CIO Talk Radio Blog

Cloud computing is HOT! First, get IT plugged into the right cloud service providers who do IT cheaper but better than in-house. Then IT can sit down in its rightful seat at the management table and get down to business with the other big guys. Sounds sort of like the ultimate corporate plug ‘n play. If only things were that easy.

Cloud Computing Benefits are obvious.  Cloud computing companies can provide flexible, scalable infrastructure resources on demand, without the need for additional investment. This levels the playing field for mid and smaller companies, so they can be as dynamic as a Fortune 500 company.  A recent Info-Tech survey suggests that three quarters of IT leaders are first considering a private cloud, with one third already set on a private cloud.  Cloud computing leaders are currently debating whether public or private cloud will dominate the future.

Today, no company exists in a vacuum.  Social media and collaboration are becoming tools for business engagement. Enterprise cloud computing facilitates the use of social media and shared collaboration with partners, for greater competitive advantage. An Enterprise cloud can provide a virtual community, where business and IT employees from the company can work with each other, or interact with their counterparts from partners, vendors, even clients, allowing everyone to work together to resolve problems, speed decision making, or adapt to competition. With Enterprise Cloud computing people internal or external (partners, vendors, clients) can function as a single organization.

Three security issues loom large over the future of cloud computing. First, what control can corporate security exercise over applications and services provided via cloud? Nobody likes being held responsible for something they have no control over. Second, how does IT Leadership convince everyone that corporate applications & services sent over the cloud are just as secure now as they were BC (Before Cloud)?  Cloud vendors have to be able to deliver apps and services with the same or BETTER security, otherwise they shouldn’t be in business, right? But how do you demonstrate that? More importantly, how do you get your cloud providers to show they aren’t vulnerable? In his blog on the TCO of Cloud, CIO of DeVry Eric Dirst, gives his experienced perspective on the value of testing the vulnerability of a cloud provider yourself rather than relying on the vendor to do it and report on itself.  And third, will security in the cloud satisfy federal compliance requirements.  Government red tape and watch dogs still exist, regardless of which political party is in charge at any time.

Not everyone agrees on the need for a maturity model for cloud. There are several out there, mostly for SOA, with roots based on CMMI. Having to follow any kind of maturity model framework traditionally creates additional overhead. Given IT's competing imperatives for using structured models to provide metrics and lay out milestones vs. adding overhead costs, some IT organizations may be less open to the idea of adopting a formal Cloud Maturity Model. (BTW, tell us what Cloud talent you're looking for, as you move your organization into the Cloud.)