BUSINESS RISK AND THE CLOUD START WITH MAKING CLOUD LESS CLOUDY © 2013 deRisk the Cloud / Beyond

Buzzwords Blurred © 2013 deRisk the Cloud / Beyond

ApplicationsAnywhere Information & Intelligence Communicated & Protected Cloud delivers: © 2013 deRisk the Cloud / Beyond

Revenues UpCosts Down Growth Enabled Brand Enhanced The Silver Lining (Business) © 2013 deRisk the Cloud / Beyond

Revenues UpCosts Down Growth Enabled Brand Enhanced Behind the Business Silver Lining' Reliable, Available Secure Functional, Interoperable Delivered, now, at a lower cost © 2013 deRisk the Cloud / Beyond

the Common Denominators … and the Usual Suspects © 2013 deRisk the Cloud / Beyond

Reliable, Manageable Reduced & Controlled Costs Barriers Removed (Securely) Network as Critical Enabler The Silver Lining (Technology) © 2013 deRisk the Cloud / Beyond

Reduced & Controlled Costs Barriers Removed (Securely) Network as Critical Enabler Reliable Manageable Scalable Behind the Technology Silver Lining AvailableAccessible SecureFunctional © 2013 deRisk the Cloud / Beyond

RISK is a 4 Letter Word With Critical Touch-points Across the Business © 2013 deRisk the Cloud / Beyond

Pre-Cloud Planning Questions Are your requirements and targets clear and understood? What cloud services do you need; Which are you already using? For legacy moves or replacements, are migration plans in place? What is the track record and customer base of the provider? Where are their data centres / where will your data reside? What tier level Data Centre service am I getting? Can I speak with a current customer reference; Can I speak with a customer who has exitied? On the subject of data, who owns it and controls it, legally and contractually? How and where are Backups and Restores administered and managed? How do I go about administering, managing and controlling my databases? Tell me about your networks and the technology behind your cloud Do you deliver over a resilient, diverse network? Who is providing your network services? What type of kit are you running on; Can I see your technology roadmap? Tell me about your approach to and offers in the Security space What security policies and controls are delivered as standard? In the event of a security breach, who will I be speaking with: you or a third-party provider? Tell me about your support model for my business users, technical users and developers Are your staff based in the UK or will they be accessing my system and data from other countries? Will we have an account manager and, if yes, what does that mean? Tell me about exiting How do I get my data back to change suppliers should a better answer become available? What are the mechanisms to ensure a cost effective repatriation of applications and data (to either another provider or back into my own data centre); what are the costs and timings of such decommissioning? And on to the Contract: What is the term; Are there exit penalties? Up-front v. long term costs-to-scale hidden costs around storage, memory and core upgrades, data transfer, ongoing backup and archiving What are the service levels / What happens if my systems are unavailable? In such an eventuality, with whom will I be speaking: you or a third party? What should we expect if it doesnt all go to plan, either on the way in or once we are there? This is only a preliminary Set of questions! © 2013 deRisk the Cloud / Beyond

The Key Risks on the Way to the Cloud Incomplete Definition of Requirements Lack of thorough Planning Lack of Clarity around Goals Lack of a cross-Business Model of Risk Lack of Organisational Commitment Cloud Provider Selection & Contract © 2013 deRisk the Cloud / Beyond

The Key Risks Once Youre There Data Security, Privacy and Ownership Application Interoperability and Compatibility Performance of Applications and Services (covering Networks, Processing, Collection and Storage) Developer and Administrator Access & Support Delivery to Service Levels / Systems Availability And, of course, Risks when Changing Providers © 2013 deRisk the Cloud / Beyond

The Key Mitigation(s) The right People The right choice of Partner Defined, Communicated Clear goals The Plan and the Budget And a closer look… from all angles! © 2013 deRisk the Cloud / Beyond