Place image here INFORMATION MANAGEMENT Cloud Computing and Enterprise Information Management March 2010 Jim Cuff VP Strategy, Iron Mountain Digital

2 Agenda The Enterprise Cloud (& who it’s for) The Cloud as a reality TV show Iron Mountain Business Overview Meeting your obligations in the cloud

3 Global Leader in Information Management Services $3B of revenues –Records Management –Data Protection & Recovery –Digital Archiving –Information Destruction Reduce the costs and risks of information protection & storage – since 1951 –Broad portfolio of services –Global service footprint

4 Cloud Computing: The Promised Land

5 Not All Clouds are the Same Cloud 1.0 Cloud 2.0 The Iron Mountain Enterprise Cloud Security, Accessibility, Privacy, Retention, Recoverability, Destruction, eDiscovery Experience, Expertise, Trusted Vendor

Do you know where your cloud is?

7 THE CLOUD: REAL WORLD EXAMPLES

8 Selected Cloud Deployments Global Company, Fortune 500 Problem: Large global/mobile population (over 80K seats) with multiple locations, need for eDiscovery on PST files Solution: Connected Large state agency Problem: Looking to maximize data backup compliance as it relates to legal evidence Solution: Virtual Files Store Large financial investment firm Problem: Reduce complexity and risk Solution: Stratify Legal Discovery Service

9 Examples: “Non Cloud” -Financial Services Firm: Exchange Hosting “in the cloud”; archive “on premise” -Large Aerospace Company: Several large sites, investing in internal IT capabilities, want internal control over PC data -Health Information Services Company: Looking to offer their own cloud services. May move from the cloud, to their own cloud

10 MEETING YOUR OBLIGATIONS IN THE CLOUD – EXPANDING THE CHECKLIST

11 Discovery – Your Obligations are the Same (but operations are out of your direct control) -The requirement to produce relevant information does not change based on your technology choice -Is discovery even a service option? -Who will know? -Other questions: - Will returned data meet evidentiary requirements - Staff, resources, & capability to meet your needs (even if it is an uplift to your current SLA) -Is your cloud solution still “massively scalable” & “self – provisioning”

12 HOLD – How hard is it to do? -Is there some method to effectively implement a hold? -Strategies: - Hold ALL - Migrate potentially responsive information out of the system -Other Questions: - Can a “continuous hold” be placed? - What is the process to remove a hold? - Can more than one hold be placed at a time?

13 Retention and Destruction -Is there a process for “orderly destruction”? - Retention schedule support - Applying record classes to items - Destruction workflow - Audit records / proof of process? -Potential work-arounds: - If a single record type is involved in a solution, the “cloud” may not need to learn RM (just deletion) - Move declared records out of the system and treat the system as an operational system

14 Other Topics to consider -Audit obligations need to be supported (and scale internal to your organization) -Your data profile – do you know what you have? -Cloud consolidation & shake out -Are there cloud providers for your cloud provider?

15 Cloud: Use the right tool for the job Thanks - Jim Cuff