Moving data storage to the cloud? What’s your business continuity plan?

Posted by William McBorrough | Network, Systems | Monday 5 July 2010 2:59 pm

Many trumpet increased availability as a reason to move to the cloud but what happens when your cloud provider is no longer available?

Some companies are faced with this very question this week as storage provider, EMC  announced its plan to shut down its Atmos Online cloud storage service immediately, according to a posting on its website.

EMC launched Atmos Online in May 2009, calling it “Cloud Optimized Storage [with] capabilities that can scale effectively, coupled with security and management tools.”  This placed EMC in direct competition with some of its service provider partners who used EMC’s Atmos technology to provide cloud storage to its customers.

EMC has now  downgraded Atmos Online to a development platform and is offering no guarantee as to the availability of user data moving forward. EMC used its web posting to “strongly encourage [companies to] migrate any critical data or production workloads currently served via Atmos Online to one of our partners offering Atmos based services,”

The provider going out of business is one of the many risks companies have to address when considering moving their critical data into the cloud. In this case, companies now have to spend resources doing the necessary due diligence in selecting an alternative cloud storage provider.

According to Morris Cody, CIO at Washington D.C. based Information Security Services Firm, Secure Intervention, companies moving to the cloud better consider the following:

1) Disaster Recover Plan –  The bottom line is that no cloud provider can guarantee 100% up time all the time. Even a cloud provider as large as Google has experienced an outage in it’s cloud environment.  In that case, a solid disaster recover plan will help mitigate loses from several different perspectives (i.e., monetary, branding, current clients, new clients)

2) BCP – Having a business continuity plan in place that will work in conjunction with you cloud provide capabilities will mitigate the risk of an outage do to an scheduled / unscheduled event (not necessarily a disaster) in you cloud provider environment.

3) SLA – a strong SLA should be established with your cloud provider that will hold them accountable for losses or damages (define losses and damages) do to changes in their environment that effect your business.  For example, if your cloud provider decides to shutdown the cloud hosting services, then they should be responsible for the cost to migrate your apps/data to the new hosting provider”

About William:
William McBorrough is co-founder and President at Washington, DC based Information Technology and Assurance Services Firm Secure Intervention, where he specializes in Security Assessments, Compliance Readiness, IT and Security Management and Cloud Computing Security for both public and private sector enterprises. He is also an Adjunct College Professor teaching Systems Architecture, Networking, Network Attacks and Defense, and Security Program Development courses. He holds CISSP, CISA, and CEH certifications and is pursuing a Phd in Information Technology with a concentration in Information Security and Assurance.
If you enjoyed this post, make sure you subscribe to my RSS feed!

Related posts:

  1. The real arguments for Cloud Computing
    As more vendors dive into the cloud computing market, every possible claim regarding the supposed benefits of moving to a cloud-based service is being made.  I ran across an article...
  2. Cloud-based…hacking??
    I assigned my class a research paper on the security implications of moving an enterprises data processing to a cloud provider i.e. a company that provides Software as a Service...
  3. Are you ready for Cloud Computing?
    As a final research project for my most recent class, I assigned the task of outlining some of the security issues associated with moving to a cloud based solution for...
  4. Cloud Computing = Loss of Confidentiality?
    Interesting excerpt from article in ITWorldCanada: “Adi Shamir, a computer science professor at Israel’s Weizmann Institute of Science and also the “S” in the RSA encryption algorithm, warned against trusting...
Leave a Comment
Please leave these two fields as-is:

Threaded commenting powered by Spectacu.la code.

Get Adobe Flash playerPlugin by wpburn.com wordpress themes