Skip to main content

Need for IT governance

Need for Cloud Governance

Ever since cloud technology has turned into a mainstream IT resource, security and compliance have been its major issues. Not every cloud deployment sees success, and not every cloud project yields the desired results for its organisation. However, most IT decision makers have come to terms with the fact that when coupled with the right tools and strategies, cloud usage can surpass the security offered by in-house legacy applications and emerge as a true game changer. Cloud governance plays a vital role in this capability. By implementing cloud governance, organisations can avoid the following issues:
• Security and privacy risks: Which may arise due to unauthorised downloads/ installation of software, storage of illegal data and access to restricted sites by users.
• Vendor lock-in: Many vendors opt for this, as this clause causes organisations to depend on the cloud service provider (or vendor) for products and services. The clause is usually made part of the agreement, and as a result, it does not the organisations to bring in another vendor to work on different modules for a specific period of time. This can be avoided by making changes to the SLA suitably and reduce dependencies on a single vendor, thus ensuring freedom to the organisation.
• Cloud Sprawl: Happens when employees of different departments use different programs and cloud infrastructure from third party providers without involving the IT department and getting necessary approvals. Employees usually utilise free cloud services like Google Drive, Dropbox etc. for many of their official work as it is free and there are not much of approvals required. If not detected and restricted, crowd sprawl may lead to fragmented, redundant, inefficient and unmanaged cloud programs sitting on the enterprise cloud and unnecessarily creating trouble.
• Shadow IT and unwarranted usage of cloud resources: Happens when employees in various departments do not follow the rules and regulations as imposed by the IT department on cloud usage resulting in security breach and fragmented control throughout the organisation. This leads to not getting sufficient results from the cloud in the long run.
• Lack of data portability and interoperability: Happens when the cloud service provider or the inbuilt cloud infrastructure is incapable of connecting well with other Introduction to software and products outside the organisation. This may also lead to modules not compatible with each other and hence chaos in the cloud due to inefficient system.

Comments

Popular posts from this blog

The Seven-Step Model of Migration

Irrespective of the migration approach adopted, the Seven-step Model of Cloud Migration creates a more rational point of view towards the migration process and offers the ability to imbibe several best practices throughout the journey Step 1: Assess Cloud migration assessments are conducted to understand the complexities in the migration process at the code, design and architectural levels. The investment and the recurring costs are also evaluated along with gauging the tools, test cases, functionalities and other features related to the configuration. Step 2: Isolate The applications to be migrated to the cloud from the internal data center are freed of dependencies pertaining to the environment and the existing system. This step cuts a clearer picture about the complexity of the migration process. Step 3: Map Most organisations hold a detailed mapping of their environment with all the systems and applications. This information can be used to distinguish between the ...

Cloud Computing architecture

Cloud computing architecture refers to all components and sub-components that together form the structure of the cloud computing system. This architecture can be divided into three parts for better understanding – front end, back end and middleware. Each part of the cloud architecture has its own set of functionalities and protocols that work together to deliver on-demand services to user-facing hardware as well as software. In general, the architecture is evolved out of large distributed network applications over the last two decades. Hence it supports any system where resources can be pooled and partitioned as required. The general cloud architecture is capable of running multiple software applications running on multiple virtual hardware in multiple locations to efficiently render on-demand services to the users. The users could be using these software applications from their desktop or laptop or mobile or tablets. Usually, whatever the user is looking at – through t...

connection oriented

connection-oriented:- connection-oriented  describes a means of transmitting data in which the devices at the end points use a preliminary  protocol  to establish an end-to-end connection before any data is sent. Connection-oriented protocol service is sometimes called a "reliable" network service, because it guarantees that data will arrive in the proper sequence. Transmission Control Protocol ( TCP ) is a connection-oriented protocol. For connection-oriented communications, each end point must be able to transmit so that it can communicate. The alternative to connection-oriented transmission is the  connection-less  approach, in which data is sent from one end point to another without prior arrangement. Connection-less protocols are usually described as  stateless  because the end points have no protocol-defined way to remember where they are in a "conversation" of message exchanges. Because they can keep track of a conversation, connection-or...

tag