Tag: hosting service provider

Posted on

QuickBooks online, or QuickBooks Online? Use Software on the web without using Web-based software

cloud-computingThere is a trend among software makers these days to more fully leverage the “power of the web”, and why wouldn’t they?  The Internet has become the way businesses and users get and stay connected, and has become a foundation for how business gets done.   Remote and mobile access to information and applications has become an expectation of users, as social computing models have encouraged them to remain connected on all of their devices and from any location.  Online describes a working model that many businesses strive for, and software makers are seeking to capitalize on the trend.

The belief that software should no longer be installed and run from a local device has been adopted by some of the largest software vendors in the market, which would lead many users to expect that this is the important trend to follow.  Being encouraged to ditch their desktop software products and transition to using the web-based or SaaS alternative, users who have grown to trust their software products are now facing new buying decisions.  Any time a customer is forced to make a buying decision – like moving from a desktop product to a SaaS solution – there is a potential that the customer will go with a different vendor and leave the product line altogether.   Yet this is exactly what is happening with small business applications, and specifically with the tried-and true QuickBooks products – the solutions which had become the cornerstone of small business finance.

Where QuickBooks Pro, Premier and Enterprise desktop editions were the favored and trusted small business accounting solutions, Intuit is now on a wholesale push to get users transitioned to the QuickBooks Online edition.  In doing so, they’ve opened up the door for new competitors, because they’re forcing their QuickBooks users to make a new buying decision.   Assuming that customers will adopt the QuickBooks Online solution simply because it’s “QuickBooks” was perhaps a poor assumption on the part of Intuit.  Particularly by naming the product “QuickBooks”, Intuit invested the trust and long-standing recognition of the brand and product line into the online edition, and the user base and market has not been amused.  “It may be called QuickBooks, but it’s not the QuickBooks I want” says one customer.  Apparently, the QuickBooks Online edition is not what many experienced QuickBooks desktop users are looking for in a new version of the product.

Desktop QuickBooks users don’t have to move to the Online edition just to get the benefits of the cloud with their beloved QB.  The hosting and cloud service providers I work with help businesses run the QuickBooks desktop products as online service.  We deliver fully managed applications and data, allowing users to access their QuickBooks desktop products online and from a variety of devices just as if they were web-based.  Gaining the benefits of anytime/anywhere access with the added advantage of not changing software is a direction many users are electing to go.  While the price of a hosted solution may not be as low as a QuickBooks Online subscription, it is generally far less than a subscription to Salesforce.com, for example.  Isn’t the business financial data at least as valuable as CRM? The price isn’t unreasonable, and the benefits of online/remote access, managed IT, protected data, and an ability to take your ball and go home if you like are huge.  Grab your data file, install QuickBooks on your PC, and you’re back in action.  Can’t do that with most SaaS solutions, can you?  It’s only do-able with desktop software, which you can run in the cloud with a hosting provider or run on your own PC.

Assuming that all software will ultimately run online could be a big a mistake.  As technology advances and new capabilities introduce new complexities, the “heavy lifting” shifts from the center to the end points and back again.  While there may be a trend towards SaaS and leveraging the power of a remote system, the reality is that our devices – desktops and laptops, tablets and phablets and phones – are all getting more powerful.   Many SaaS applications and remote access technologies rely upon (and find ways to push more resource utilization to) the local device.  Video processes more quickly, input and output devices are more easily recognized, and the storage on the device is faster and easier to access.  A lot of work happens on the local device, and it will continue to be this way as the devices continue to get smarter and more powerful.  “There’s an app for that” for a reason: apps on the device work well and give users the functionality necessary to get things done efficiently.

SaaS is not all that’s out there – much of the software businesses know and love is still available the way they want it.  QuickBooks users need to know they can get their QuickBooks online without having to use QuickBooks Online.  The desktop is not dead, and it won’t be for a long time.  Desktop software isn’t dead either; it’s just being pushed to the background as software companies attempt to wrap their arms firmly, with subscription based business models, around their respective customer bases.

Make sense?

J

Read more: Cloud Hold Out No More: QuickBooks Desktop Editions in the Cloud

Posted on

QuickBooks and Dropbox? Yeah… no.

mobile cloud dataHaving your data available from anywhere is awesome.  Storing files in the cloud and being able to sync them with files on the computer is a great way to make sure the files are centrally available regardless of which machine you use to access them with.  Dropbox is among those favored solutions which provide users with the cloud drive storage and an ability to seamlessly sync those files to various computers.  It’s pretty cool, but let’s face it: not every type of file loves living in a Dropbox or sync folder.  Particularly for folks who want to be able to store and sync their QuickBooks and other business files to the cloud, there are a few things to be aware of when using these nifty sync solutions.

A file is not always just a file.  What do I mean by this?  Well, there are lots of different types of files an application might store and use, and not all of them work the same way.  For example, Word documents are files that only one person can actually work on at a time – there’s no actual “multi-user” functionality when it comes to a Word doc.  You either get the file in a state that allows you to make changes to it, or you get it in ready-only mode.  Document files like this – Word docs, Excel spreadsheets, PDFs and text files – work great with sync solutions. This is because the type of file being sync’d is designed to allow only one person at a time to have it open and editable.  You sync it to your computer, work on the file, and then sync it back.  It’s pretty straightforward.

The file that isn’t just a file is a database – a file or series of files that make up a complete data set, and which have some type of database manager or other framework keeping track of things.  It’s this type of solution that often has problems working in a sync folder or system.  An Outlook data file (a .PST file) is a type of file which fits into this category.  While the Outlook file isn’t generally viewed as a multi-user data file or a database file, it is being communicated with and written to by various processes while the application is running.  There is information being added to the file as emails are received, even while the user may be writing an email or entering a calendar appointment.  The point is that there are multiple types of data elements being updated all the time and by various processes.  This type of file is always in use and getting changes, so there really isn’t a point in time when it’s closed and available to make copies of, which is what has to happen for a proper sync.    And, because the sync solutions often try to sync incremental file changes, there is a big possibility of ending up with a damaged file because some changes were properly written where others might not be, ending up with file conflicts and corrupt data.

A QuickBooks company file is also a database file, so the same issues around syncing an Outlook data file exist with QuickBooks.  When the QuickBooks software is open and a company file is being worked on, the file may get incremental changes throughout the work session.  As each of these little changes happens, the sync program may attempt to copy those changes to the file in the cloud.  Because the QuickBooks file is constantly being updated, the attempt to incrementally sync updates to the file in the cloud can easily cause damage and corruption to the file.  Folks who have attempted to fake a sort of multi-user access to QuickBooks data files by using Dropbox or other sync services quickly find that the system isn’t going to work for them that way.  Further, they often find that the QuickBooks data files can get pretty screwed up trying to manage the live company file in this manner.

 

The only way to use QuickBooks, Outlook and similar types of data files with Dropbox is to recognize that the sync folders are only viable as a backup storage location for the files, not the place where the actual, working data files can be stored.  If using an application such as QuickBooks, businesses should store the “working copy” of the file in the documents area on the machine, and then backup or copy the data file to the sync folder periodically.  Placing the backup files or file copies in the sync folder allows them to sync to the cloud, storing them as offsite backups in case you need them, and allows the file to remain where it can be used by the application.

Businesses who need access to QuickBooks applications and data from different computers or locations may want to consider checking out hosting services as an alternative to a sync solution. Hosting solutions can help businesses get their software and data available anytime, anywhere either from their own PC or from a secure environment so they can access their QuickBooks applications and data from any Internet-connected device.

When a company wants to keep backup copies of their information in the cloud, a sync service might be an okay solution.  For folks who need to be able to access a live file and applications from a variety of locations, or if multi-user access is required (especially if those users are in different locations), then a full hosted solution might be the better answer.  Hosting the applications and data in the cloud is a great way to get the company connected, and it’s a far better alternative to pretending the system can be multi-user when it really can’t.

jmbunnyfeetMake Sense?

J

Posted on

Licensing the Cloud: Software Distribution and Use in a Remote Access World

Licensing the Cloud: Software Distribution and Use in a Remote Access World

Whether we like it or not, and whether we agree or not – software developers have a right to decide how and where their licensed products are run.  There have always been arguments in this area, where software license purchasers take the position that they should be able to do what they want with their licenses, and where commercial software developers believe they have the rights to dictate authorized usage.  Truly, when it comes down to the legalities of it all, the software companies will win because they have the legal footing to fall back on  – the EULA containing use rights and terms which licensed users have agreed to.

The problem has been ongoing, with software developers constantly and consistently seeking methods to reduce unauthorized software distribution and unsupported use, and users spending amazing amounts of time and resources finding ways to break the rule.  Copy protection, “phone home” license validation models and all sorts of approaches have been developed to prevent software theft and unauthorized distribution.  But it happens anyway – a lot – and the cloud is turning into a great facilitator.  Surprisingly, it’s an “in your face” approach, too, where the previous iteration of web-enabled software theft (unauthorized digital downloads and license cracking) was fairly quiet and tried to be secretive to stay out of the gun sights of the developer.  Today’s “flavor” is right out there, being marketed to any and all who care to view the ads.

With businesses more frequently turning to “cloud” server providers to run business applications, it is no wonder that the IaaS and PaaS companies would want to make their services easier and more valuable to acquire than the next guy’s.  Aside from a groovy control panel and great networking and VM pricing, the added value from these providers is in the applications they are able to service.  More frequently, hosting service providers are marketing their solutions in the context of the applications customers run on the service (which makes sense, because the application’s what really matters).  Leveraging the brand value and recognition of popular commercial software products makes sense, as it improves overall visibility and increases the potential of the “right” kind of prospect engaging and becoming a customer.

The problem arises when these service providers sell hosting services for, or which support, applications they are not authorized or licensed to deliver, and this is where the argument comes full circle.  The hosting provider wants to host applications customers use, customers have licenses for those applications, but not a right to have them hosted.  The host deploys the application anyway, because that’s what the customer wants.  “What’s the risk?” they ask… “the customer has the software license”.

The risk is, unfortunately, greater for the service provider than for the customer.  Even if the customer has a license for the software product, that license may not actually be eligible to run on a hosted server.  “Businesses lease computer equipment all the time, and they can run the software on those systems” is the next argument generally offered by the service provider.  But, in the eyes of the software developer, there may be a big difference between leased equipment run in-house versus subscribed platform services deployed via a commercial hosting provider.  Even Microsoft recognizes the benefit and value of providing “mobility” of application licensing, and has specific licensing models to allow commercial hosts to deploy customer-owned licenses.  While many service providers understand and recognize the requirements to ensure that customer applications are properly licensed for hosted delivery, there are a great many who think the rules simply do not apply to them.  These folks are introducing a great deal of risk into their hosting businesses, even if they are not willing to recognize it.

When a customer runs their software in an unauthorized manner, they risk losing the rights and benefits associated with their software license.  When a commercial hosting company runs software on their servers that they have no right to install and run… they are potentially guilty of unauthorized software distribution and copyright theft.

Actions against facilitators of unauthorized content distribution – you can equate “software” with “content” – have received much press in past months, yet much of the discussion centers on music and video content (as in the Megaupload story).  Actions involving commercial software products tend to be somewhat less visible, probably due to reluctance by commercial developers to have what could be perceived as negative press flowing through social media venues.  It’s popular to protect music and videos, but hosting providers aren’t seeing the wisdom of preserving the integrity of a commercial software product license.  Instead, they’re relying on the customer to indemnify them (the customer has a license, remember?).   But the customer can’t protect the host; the host must protect the host – it’s the prudent business approach.

Infrastructure providers, platform providers and businesses operating as application hosting companies should pay close attention to the content living on their servers.  Taking a position that the customer has the right to do whatever they want with the system is not a viable position; the precedent has been set that the hosting provider is responsible for the content on their systems.  In the case of hosts offering service for small business applications like Microsoft Office and Intuit QuickBooks, for example, it is essential that a service model which conforms to and supports proper license usage be in place, and that any required authorizations are, too.

Software is just another form of content, and the cloud makes distribution of and access to content a lot easier, even when it shouldn’t be.

Make sense?

J

Posted on

Better QuickBooks Access, Management and Security – QuickBooks Licensing and Hosting Models

Whether hosted in-house or offsite, licensing models for hosting QuickBooks can be very confusing.

driving1-ANIMATIONThe demand for solutions to address user mobility, better collaboration and improved information security is increasing as connectivity improves and cloud services and threats evolve. Server-based computing models and application hosting are increasingly popular as businesses seek to embrace teleworking and telecommuting models for their entrenched applications and systems, creating a foundation for improved productivity and work/life balancing (or integration).  On the technical side, the benefits of centralizing applications and data include improved efficiency in managing, maintaining and securing systems. For many small businesses, this means centralizing the installation and maintenance of core business applications like Intuit QuickBooks Pro, Premier or Enterprise.

Whether it be offsite with a commercial hosting provider or on a co-located server somewhere, or an onsite installation on the in-house server, hosting Intuit QuickBooks licenses can be straightforward or complicated depending on what you are trying to do with them. Because QuickBooks was designed as a standalone single-user application, there are a number of challenges when it comes to preparing it for server-based use.  The primary issue is often simply understanding the QuickBooks licensing model, which is not particularly INTUITive (sorry).

Licensing hosted QuickBooks applications comes with two different sets of implementation issues: the technical implementation (the installation and setup) and the logical allocation of licenses to users (the licensing rules).

When it comes to the technical implementation, many an experienced engineer has beaten their head against the wall trying to get QuickBooks to work properly in a workspace or session-based system (e.g., terminal server), all because they expect the product to implement like a “normal” client/server application. While QuickBooks may use the Sybase database manager guts to handle multi-user access to QuickBooks data files (I think it is still Sybase), the architecture required to properly service a networked QuickBooks installation does not necessarily mimic what would be used with, for example, a .NET desktop client application with an MS SQL back-end.   First, the QuickBooks data files cannot be remote to the application, meaning that both the client and the database manager (which is actually working as an adjunct to the client) must exist on the local network; it will not work over a WAN connection, which is why so many folks get frustrated when they put their server “in the cloud” and attempt to connect from a local client using a VPN.  It just won’t work that way with QuickBooks; it all has to be on the local network – client, server, data… all of it.

It is notable that many businesses use Dropbox and other file sync solutions because they want to be able to get to their data from multiple locations, but the data they’re getting must be “local” to the apps that use it.  It doesn’t allow for simultaneous multi-user access, but it can be an effective way to share a file.  The caveat is that the file (at least in the case of a QuickBooks file, or Outlook PST file, etc.) should not actually be used from the sync folder.  Sync folder should contain copies of data files that users wish to sync or share with other devices.  But I digress…

With a server-based implementation of QuickBooks, technicians will install the QuickBooks desktop software on the server, and will determine whether or not that same machine will also handle the company data files.  The QuickBooks DB manager is part of the installation of QuickBooks, and the file system and drive where the QB files are to be managed must be recognized as a local drive on the server running the QBDB manager.  The overhead used by the database manager isn’t huge, but it can impact the performance of users on the server.  For this reason, some techs will decide to implement a separate file server to manage the QB data files, taking that load off the app server.

  • The QuickBooks software uses the database manager to “host” access to company files.  This simply means that a single server with the data on it is providing managed access to remote-desktop-sessionsQuickBooks application users.
  • When QuickBooks application software and data is installed and centrally managed on a server (instead of QuickBooks being installed on individual PCs), that means QuickBooks application is being “hosted” on that server.
  • When a 3rd party provider supplies the server, the QuickBooks installation, data storage, and your way of connecting to it all,  that provider is a “host” providing hosting services for your QuickBooks.

In a dedicated hosting environment, the data is often stored on the same server as the applications, whereas in a shared hosting environment, the data is often stored on central file servers which serve multiple customers. This is why, in some shared hosting situations, one bad data file can take down the database manager services for all the customers using that same file server.

Users open the QuickBooks application on the server instead of having the application installed on individual PCs.  The single server-based installation of the software is able to be used concurrently by all users logging in to that computer. With the database manager running, the file is essentially “hosted” on that machine, and the file may then be opened in multi-user mode.  OK so far.  The problem generally comes about when a second user on the same computer/server wants to open the same QB data file as the first user.

Because the QB database manager is looking at the license of the client application accessing the data file, it will recognize when two different users/sessions with the same license key attempt to open the company data file.  If that license key is a single-user key, then the database manager knows it should allow only 1 concurrent user in the file.  QuickBooks doesn’t get installed for each user on a computer or server; it is installed one time on the machine and each user on that machine runs from that single shared installation. Any particular version of the QuickBooks application may be installed only once on a single computer, but it is possible to install multiple editions, year versions, and “flavors” of QuickBooks on a single machine (cannot be more than one installation of each unique product). There will be more than a few annoyances when running a variety of QBs on the same computer, but it is technically possible.

In order to allow multiple users to simultaneously access the same data file from a central installation of QuickBooks, the license key installed on the computer must be a multi-user key.  QuickBooks Pro, for example, can be keyed to 3 concurrent users, meaning that the license will allow up to 3 users with that same license key to simultaneously access the same company file.  Technically (but not lawfully) this installation of QuickBooks on the machine could allow a virtually unlimited number of users to launch the QuickBooks application simultaneously, limited only by machine resources.  This is where the logical allocation of licensing comes in.. the rule of licensing QuickBooks.

The logical allocation of unique licenses for each QuickBooks user is a little easier to understand than the technical implementation.  The rule is simply that each user of QuickBooks is required to have a valid registered/activated license. That valid license is a license purchased and activated for that business.

total-businessMaking QuickBooks desktop editions more useful by adding secure remote access and centralized management makes a lot of sense.  For companies who rely on the functionality and features of the desktop products (QuickBooks Pro, Premier and Enterprise), a hosted approach is the only way to really address mobility and multi-location requirements.  Remember that hosting doesn’t necessarily mean offsite, although that could make sense for the business, too.

Centrally-managing QuickBooks applications and data creates greater efficiency and improves overall IT management capability for the business.  At the same time, a centralized model introduces a better strategy for mobilizing the workforce and connecting remote users and offices. The struggles of understanding and implementing proper QuickBooks licensing begin to seem very small when compared to the benefits of deploying a centralized system that’s easier to access, manage and secure.

Make sense?

J

Posted on

The Cloud for Your Firm: 3 Initial Considerations for Cloud Enabling Accounting and Bookkeeping Firms Working With Small Businesses

The Cloud for Your Firm

3 Initial Considerations for Cloud Enabling Accounting and Bookkeeping Firms Working With Small Businesses

dscn0903.jpgThe potential benefits of a real-time, lean collaborative working model are too great to argue with.  Accounting professionals, bookkeepers and their small business clients are all hearing about the value of working together in the cloud, and how cloud technologies and solutions can reduce cost and improve efficiency.  There is a great deal of truth in these statements, just as there was a truth in the value of implementing computers, networks and other technologies in business.  What is not clear is exactly what businesses need “in the cloud”, and how they should approach this shift from local IT to outsourced managed service.  Initially, there are 3 issues which warrant consideration, if not deep discussion, prior to making any significant move to relocate internal IT and shift business applications to the cloud: internal use systems, client interaction, and operational support for both.

With all the discussion about cloud computing and remote access, it would seem that all the applications and solutions businesses need are now available online and paid for in low monthly subscription fees.  Anyone working with small businesses, however, comes to understand that the vast majority of these businesses are still using more traditional modes of information management and computing.   For the most part, these businesses are using PCs and local networks, possibly with a little hosted email thrown in.  Almost certainly they have a website and maybe even a fairly sophisticated e-commerce system that allows them to sell products online.  But when it comes to general office functions, and particularly back-office functions like bookkeeping and accounting, the software and the data generally reside on the office PC and server.

Accounting and bookkeeping professionals who work with small businesses are often in the same position as their business clients when it comes to information technology.  Since so much of the work involved requires the same programs and data formats as those used by the client, service providers find that they spend as much in management of software licensing and systems to support working with client data as they do on systems intended for internal use only – sometimes more.  Many of these service providers are also small businesses, and it becomes challenging to find a way to handle internal IT needs while at the same time trying to address those of the client. Where e-commerce solutions are readily available to handle operational aspects of product based businesses, the best tool set for a professional accounting firm or bookkeeping business working with small business clients may not be so easily defined.

The solution for many providers has been revealed through cloud computing and hosted application models.  With Cloud Servers, Remote Desktops, and Virtual Desktop Infrastructure now widely available as affordable alternatives to capital-intensive implementations of locally installed products, businesses are finding new abilities to manage applications and data, provide mobility and enhance collaboration.  The additional benefit is in how accounting service providers may engage with their clients in more efficient and effective ways, without the burdens of replicating data or trying to share access to a single machine or application resource.

There are a number of elements to consider before taking the file server to the parking lot and running it over with a truck.  Moving to the cloud is not a one-step process, and it is important to do a little research and collect some important information before making the final decision on how to proceed.

Internal Use Systems

Among the first of the questions to ask when considering a change in IT management approaches is “which software do we need”?  Implementing an outsourced IT arrangement, which is really what “cloud” is about”, does not necessarily mean throwing away all the existing software and starting with new.  The software in use within the firm may be exactly what it needs right now and adding full IT management, fault tolerance, and remote or mobile access could be the main scope of the requirement.  Moving from locally installed solutions to hosted solutions provides quite a number of benefits while removing many of the direct costs and frustrations of IT management and administration. The greatest benefit of this type of approach is the ability to preserve the “body of knowledge” existing in the business, knowledge invested in the people and processes already developed.

On the other hand, there may be new tools or services only available as “cloud” service, and it makes sense to explore how they may benefit the business more than the in-use applications.  The important element is to remember that the solution must address real business problems, and whether it runs in the cloud or not isn’t the first or most important thing to ask.  For example, a discussion about whether QuickBooks Online might be a better choice than QuickBooks Pro, Premier or Enterprise should be focused on the functionality provided by the applications and not which servers they are running on.  With application hosting for QuickBooks now being an available option, there is a managed IT and remote access capability for both solutions, rendering the fact that QBO is a SaaS solution almost irrelevant in terms of being a differentiator.

Client Interaction

An important aspect of adopting new technologies or working models is the consideration of how the firm and the client businesses will work together, and whether or not there is (or could be) a standardized approach that might work for most clients.  Certainly, it makes sense to standardize as much as possible.  Treating every issue or engagement as a singular event – a one-off – is the least efficient way to do business.  The key to profitability is in the firm’s ability to produce high quality work consistently and in a timely fashion.  This requires that the business be well-structured in terms of the standard processes and methods which will be used to work with client information.  When the firm and the client can work seamlessly together as and when required, and when each is responsible for their own systems and data, it is a best-case scenario. The questions relating to client interactions focus on how the firm works with clients and which tools or solutions are required to improve that situation.

It is likely that the firm will need to be able to address working relationships with various client and engagement types – where clients do some of the work, where the bookkeeper does the work, or where the participants work collaboratively together in the same systems.  While it may seem that the best way to create a dependency on your services with the client is to keep them out of the systems, empowering the client is really the key to a close and long-standing engagement.  This means that the client needs to have their own solutions and approach to cloud-enabled IT, and the accounting or bookkeeping service provider should be able to access and work within that environment.

It is rare that a small business can effectively operate without computers and software to manage information and support operations, so it makes sense that the business should have its own accounting and financial systems, too.  For the accounting service provider, it is essential that a level of understanding be gained around the use of today’s available remote and mobile access technologies, as it is with these solutions and tools that participation in client systems will be enabled.  When the client accounting solution sits on their office PC, there are limited options for working together in any real collaborative form.  Connecting to their PC via remote control is a widely recognized means of gaining access to client systems, but if the bookkeeper is on the system when there is a problem of some sort, all eyes go directly to that remote user as the likely cause of the problem.

The considerations relating to remote access to client systems focus not just on enabling a collaborative working environment, but also on mitigating risk and improving client perception.  The risk issue comes in when the accounting service provider is exposed to systems and information not relevant to their task, and the perception issue becomes material when the accounting professional becomes the software or IT service provider.  It makes sense for the accounting professional to make recommendations or suggestions about software and IT service which might benefit the business, but not to necessarily be the reseller or direct provider of the product or service.  The moment the accounting professional attempts to sell the client a software product or IT service, the relationship is changed and the client is more likely to view their accounting pro as another vendor rather than a trusted advisor.  It’s also not necessarily a great move to start a new client engagement by telling the client they have to switch accounting products to allow the accountant to work closer.  Rather, professionals need to help their clients position those products for more efficient use, which may include enabling remote or mobile access granted via deployment in the cloud.

Operational Support

When businesses outsource their IT management and administration, there is often an initial belief that all responsibilities in these areas will be handled by the IT service provider.  What is often overlooked is the reality that the firm still needs to have people attending to IT related tasks, just doing different levels of work with the technology. It is important to recognize that someone in the firm will end up dealing with various IT and process support issues, and it still makes sense to have personnel dedicated to these tasks (*Note: here’s where I suggest that the cloud changes the focus of internal IT personnel, but it doesn’t eliminate the need for them).  The service provider and solution evaluation and selection process, as well as the actual deployment and administration of services, will take valuable time away from actually performing client accounting or bookkeeping work, and there should be people attending to these issues while the business continues operating.

Where an internal IT department or contract technicians may once have supported internal systems, an operational role within the business is still required to manage outsourced IT activities, including and particularly those where clients are involved with the firm systems.  Delivering new benefits with a minimum of business disruption is the goal, and can be achieved through proper planning and coordination with team members and clients alike.

Closing Thoughts

“The Cloud” is just another way to run software and implement computing resources.  It still takes servers and software, it uses processors and storage and networking, just like more “traditional” computing models.  The difference is in how these resources are purchased and provisioned, and the impact is a change in how businesses of all types can benefit from technologies which enable collaboration, lean process, and mobility.  The Cloud for Your Firm addresses your internal business requirements, lends itself to client collaboration, and has internal operational support to ensure the firm is fully leveraging the available benefits to improve business performance and profitability.

Make sense?

J

Read more about Accountants and Bookkeepers Working With QuickBooks Clients: App Hosting Approaches That Work

technorati-top-100-small-business-blog

Posted on

Many Companies Are Negligent About SAP Security, Researchers Say – CIO.com

Is your hosting service provider helping to keep your critical business applications secure?  It is not enough to simply harden machine images and develop policy-driven access; application hosting providers need to understand the vulnerabilities introduced by each and every application in the environment.  Otherwise, the system could be exposed to threats directed specifically at the application environment and opportunities it presents.

Many hosting providers will offer customers service for any business application they have, and often provide those services with no significant experience or expertise in dealing with configuration or security issues specific to those applications or environments.  Consider the following report from IDC which indicates that numerous SAP deployments remain vulnerable to attack or intrusion, even though SAP has improved security of the products. The problem rests not exclusively with the SAP applications, but also with the approach to implementation of systems and security around those applications.  Understanding the various vulnerabilities introduced with SAP products is the first step to securing them.  Certainly a skilled IT solution provider is likely to offer a high level of service and capability, but there may be issues presented by various products (like SAP) which introduce additional or unique considerations, and it is important for the service provider to be aware of and address them.

Joanie Mann Bunny FeetMake Sense?

J

IDG News Service — SAP has significantly improved the security of its products over the past few years but many of its customers are negligent with their deployments, which exposes them to potential attacks that could cripple their businesses, according to security researchers.

The biggest issue is that companies expose insecure SAP services to the Internet — not only HTTP services, but also critical administrative interfaces, Alexander Polyakov, chief technology officer at ERPScan, a developer of security monitoring products for SAP systems, said Tuesday.

Between 5 percent and 10 percent of companies that use SAP products expose critical services to the Internet that shouldn’t be publicly accessible, Polyakov said. This happens because they want to enable remote management or because of improper configurations, he said.

Most of the services have vulnerabilities that can be easily attacked, Polyakov said.

Publicly available exploits exist for many SAP vulnerabilities, including some that are part of Metasploit, a popular security testing tool.

The percentage of companies with exposed SAP services differs from country to country. The situation is better in North America and Europe and worse in the Asia-Pacific region, Africa and Latin America, Polyakov said. However, even 5 percent translates to a very large number of companies, he said.

via Many Companies Are Negligent About SAP Security, Researchers Say – CIO.com.