file sharing – Cooper Mann Consulting

February 18, 2014

The Business Cloud: Hype versus Reality

There is no doubt that cloud and mobile computing models are driving technology adoption as well as changing the landscape of how consumers and businesses purchase and use IT. Accompanying any great shift – which in this case is fueled not simply by cloud technologies but by social computing – are the purveyors of propaganda and hype. Cloud computing and social media won’t make you popular, is not always safe or free, and it doesn’t whiten your teeth. What it can do is help businesses increase agility, collect and use information better and reduce the cost of change. There are many benefits to be achieved with cloud computing models, yet many providers continue to play on the hype rather taking the more difficult road of communicating how their solution actually solves real business problems.

Gartner research tracks this type of activity, producing reports offering assessments of the “maturity, business benefit and future direction of over 1,900 technologies”. In the Gartner 2011 Hype Cycle Special Report, entries were grouped into 76 different “Hype Cycles”, revealing the similar patterns of “over-enthusiasm, disillusionment, and eventual realism” that comes with every new technology or innovation. Hoping to provide guidance business IT decision makers, the report intends to inform businesses about when they should consider adopting technologies or IT models in order maximize the value of the approach.

Yet the market is bursting with definitions for “cloud computing”, and services providers offer their wares with varying levels of service and capability. It’s really difficult to compare one private cloud solution to another, as they are all seemingly offering the same value proposition described in the same language – and none of it really describing what the solution is, how the business takes the greatest advantage of it, and what disruption can be expected along the way. Layer on top of that confusion a big heap of expectation, and the belief that cloud computing technologies are somehow different from “real” on-premise systems in that they are not subject to the same potential for breakage, failure, or unexpected cost.

elastic-2

For example, even though Amazon may use the term “elastic”, cloud computing does not automatically create a stretchy and eternally-dynamic resource that can grow without end. There are still limitations and costs associated with growth.

There is also a great deal of hype around applications and their performance in cloud environments. When a piece of software is poorly designed and crashes frequently on a local computer or network, it is just as likely that the application will perform poorly in the cloud. It’s simply a reality of software that even great products that are designed to run exactly the way they are being run don’t have a guarantee that nothing will ever go wrong. With cloud computing models, however, there may be a service provider working in the background to manage the systems and keep things running. You simply might not notice the failures and hiccups as much, but they are still there.

And not all cloud services mean everyone is sharing servers and infrastructure. While the term cloud generally applies to multiple scaled systems, it doesn’t mean that everyone shares everything and benefits from tremendous levels of redundancy and fault tolerance. In most cases, a solution described as a “private” cloud means that the service has been customized for the unique needs of the organization, and that there are resources of certain types allocated exclusively to the use of that customer. On the other hand, a private cloud may mean that the system elements are all contained within the business infrastructure, providing “cloud” type of services but being delivered from company resources. There are a wide variety of ways to describe these configurations and approaches, and quite a bit of inconsistency in use of terminology.

The best thing for a business owner to do now is to just ignore the term “cloud” and simply consider how the business might leverage resources from service providers to gain more IT capability at reduced costs, and how outsourcing certain technology needs allows a greater focus on internal innovation and improvement. Centralized management, improved security, disaster recovery, and increased mobility are all benefits to be realized with the right business cloud implementation. Just because it is to be an outsourced solution does not mean that the business organization should not still architect and understand the solution they will depend on. If this level of participation and understanding is not in place, the solution is unlikely to deliver the resulting benefits expected and hoped for.

Outsourced IT service, remote access and server-based computing aren’t new concepts. It still requires using common sense and reasoning when considering any change in business technology and the innovative application of IT in a business – this cannot be outsourced. When it comes to cloud computing… to put it bluntly, just avoid the hype and stay away from unrealistic marketing and sales messaging. If it sounds too good to be true… it probably is. Technology hasn’t come that far.

Joanie Mann Bunny Feet Make Sense?

February 11, 2014

Migrating Business Data to the Cloud

When businesses elect to have their desktop applications hosted in the cloud with a hosting service provider, they are also electing to have their data hosted with the provider. This point is not always obvious to non-technical users and those unfamiliar with the hosted application concept. Many business owners have adopted an online or hosted application solution and then realized after-the-fact that their data was no longer present on their computer. At least, no current data was present, and it was quite a surprise the day they wanted some information but could not get it because they were not connected to the Internet at the time. An important thing to remember, and the essential factor in measuring risk associated with use of cloud services and hosted solutions, is that adopting online applications in almost any form means that the data associated with (and possibly even data remotely associated with) the application will also migrate to the cloud.

Migrating on-premises servers – and the applications and data residing on them – to the cloud makes sense for many businesses. Particularly as network and internet threats increase in number and as system vulnerabilities are more frequently introduced with remote and mobile access technologies, cloud solutions can significantly assist a business in mitigating the risks of being connected. Yet business owners and IT managers must be diligent in terms of understanding the measures their service providers take to protect and preserve as confidential the customer’s business data. And it becomes more than essential that any and all tools or services implemented be part of a strictly controlled information management and data protection plan.

Where applications are simply interfaces and logic; the value for a business is in the data used by the applications – data containing information about the company, how and with whom it does business, and how it makes money. It is critical that the business consider how and where users need access to applications and data, so that any cloud deployment does not wind up hindering productivity rather than facilitating it to a greater level. It is when the user becomes disenfranchised, unable to perform their work due to lack of access to information or tools, that “shadow IT” deployments appear, and data sharing solutions are introduced outside of the governance of management or IT.

The vast number of offerings for hosting applications and managing business data in the cloud makes finding and implementing the right business solutions a complicated and often frustrating process. Even large providers that specialize in delivering from a menu of business cloud solutions often forget that their target customers may not be particularly tech-savvy, and will fail to recognize the nuances in service delivery or protection that could make big differences to the business down the line – like in the case of a system failure or outage.

Among the keys to a successful cloud solution deployment, particularly when critical and frequently used applications and data are to be migrated off-premises, is a thorough understanding of how users currently work with the tools provided, ensuring that processes and utilization can be fully adapted to the new IT model.

As long as users are able to retain their productivity and efficiency, and when improvements in workflows and information access become additional benefits, the security and protection of the business data is more likely, as users will feel less compelled to find alternative and less secure means for making the business data available from the cloud. You may want to migrate your business data to the cloud, but you don’t want your data to migrate further than you can reach.

Joanie Mann Bunny Feet Make Sense?

January 6, 2014

Security and Users: Change is the Only Constant

Managing user accounts and access to business IT assets is challenging, particularly as cloud and social computing models introduce new wrinkles in security and identity management. Information has become “mobile” along with the users accessing it, yet management of user behavior is even more complicated that trying to manage a digital resource.

If you look at the history of security breaches, you’ll find that many of them started with a user making a mistake – like losing a laptop or clicking on a phishing email, downloading bad software, or forgetting to report an employee termination to the IT dept – something which inadvertently created a vulnerability that could be exploited. It’s tough to stop breaches because there are so many possible ways for them to happen.

If most security breaches start with a user mistake, then IT departments have their hands full because users aren’t static, unchanging objects to monitor and manage. Users change, sometimes a lot. It is this constant change which undermines the ability for some IT departments to meet the demand to adequately secure company information systems and data. Now is the time to take control of user security and identity management, creating automation and controls to protect business assets in a constantly evolving environment.

It is not simply employee turnover that challenges security management. Certainly, IT departments have been dealing with user account creation and termination for a long time. And sure, users have sometimes been promoted and demoted, resulting in the requirement for IT to increase or perhaps decrease access to information and applications. These are normal and expected activities for a business IT department. Unfortunately, IT often doesn’t hear about the user’s change in status. An account isn’t disabled, access isn’t restricted, and the system is left vulnerable.

Just to pile on, think about what happens when a user is more than just a single system user. It may be manageable when where a single identity and set of credentials governs their access to applications and information. But the proliferation of web-based services and SaaS solutions has made it commonplace for users to have multiple applications and services available to them, each with their own approaches to identity management.

For even a small business IT department, the security of all of these access points and applications must be managed and monitored – no small task when the department may not even be aware that the solution is in use. It is not unusual for file sharing, data sync, or other applications to be implemented in businesses without the knowledge or participation of the IT department. Actually, many services attract users due to their simplicity and ease of use, leveraging the fact that they can be deployed without the “assistance” of IT.

Users are becoming increasingly mobile, accessing information and applications from public and private locations while using any number of possible mobile devices. Vulnerabilities which may exist in public networks and the increased potential for device loss or theft are high on the list of concerns of IT departments managing remote and mobile user access. Mobility is driving many changes in how information technology and access to systems is provided to users, and it is changing user demands for what they should be able to easily accomplish while being mobile.

Businesses need to recognize that their continued existence may rely on keeping their information systems and assets safe and secure. Disaster recovery and business continuity applies not only to loss of physical systems, but also to losses of various forms due to data breach. The disaster recovery and continuity plan (you have one, right?) should not only address situations after they happen; planning by definition is proactive. It is not enough to have a plan to recover from loss or failure; the business must actively engage in activities which will prevent loss and reduce vulnerability.

Part of this plan necessarily centers on managing users and user identities, ensuring that the company knows about all access or user accounts involved and employs strict processes and guidelines for making sure they are constantly up to date and have the authority to do what they’re trying to do. In short, the plan must also be a plan for change, providing change management processes to guide the business as the evolution of information technology and the dynamics of user interaction continue to change.

jmbunnyfeet Make Sense?

September 21, 2012October 28, 2014

Smarter Online Document Vaults: Document Management for QuickBooks, Microsoft Office and more

Smarter Online Document Vaults

Document Management for QuickBooks, Microsoft Office and more

Document management used to be just about storing and retrieving files. Being able to easily store document images and other files, and then quickly finding them when you need them, is an important aspect of business record keeping. If you are an accounting or bookkeeping professional offering outsourced services to clients, having a secure way to store and manage client document files from a variety of sources is key to developing workflows and standardizing service delivery. Invoices, bills, bank statements, and all the other paperwork which is generated by various business processes must be captured, accounted for, and retained for future reference and documentation support. With all of this going on, having a secure and easy way to handle all that paper and computer-generated reporting is really important.

Using an electronic document management system isn’t really that much different from dealing with paper filing systems, at least in terms of the process. You obtain the document, you translate it into a journal entry or transaction, and then you file the document away for later use. The difference is simply that the document becomes digital image data and is stored electronically, instead of keeping the paper file around. And, the earlier in the process where you can turn paper documents into digital images, the better, because it reduces the need for “paper-based” processes which take more time and resources, and which may introduce risk of information loss or damage.

In an outsourced bookkeeping arrangement, for example, allowing the client to convert paper to image files is highly desirable as it prevents the outsourcer from having to travel to client offices to obtain paperwork, and reduces the time involved either with traveling to and from client locations or time spent waiting for mailed information to arrive. For the client to handle this process willingly, or with any frequency, tools which are simple to understand and use must be supplied. Scanning a document, saving it to the hard drive, and then trying to find the file to upload later to an accountant “portal” is not a simple process and it is not efficient. If the user is somewhat nontechnical (most business owners?), or if there is a lot of paperwork to scan and upload, that multi-step process just won’t work for the client.

SmartVault, a solution for QuickBooks-connected and general purpose document management, has an elegant solution to the problem, and it’s called the “InBox”. Just like the inbox on your desk, the SmartVault InBox is where new documents arrive to be processed. The ingenious part is that the InBox is a little applet that gets installed on the client workstation, and provides them with a very simple way to scan files directly to SmartVault. The accountant or bookkeeper then accesses the client files from the inbox and processes and/or attaches them to QuickBooks transactions as required. The client has only to perform the simple task of telling the SmartVault InBox app to obtain documents fed into the scanner. No local file saving and retrieval required. For the accountant or bookkeeper, the inbox is the first stop in the workflow, and is the place they go to obtain whatever information the client has provided. The SmartVault InBox can also be used to return files easily and securely to clients, bypassing the need to have the client access and log in to a website in order to get the files (but a website portal is also part of the system, just in case the client prefers this method). If providing seamless service and easy to follow procedures describes how you work with your clients, then SmartVault could become a key element in your service delivery.

Affordability and ease of use are important factors to consider when looking for document management solutions for small businesses. In addition, having the ability to store documents from popular small business applications allows users to centrally store and manage all their business documents and files, not just those related to accounting. When users wear many “hats” in the business, and need access to a variety of document types, a centralized filing system is an absolute necessity. SmartVault addresses this by providing direct integration with Microsoft Outlook, Results CRM, and a variety of other popular small business solutions.

Oriented for use by small businesses and the accountants and bookkeepers who serve them, SmartVault delivers a surprisingly powerful solution which addresses the variety of document storage, attachment and retrieval requirements of most businesses, coupled with the workflow tools and a unique QuickBooks integration capability to specifically address the needs of accounting and finance department users. You know you need to work smarter and not harder, so your document vault should be smarter, too.

Make Sense?