IP Office Can Speed Your Journey to Communications in the Cloud

Let’s talk cloud—or, should I say, let’s talk in the cloud. Research shows that by 2020, 78% of small and midsize businesses will be fully adapted to the cloud—almost double that of 2014. One of the main drivers in this growth is the way we share and communicate. By bringing disparate communication channels together onto a common platform, companies stand to gain tremendous productivity and efficiency increases. But, for all the benefits, there’s no denying that moving to communications in the cloud can be challenging. Working with a trusted partner is critical to avoiding some of the common issues that can arise.

The Many Challenges That Can Cloud Your Journey

Like many SMBs, you may be facing limited IT budgets and capital, so cost-efficiency is paramount, which means no room for error in mapping out a cloud strategy.

Moving to communications in the cloud can also mean an increase in complex application environments, and the need for more scalability in line with application usage. You need to find a balance between purchasing and maintaining IT tools, vs. coping with legacy systems and aging infrastructure. Making this all the more complex is limited IT resources and the increasing cost of attracting/training/retaining IT staff.

That said, the benefits of making the move are considerable and well-documented, and approached correctly it’s a sound commercial decision, giving you:

  • A predictable expense model with subscription-based payment options—you only pay for what you use
  • Access to the latest technology with real-time monitoring, with management and analytics included in many solutions
  • More time for your IT staff to focus on more strategic initiatives
  • The ability to scale up or down as needed, on demand in response to your business peaks and troughs

So Where Do You Start?

The Avaya IP Office™ platform gets you to the hybrid cloud quickly, easily and cost-effectively. A powerful unified collaboration solution, IP Office has a simple migration capability that takes you from hardware, virtualisation, and cloud deployments, to a hybrid cloud. It unites all of your communication and collaboration solutions onto a universal platform.

Why Migrate to Avaya IP Office in the Cloud?

  • Common code base—no retraining of staff
  • Worldwide partner expertise
  • Investment protection
  • Reuse IP, digital, cordless and analog devices
  • Repurpose IP Office 500v2 as a gateway and failover
  • Cloud critical features: built-in, always on security and centralised management
  • Unique hybrid resilience—whether cloud-to-premise, or premise-to-cloud

Envision Your Migration With Avaya

Get in touch to discuss your own requirements, and together we can map out how IP Office can help transform your IT operations and put your communications in the cloud.

If Getting Work Done Takes Too Much Work—Take the Team to Zang Spaces

Fast Company recently published a survey finding that the average tech CEO works 300 days a year, 14 hours a day. One third of that time is spent managing email, while another third is spent in meetings. Two thirds of a tech CEO’s time is spent communicating and collaborating, and this issue touches everyone in an enterprise, even Bob in Accounts Payable. It turns out getting work done just takes too much work, primarily due to the number of redundant tools users are given to accomplish tasks. Our application Zang Spaces™ addresses the enterprise communication problem in a big way.

What We Have Today

Desk phones and cell phones are great for communicating, but you can hold only one voice conversation at a time, which is nowhere near enough in our multi-tasking world. Digital transformation may seems like a new trend but enterprises digitally transformed communications years ago with tools like email, instant messaging, and web conferencing. While it’s ubiquitous, email is a horrible tool for collaboration. IM lets you participate in multiple conversations at the same time, but everyone has to be logged in at the same time to communicate, which is just dumb. Online meeting tools bridge the challenges of distance, but once a session is complete it’s usually gone forever. Newer collaboration tools such as on-line storage lockers are great for working on documents, but they’re “unitaskers” which only add to the tool overload.

How to Make Work, Well, Less Work

Cloud-based Zang Spaces doesn’t require anything to be installed in your data centers, or on your PC. You can use Zang Spaces to communicate, collaborate, and manage tasks in a single, easy application.

From One to Many

Zang Spaces can be used to communicate and collaborate with individual users via audio, video, and messaging. Since anyone can use Zang Spaces, you can invite resources from outside of your organization to collaborate. Zang Spaces can also be used to communicate and collaborate with groups of people. Simply create a virtual meeting room, called a “Space,” and invite the members of the team to participate by entering their email address.

Smart Messaging

When you first enter a Space, you see the group’s chat stream. Unlike IM, which requires users to be online to receive messages, Zang Spaces uses Smart Messaging. Unlike plain ol’ IM, you can catch up to the conversation that has happened while you were away, and then add your comments for others to read. The chat stream is synchronized across all of your devices, so you can add quick responses from your phone, and then elaborate when you’re back in front of a PC.

Order from Chaos

One of biggest problems with group chat is multiple conversations happening in one thread. Users lose track of what they’re trying to discuss, and it becomes a mess. Zang Spaces delivers order from this chaos with a tool called Posts. On a single form, your team can have topi- based, threaded discussions, which makes it super easy to stay focused. With Posts, you can even upload files that are relevant to the discussion.

Stay on Task

When you have a team working together, many times there are multiple tasks that must be managed to deliver results. Instead of adding another unitasker to your users’ crowded toolboxes, they can manage multiple tasks in Zang Spaces. Users can create tasks in a Space and assign them to one or more team members. Team members can discuss the task, update progress, and upload files relevant to the task on a single form that makes it a breeze to reference later.

Real Time, Not Real Complicated

When you need to get the team together in real time, thanks to the magic of WebRTC, with a single click in your browser, you’ve created an audio/video conference with team members. No plugins to download or software to install, simply share your desktop with team members, and even offer a dial-in phone number for audio-only access.

Start Now

Zang Spaces is absolutely free to use! Simply visit zang.io, sign up for an account, and you’re set. You can send and receive as many messages as you’d like, you can hold audio and video calls with individual users, create as many Spaces as you need, and even host five-party audio conferences … at no cost. If you need additional capacities, Zang Spaces Plus and Zang Spaces Pro offer huge capacities for a great price.

Want to learn more? Get your free account and then send me a message in Zang Spaces at forcum@avaya.com.