Some Think Cloud Security Superior to In-house Data Centers



For some in-house data centers,
the data horse has already left the barn!

Randy Davis, VP eGistics

I just attended a panel discussion Webinar titled, "Ready for Cloud Storage? Key Considerations and Lessons Learned,"  hosted by SNIA, Cloud Storage Initiative.

The panel included Kipp Bertke, Manager of Infrastructure & Operations at Ohio Department of Developmental Disabilities; Ajay Chandramouly, Cloud & Data Center Industry Engagement Manager at Intel; and Nathan McBride, Executive Director of IT at AMAG Pharmaceuticals.

The discussion was meaty and substantial (you can find it here: http://www.brighttalk.com/webcast/679/27865), but the comments by McBride were downright breathtaking. I would say that he and I had been reading the same articles, but his comments were based on hard-earned experience rather than ivory-tower theorizing.

I was so impressed with his views that I am going to quote him as best I can, and quite extensively, in this blog entry.

The following comments from McBride are in response to my question, "Are cloud security concerns qualitatively different than those for on-premise solutions?" Although the question was misinterpreted to mean security differences between public and private clouds, rather than between cloud solutions and in-house (non-cloud) solutions, McBride's answer was spot on.

“Security is always a concern of mine. It brings me to questions I have to ask myself, and they are 'What is the best possible data center I could build? What’s the most amount of security I could put into it, and how much would that cost me?' I realized that the cloud storage vendors I selected had spent five times that much, or a hundred times that much, to build their data center. So there’s nothing I can do that would even come close to the security offered by my vendor for a low service cost.”

Then he addresses the trust issue head on. Can you trust cloud storage service providers?

"People say, 'Well, what about the people at the data center that is hosting your data? Do you trust them?' Well, I trust them just as much as I trust my own IT employees. The only way you can ever be secure is to remove people. Since I can’t remove people from the equation, I have to trust that at a certain level the companies I want to do business with want to keep doing business with their customers, so they’re going to employ best methods, best practices, and the best people to manage my data. And I don’t just trust that. I also verify through SAS70 certifications, on site audits, things like that. But I do feel comfortable and secure knowing that the companies we are doing business with have employed security practices that far exceed anything I could manage to put together."

McBride went on to discuss some of the data leaks common to in-house data centers, things like non-secured flash drives, data that is copied to dozens or hundreds of PC hard drives, data sent to casual, personally controlled file storage services such as Sky Drive and Google Docs, and so on. His point is that you have to consider the real risks, costs and vulnerabilities of in-house data center management, and realize that, for most companies, it's no Fort Knox for data. On the other hand some cloud storage service providers have gotten real close to Fort Knox-like security.

This Webinar is worth your listen.

Too Small to Succeed at Electronic Document Management

One Size Fits All?

Randy Davis, Vice President Sales and Marketing Operations

We've heard it ourselves in talking to prospects: "We're too small to benefit from an electronic document management (EDM) solution." Sometimes the prospect means "we don't process enough paper in a month," or "we don't have the technical staff to implement and support an EDM solution."

Whatever the reason, experience shows that "too small" may not be a good excuse to keep from making the move. The document management "suit" is not "one size fits all."

Consider this:

According to Ken Neal, a Certified Enterprise Content Management Practitioner and Director of Corporate Communications, for Océ Business Services, "In a recent industry survey, senior executives involved in document management indicated that document scanning has a high impact across the greatest range of business goals that include reducing costs, increasing competitive advantage, enhancing regulatory compliance, and improving customer service."

Benefits
In fact, scanning paper into a document management solution can provide even small companies with hard benefits (reduced paper storage and management costs, improved service, compliance and audit support, disaster recovery) and soft benefits (competitive advantage).

A compilation of studies* (including Gartner) put together by Formstack.com lists the following as making Cloud services, including document management, appealing to small business. Cloud services are mainly:

1. Affordable
2. Accessible
3. Usable

* (Thanks to Rachel Delacour of Bime Analytics for pointing out this "Infographic")

Considerations
Here are some things to consider if you think your office is too small:

1. Are you storing paper records on premise? If so, can you find needed records in seconds? Are documents safe from prying eyes or unauthorized removal? How will those records be quickly replaced if they are lost or destroyed?
2. Are you paying to store documents? This includes preparation, the cost of storage, file folders/boxes, transportation, retrieval and duplication.
3. Does your office look like it could qualify for "America's most cluttered office"? Running a business is hard enough. It's just easier to run a profitable business and service your customers if you can find important documents quickly. Besides that, staff and customers alike associate a messy office with sloth and inefficiency. There's just something about decent organization that makes people feel better about where they work or do business.
4. Are you under legal or moral obligation to protect or retain records for years and prove that you are doing so?

Counting the Cost
I will be frank here. Scanning documents and storing them in an electronic document management solution is not without up-front and on-going effort and cost. It's not a magic bullet. You may have to buy one or more scanners. You may need to create a barcode-based document identification system to help automate filing (this is easier than you may think). You may need to create a different (and better) process to capture, route, authorize and store documents. You may need to train someone how to use a PC.

The question that only you can answer is, "Will my business and staff benefit from changing the way we do things now?"

Eyes Wide Open
If you think that is possible, taking advantage of an electronic document management solution can go easier if you go in with your eyes wide open and after doing some homework.

Dan Antion, vice president of information services for American Nuclear Insurers, shares "8 Secrets of an Effective Content or Records Management Implementation":

1. You are not too small for Document Management.
2. Document Management offers value beyond the obvious.
3. Document Management is not a technology project.
4. Management support is required.
5. Document Management includes costs that are not obvious. [Scanners? Training?]
6. Document Management technology doesn’t have to be expensive.
7. Education is important and available.
8. All vendors are not created equal.

(Dan's full discussion can be found at AIIM.org's Digital Landfill, dated June 23, 2009.)

Call to Action
If you are a small business, hopefully this has given you a few things to consider on your way to a more efficient office. Start today the first step of evaluating your document management processes. At worst, you may discover some ways to make your existing processes better. At best, you may find that electronic document management can help you run a better business and prepare for the growing demands of instantly accessible digital information.

Do you think a company can be too small to use EDM? Share your comments.

(If you find these discussions interesting, please take time to Follow this blog. Also, consider following us on Twitter: twitter.com/eGistics or tweet us @egistics. Thanks!)

Losing Electronic Documents? You’ve Got to Be Kidding!

By Nathan Khani, CloudDocs Solution Specialist

A report in USA Today (May 18, 2011) included this shocking finding: “The average worker wastes 2.5 hours per week looking for documents missing in poorly organized electronic files.” Wait a minute. I thought that electronic filing systems were supposed to solve the problem of losing files. Now we learn that even a small office of, say, five people wastes more than a day and a half of productivity each week looking for electronically filed documents. What gives?

Here’s my thought. Electronic filing systems do not inherently solve the problem of finding files if they allow for disorganized filing methods. Worse, some document management systems actually encourage poor document filing practices. Wasted time is either a direct result of the disorganized use of electronic filing, or of electronic filing systems that are prone to disorganization.

What do I mean by disorganized electronic filing? This. If you use an electronic filing system much the same way you use a paper filing system, you will experience the same challenges in finding documents. Filing systems based on Folders, file names, keywords, and text searches are simply not optimized for finding documents quickly. Such systems rely too much on ad hoc naming conventions, free-form keywords, and knowledge of filing method best practices.

When it comes to storing and finding documents, too much flexibility and freedom can lead directly to disorganization. File management systems also depend too much on where a document is stored rather than on characteristics that make a document findable. Look. We’re not talking about storing your photos, videos, favorite recipes, old high school English papers, or music. We’re talking about documents you use to run your business. The fact is that good electronic document management requires good old fashioned standards, a bit of departmental discipline, and a document management solution that encourages and supports both.

That’s why it’s important for an organization to used electronic business document management solutions that are designed to relieve you of the burden of organizing documents by folder and file name. Such solutions are often called “structured” document management solutions, and they utilize index data to find stored documents in a way that is predictable and fast. In a structured document management system you can literally scan or upload a document, index it (manually or automatically), and forget about it until it’s time to find it or use it as part of a business process or workflow. Then, by using one or more configurable, standardized index fields, you can almost instantly find the document or documents you need. Such systems reduce the complexity of filing and (almost) guarantee that you can find the documents you need when you need them.

We would love to hear any tips or advice you may have regarding organizing your electronic files. Please share your thoughts below!