Penny For Your Thoughts But Not Your Services - IMRAN™

Some photographer posted in a FaceBook group about a model hurting their feelings by saying the photos they took (including location, hair, makeup) weren't worth more than $10 each. I think a dozen people commented on that post. 

As I clicked to post my response on the original post it disappeared. Maybe the original poster deleted their post. I'm just sharing my "comment" here for everyone, as there will always be unappreciative and ungrateful clients in every field. 

I wrote: "Most people do not appreciate intangible expertise or subtle specialization or soft services nor put real monetary value on it. 

They'll pay a plumber $200 for fixing a $100 leaky toilet but will have a heart attack paying $300 for cloud & technology or management consulting advice they hit you up for regarding their million dollar business.  

I haven't seen the work the original poster did but assuming it was well done I'd say, go with the attitude, "Yes, the photos were worth just $10 each because the ungrateful model wasn't worth more. 😋"

😋

What Workloads Should Or Shouldn't Move To The Cloud? - IMRAN

Forget Public, Private & Hybrid, It Is Time To Reclassify Cloud Classifications

In my life is a private consultant to large clients and later also as an enterprise architect at the world's best software company in my day job, I have been trying to explain to people why Private/Public/Hybrid is not fully accurate in terms of Cloud classifications. (I am not even talking about Community Cloud in this post).

My position on Cloud is that we have Public, Private (including Hosted Private). and two more... What everyone calls Hybrid is what I say really should be called Parallel, and Hybrid should be the name given to a separate type.

By Parallel I am referring to companies using Private cloud for some functions, and Public cloud for other applications. There is likely no interaction between the two. The overall benefit is a compromise between the best of both Public and Private, in a sort of "weighted average" way.

What we SHOULD be calling Hybrid would be the case of enterprise architectures that span public and private clouds for one or a set of interoperating or integrated business applications. For example, if a firm uses private cloud for running its mission critical business application, but that application seamlessly also moves specific parts of its workload to and from a public cloud. Here is a rudimentary example. A stock trading firm uses its own high performance trading applications on its own private cloud platform.  But the private cloud hosted apps ship some parts of their work, e.g. less time critical analysis of large data sets, to a public cloud big data crunching services provider.

You can see that this has far deeper integration between private and public cloud uses and is clearly different from a company running all mission critical applications on a private cloud but, say, simply using outlook.com or gmail for business email. The latter is a good use of Parallel cloud computing.

No Interest In Exploring This Frontier Of Lousy Internet Customer Service - IMRAN™

Love The Cloud With No Limits, But Know Your Limits!

I just read an article on Forbes' site where the writer correctly argued that despite the cost of cloud storage being nearly zero (who can compete with "Free!" ?) he likes to use personal networked storage at home for his data.

I agree with the points he makes about why using personal storage is still the better option versus cloud storage. But I disagree on the use of Network Attached Storage at home. No matter what device I have tried, no NAS at home comes close to the speed of a Thunderbolt, Firewire or USB3 external hard drive when doing regular and incremental backups of my Macs and MacBook Pros, as I do.

Coincidentally, one of the biggest problems I have with cloud storage is that despite buying cool utilities like ExpanDrive. which mount my Google, Box, DropBox OneDrive, FTP and other cloud storage on my Macs's desktops as local drives, none of them is writable from backup apps like Carbon Copy Cloner or Time Machine.

Additionally, the time it would take for my backups to complete even over my 75/75Mbps connections is another huge deterrent.

I personally carry 2 portable drives (one ThunderBolt and one USB3) with my laptops when I travel, while having multiple clones and Time Machine backups at both homes in NY and FL. Each is obviously encrypted with the highest level security, or I would be trading reliable backup with high risk of theft.

No matter what you do and what type of data you have, whether on a phone or a computer, you MUST backup your data, if you value your time, and your data. As Clint Eastwood would say, A man's gotta know his limits. So does a woman.

Can you afford to lose all the data on your device? Pictures? Messages? Emails? Contacts? How much spare time did God give you that you'd want to take on the burden of re-gathering all the contacts you have? And what about the photos? You do have them backed up somewhere, right?

Don't tell me you are relying on FaceBook as your personal album storage? What if someone hacks your account and deletes all your albums? Even worse, what if the FB policy Nazis don't like something you post and delete your account?

By the way, did you know that FaceBook turns your gorgeous 1-15MB photos taken with anything from a cell phone to a fancy camera into pure-crap-minimum-tolerable-quality 72 dpi files of merely 100-200KB? Good luck printing those if you ever want to in the future. Even a USB stick or two are so cheap these days. Not using at least a Thumb Drive is Dumb!

At the very least use something like Flickr, that stores the images at full size and gives you 1TB free. But check your security settings so none of your private photos become public. (Well, it is OK to give me access to see them. Purely for my giving you security advice of course. LOL).

Finally, remember, One is never enough, and as I also always say, Once Every Night isn't enough either. :-) I learned a long time ago that when a laptop drive dies, it will happen on the same day an external backup drive will also die ...and the backup of the backup will be unmountable on that same day. ;-)

So, backup on more than one system (external drive, thumb drive, CD/DVD/Blu Ray, cloud), with more than one method (data only, full clone, incremental timestamped backups), in more than one place (your home, your parents' home, across the country).

One day (or night) you will thank me for it!

Imran Anwar
Love The Unlimited Cloud, But Within Limits!™
Cloud 9 Global Inc.
IMRAN.TV

To Achieve Greatness In The Digital World, Respect Intellectual Property & Innovate, Or Be Irrelevant! - IMRAN™

The article (Tech In Pakistan 2014) in the reputable Pakistan newspaper, Dawn, makes good points lamenting the mind numbingly stupid, and self-destructive, policies and factors that make for such “tepid performance” in Pakistan. The author, Y. Brohi, points out how one does not need an army of people to launch a startup. My personal experience proved that, indeed, even one person can start a revolution or entire industries for others to build on.

At the end of the eighties and in the early 1990s, I was fortunate and blessed to pioneer and launch Internet email service in Pakistan right from my home in Gulberg-III, Lahore, while I was studying for my MBA at Columbia University Graduate School of Business in New York City. Together we, my then partner & neighbor Ashar Nisar and I, were able to launch the .PK ccTLD, literally putting Pakistan on the brave new digital world’s map.

I later also had the opportunity to make another, less known but also important, humble contribution to Pakistan’s economic progress, by bringing and launching global credit cards in Pakistan, starting with issuing the first MasterCard license to a Pakistani bank in the early 90s. The availability of credit to the middle class can be a major driver to drive economic activity and the creation of products, services and related jobs.

Both of those industries were launched with no government funding (actually, we succeeded despite resistance and other tactics of the authorities of that time that I will not mention), and without venture capital, which at that time was near impossible to get in Pakistan.

My reason for writing this is not to boast on past achievements but to exhort the dynamic and industrious Pakistani entrepreneurs to learn from what the article says and what my experience shows.

You, one person, can start anything you want. There is nothing stopping the next secure identity and privacy solution to be created in Pakistan. There is no reason that Pakistanis cannot pioneer artificial intelligence or secure cloud computing methods.

If there is one thing that I have been frustrated by, and feel is a core reason for Pakistanis not creating world changing new things, is the disregard for intellectual property rights and concepts. From people ripping DVD movies to kids ripping games without payment, to the shameless way so-called respectable newspapers (excluding Dawn) steal and reprint others’ creative output, theft of intellectual property is commonplace, and something people almost boast about.

How then can people think in terms of creating intellectual property if they are themselves busy stealing someone else's? That attitude is embedded in our culture and needs to be addressed. Without that, all the creative capabilities of Pakistanis will continue to be wasted on copying or reverse engineering others’ work, not creating brave new IP to change the world. 

I would love to see that topic get discussed at a national level. There are few nations that have so much creative entrepreneurial talent than Pakistan, as I have seen in my ~30 years of traveling the world.

Let us find ways to stimulate that and channel that and guide that for the greater good of the creators and the nation. That is why, in speaking to groups of Pakistani entrepreneurs and technology professionals, I say, “To Achieve Greatness In A Digital World, Respect Intellectual Property And Innovate With Your Own, Or Be Irrelevant!”

 

IMRAN™
http://imran.pk

TRANSLATE with x

English

Arabic	Hebrew	Polish
Bulgarian	Hindi	Portuguese
Catalan	Hmong Daw	Romanian
Chinese Simplified	Hungarian	Russian
Chinese Traditional	Indonesian	Slovak
Czech	Italian	Slovenian
Danish	Japanese	Spanish
Dutch	Klingon	Swedish
English	Korean	Thai
Estonian	Latvian	Turkish
Finnish	Lithuanian	Ukrainian
French	Malay	Urdu
German	Maltese	Vietnamese
Greek	Norwegian	Welsh
Haitian Creole	Persian

TRANSLATE with

COPY THE URL BELOW

Back

EMBED THE SNIPPET BELOW IN YOUR SITE

Enable collaborative features and customize widget: Bing Webmaster Portal

Back

CURES For Security Challenges In Cloud, Crowd, Big Data And The Big Bad World

An industry colleague and fellow blogger/journalist Mary Jander wrote an interesting article, "Security May Be Too Big a Job for IT" on Internet Evolution. It was a thought provoking post. Though I only see two comments on it at the time of writing this article, I am, for someone often taking contrarian views, quite in agreement with both Kim Davis and smkinoshita who wrote comments there. They talked about collaboration, and where the role of Security in an organization should lie.

With the advent of Cloud Computing, and more and more use of public, hybrid and public cloud converged infrastructures, one of the questions I am asked most often is, "Oh, is the cloud secure?"

Ironically, this is common between a housewife sitting on a flight next to me and a CEO that I may be advising.

"Nothing is secure, unless you make it a collaborative business of everyone in the enterprise to make it so," is what I, sometimes to their chagrin, bluntly tell them.

The problem is how Cloud Security, IT Security, Information Security, Data Security, Premises Security, Perimeter Security, XYZ Security, are still almost islands of imagined security unto themselves. This is not so much a technical limitation as an issue of three major distinct issues.

The first is due to enterprise architectures designed for the last century, or at best, for the last decade.

The second is the human element of doing management by dividing large entities into smaller pieces for easier management. That works great for operations, project management, etc. but is a terrible approach to security.

The third is a lack of collaboration (and integration) where it counts (end-to-end enterprise security) while organizational leaders patting themselves on the back for having rolled out some collaboration platform for sharing Word documents and Excel files.

This problem is not new. It goes back decades.

In 1999, as CEO of EverTrac, a pioneer of location-aware mobile information management & security, I was privileged to speak to top leaders at the United States Space & Missile Defense Command (I still get goosebumps at that name :-) and tell people to envisage Crystal Palace in one of my favorite childhood movies, War Games) at an Undisclosed Location in Alabama :-) .

But, excitement aside, I was surprised (and seriously concerned) when they were surprised at my saying they had to worry more about the information than about how to secure the servers and data centers, as they were focused on.

Even more, I said, they had to start thinking in terms of erasing boundaries between security departments -- not just in IT but even with and within non-IT. At the level of criical importance their Star Wars program was (and the nature of information today must be even more important and the threats even more nefarious and multifarious), not only would there be attempts, I said, to break in over the network, but physically, as well as various combinations.

The advent of mobile devices, global networks, hacking tools, complicated systems with often un-patched vulnerabilities, managed by people either lacking or not interested in keeping up with the latest iterations of technology and security challenges and solutions, all touching the cloud, make for an explosive mixture.

Even in 1999, I declared to my audience that these problems had CURES™.

 

I said Collaborative Unified Realtime Enterprise Security (collaboration was not yet a buzzword then) would be key to solving the problem before it became intractable. Sadly, 12-13 years later, even the top companies in private sector high information value businesses do not get it.

 

I continue to highlight this even more vociferously the more our lives generate, use, and are governed by, floods of big data, accessible to crowds large and small, all in a cloud with nebulous threats and security capabilities. I am glad others are taking up this serious problem.

 

Together, we can find the CURES!

 

Technorati Tags: Cloud, Cloud Computing, Security, Technology, Data, Space, Star Wars

 

Let's Talk TV: How The Post-PC Era Enables Mac/PC To Dominate The Post-TV Era

I read an article in InfoWorld about the evolutionary paths of Apple's iOS and OS X operating systems. The more I thought about it, the more I became convinced that the next evolution of these operating systems is also an incredible opportunity for a parallel paradigm shift -- from a newly emerging Post-PC to a Post-TV era. Here's why.

In my opinion, there are many different options open to Apple, in what strategy to follow. That also means several options for the technology industry in general to contemplate, rather than wait for Apple's moves and then trying to play catch up.

It would make perfect sense to see these "two" Apple operating systems (both with similar underpinnings) follow the typical development path -- of launching bare essential features, adding features, improving usability, improving performance, and then bringing in new features to start the cycle over again.

In this next decade, all this will be happening in an area not just of convergence in the technology arena (from cloud computing for consumers and converged infrastructure data centers for corporations), but also the form and factor areas of consumer & technology products; the convergence of entertainment & communications; and melding of the time we spend living, working & playing.

Image via Wikipedia
We had laptops/desktops, and we had smartphones/iPhones. Then came the late Steve Jobs' iPad. Even as a Mac and Apple fan from it's launch as a company, a platform, and a way of life, I was not certain how big a market iPad would find. It went on to create a whole new market category.

More people increasingly expect to be able to do everything they can do on a laptop now on their iPad and even iPhone in many cases. And the reverse of that is an increasing expectation too. People want user interface, display quality, and app features from the mobile platform to be fit where appropriate on the desktop/laptop, the PC that is.

We can easily imagine retina quality laptop displays (requiring higher resolution handing in the computer OS), touch interfaces, etc. making their way into laptops and desktops.

By the very nature of us living in an increasingly mobile world, the lower price point for cell phones versus laptops, the greater convenience of tablets than carrying laptops, etc. we can obviously continue the market share of handheld mobile devices to grow over even increasingly 'mobile' wireless connected laptops.

But, much that I agree with Steve Jobs' contention that we live in a Post-PC age, it does not, at least in my opinion, mean the end of the PC. Instead, it is my contention that there is a huge opportunity for laptop (and desktop) makers to avoid becoming the platform that dies out and instead to make it the coming second age of the PC.

At the very least they can build in 3D, much more powerful iterations of Siri-like (voice recognition and context driven intelligent assistant) logic on board, rather than requiring an internet connection as the iPhone 4S version requires. These are just some of the features they can add, but they also have a huge opportunity to pull a side-slide instead of being left behind in a paradigm shift.

Everyone agrees that the TV industry is ripe for massive change - one that even Apple and Steve Jobs failed to truly deliver on with AppleTV.

Image via CrunchBaseWith the visionary, one-man-industryial-revoltion-creator, Steve Jobs, gone, Apple has a chance to deliver on this vision. At the same time, competitors, from Sony to Samsung, Mitsubishi to Microsoft, Goldstar to Google, all have an opportunity to remake an industry and remake themselves. As a bonus, they could prove Steve Jobs wrong on his Post-PC contention.

Let mobile devices with cloud connectivity increasingly make Personal Computers less important for "Computing". Instead, make PCs drive the TV experience that industry and society are ready for, even though they don't know it.

Here is just one small bit of how I see this near-term future... [Long 'Vision' Sentence Alert].

The ability to have the same device intelligently streaming exactly the programs we want to see on our big screen, the ads we are less likely to scream at, an ability to click a micropayment to skip a commercial at a particular cliffhanger moment, an ability to click our Likes or + on shows, specific scenes, even product placements, or characters, all while working on a video our 1080p iPhone or smartphone recorded that day, being edited in iMovie, automatically shared in the cloud, and onto new services that enable friends and fans to show appreciation (or make micro-payments) for our masterpieces, with built-in mechanisms for leading channels to track popularity of our creations on the fly in dynamic new content marketplaces, and bidding on them in real time, so they get added to their programming catalogs and we get paid... all while watching House on any TV in the house.

Welcome to the Post-TV PC/Mac. It is time for your company and you to think of Mobile representing the Post-PC world -- with a parallel universe emerging, where the [PC/Mac/Your Product] is the hub of the Post-TV era.

Tech, television and electronics company leaders... Do touch that dial. Let's change the channel(s).

What do you think? Have your people call my people. Let's Talk TV™.


© 2011 Imran Anwar
IMRAN.TV

Technorati Tags: Apple, Cloud, Cloud Computing, Google, IMRAN, Imran Anwar, Steve Jobs, Television, TV, iPad, iPod, Mac, OS X, iOS, AppleTV, Microsoft, Samsung, Sony, Mitsubishi

Question The Tough Questions To Ask In Cloud Computing

I am on record as suggesting that tough questions need to be asked by everyone (including clients, media AND vendors) before jumping on the Cloud Computing bandwagon. (See http://www.youtube.com/watch?v=uYl-tzTHtQk which I recorded even before having a day job at the leading Cloud Computing Converged Infrastructure vendor.)

I read a recent article, Some tough questions you need to ask your cloud provider,  by Rutrell Yasin. It is in the respected GCN (Government Computer News), a publication I also recall being interviewed by in the past. That was during my days of being CEO, EverTrac, the pioneer in location-aware eBusiness solutions, including tracking people and assets, indoors and outdoors, in the late 1990s.

In it, the writer quotes Wolf Tombe, chief technology officer within the Customs and Border Protection’s Office of Information Technology. I am certain Mr. Tombe is far smarter, more experienced and clout-carrying in government, technology, and probably even Cloud Computing circles than I am.

But, I also respectfully disagree with his contention that some applications are "easy wins moving to the cloud, such as e-mail and collaboration tools".

If "easy" refers to how quickly and conveniently an app can be deployed onto a cloud or converged infrastructure, then I would say, most apps, whether email, or ISV created vertical solutions, can be migrated with reasonable convenience and the expected amount of work.

If the contention is that somehow email and collaboration are no brainers to put in the public cloud, I strongly disagree.

I think that is over simplistic and dangerous. What apps are no-brainers to move to the public cloud should depend on the mission-critical or sensitive nature of the data or functionality in the app, not what the app itself is.

For example, even the simple email and internal discussion files of a nuclear weapons design agency with just 100 people would be far more critical to protect than, say, all the accounting data of a widget making company with 5000 employees.

So, as I have said before, tough questions need to be asked... by clients, by media, and even by vendors. The stakes are too high, the opportunity for Cloud Computing to be a globally beneficial tool is too huge, and the threats too serious, for any of these elements to be glossed over.

Technorati Tags: Cloud, Cloud Computing, IMRAN, Imran Anwar, Security, Convergence, Converged Infrastructure, EverTrac, GPS

Microsoft's "All In" Journey "To The Cloud", Full Of Hot Air & All Out Of Gas OR Azure Blue Skies Ahead?

Kevin Murphy (a former CTO and now my colleague in an EMC/Cisco cloud computing joint venture) and I were discussing the so-called Cloud Computing "To The Cloud" campaign by Microsoft, just a few days ago.
Today I read an article by Jeff Kaplan, one of my fellow contributors to the very respected INTERNET EVOLUTION media site. Jeff's piece was titled: "What Microsoft's 'To the Cloud' Ads Really Promote".
He is right that the definition of Cloud can still be considered somewhat fluid. But, quite frankly, among actual cloud buyers and vendors, there is enough general understanding and agreement of it, that Microsoft's ads cannot use a vast, errrr, umbrella definition, where everything can be stuck with the Cloud tag.
I ask: If McDonald's burgers can be promoted by a coupon in an iPhone app, is suddenly Hamburger the latest "solution" going "to the cloud"?
I agree with Jeff about how various consumer-driven technology companies' (like Amazon, Apple) great success with cloud based solutions has been a huge driver for the corporate acceptance of the concept. Nothing in these Microsoft ads makes a Cloud Computing industry or corporate buyer think of Azure, their cloud platform offering, which I see having immense potential. So, one assumes the target audience for the ads is consumers.
I think Jeff gives too much credit to Microsoft, thanking them for giving everyday meaning to users to make cloud a tangible benefit providing service. But, that is counter to the already stated fact that Apple, Amazon, FaceBook, etc. were what even Salesforce's go-to-market approach was driven by. So, in that case, Microsoft is offering too little, too late for the consumer cloud services business.
Almost nothing I see in the Microsoft cloud ads shows anything that is a specific service or feature or offering or value added solution from Microsoft. Or something they are not already familiar with. That is why I think Microsoft is doing itself a great disservice.
But, that is typical of Microsoft. When you don't understand something well enough, try to confuse everyone else. Maybe it is not intentional in the case of cloud. At least Microsoft did not completely miss the boat and then try to jump on board trying to become skipper of the cloud ship, like Larry Elison of Oracle.
Even AT&T's decade-old ads of "putting your kid to bed from a world away...." and "the company that will bring it to you, AT&T..." clearly showed the vision, and their attempt to stake a claim in the then-budding network based services future. They were touchy feely, but showed specific use-cases in a not-so-distant future. And they showed how the telecom network (a primary business of AT&T at that time) would be the carrier of such services. Not that I would trust AT&T (that shows Call Failed on my iPhone far too many time, even in areas showing full signal strength!).
Microsoft's ads for Cloud are not as lame as the Windows 7 ads I could not stand, where a dweeb (I hope that is not a dirty word) walks around the house describing things in Windows 7 that were "his idea" — yet were doable in Macs and even Windows PCs for years. But they neither serve the business audience with a clear compelling story, nor show anything that consumers can't already do.
So, what do I make of these Microsoft ads? Even while I am working at a cloud computing vendor focusing on private cloud, I feel Microsoft has huge potential to be a strong force in Cloud Computing with its Azure platform. But, it seems for now they have not completely figured out what to do, and how to do it. In the meantime, the poor marketing folks likely are under pressure to do something, air something, that shows Microsoft is committed to the cloud. Sorry guys, hate the ads, but, I've been through similar situations as you probably are in.
Even as a frequent Windows critic, I have to say the company is getting much better. Windows 7 is the first Windows OS I purchased with my own money even to run on my VMware Fusion and Parallels emulators as virtual machines rather than XP that I already had. While I could not stop laughing at the Zune, I marvel at how amazing Xbox is as a platform -- and how far behind Microsoft current consumer gadgetry king Apple is on the TV front.
I can curse at PowerPoint but I bought and love having the latest versions of Office on my Macs and Windows machines. If Apple ever thinks it can make a real play for the enterprise, all Microsoft has to do is pull the plug on Office for Mac. And, much that I love my MacBook Pros, Macs and OS X, the first thing I insisted on deploying in my CIO role was Microsoft's SharePoint --- when even the PC using techies reporting to me did not think it was a good platform. It really goes to show that Microsoft is starting to get it, and hence will be a strong competitor to any current leader. Just give it two or three years.
But here is the downside that I think Microsoft needs to be aware of. In typical fashion like many big companies with shallow understanding of disruptive market forces but deep pockets, their ads annoy those who know what Cloud is about, confuse those who don't know what Cloud is, and just enrich TV channels and an ad agency — with touchy-feely ads which mean nothing, today, or in the future.
That is just In My Humble Opinion.

On Securely Making Cloudy Claims About Cloud Security

PC World reported on the speech by a former hacker known as MafiaBoy, who was arrested for lots of insidious activities. Now, he was a guest speaker, in Toronto, Canada, at a forum organized by a well-known Japanese storage vendor.

His contention was that Cloud Computing has serious security vulnerabilities and that Security is an afterthought among vendors.

I am certain the reformed hacker is a very, very, smart man. I am positive, no amount of security can be enough to ever guarantee perfection. However, the whole approach and message was a bit yawn-inducing for me. He was restating the obvious, wrapped in a bit of irresponsible FUD (fear, uncertainty, doubt), with a ribbon of future "I told you so" claims tying it up nicely.

That is like someone being arrested for throwing medical trash into a town's water tank, and then going on CNN or Fox News Channel to make a generalized claim, like, "There are serious vulnerabilities in our whole nation's public drinking water supply." That person can then sit back while people wonder if they should all be drinking bottled water only.

Some of the other contentions of people who like hearing that kind of message, commenting at the PC World site, were that Cloud Computing is nothing but Client Server with a new label. OK, if someone said Cloud Computing is sort of like On-Demand Computing — but with both the ON and the DEMAND parts kicked into high gear in the marketplace — I would have agreed a bit.

Yes, of course, many of the concepts of Cloud Computing are derived from the evolution of previous computer system architectures and paradigms. But, if Cloud Computing is exactly the same as Client-Server, then it is even more "same" as mainframes and dumb terminals of yester-century.

For the first time in modern history, the true power of the Internet can be harnessed by every one, and every business, at every level, for almost every function, with the same type of access previously only giant multinationals could afford.

Even with the Internet boom, the overall benefits to us, ordinary people, were limited in type and scope.

We could enjoy email accounts of our own. With a bit of web hosting, using $5 per month packages, we could put up web sites as slick as the biggest multinationals (whether someone ever visited our web sites or not).

But, we could not venture into scaling beyond those basic limits.

A company with 20 employees could not afford true ERP or CRM solutions. An art movie studio with 5 creators could not expect to take on a movie requiring 10,000 hours of rendering time, without their idea being passe' while their 5 PCs or Apple Macs chugged along for 5 years.

Now they can rent software as a service (SaaS), platform as a service (PaaS), or a ton of infrastructure as a service (IaaS) as and when they need, without needing a million Dollars budget.

These, and countless other, aspects of cloud computing are leveling the playing field for individuals and the smallest businesses, which no Client Server solution did.

The benefits big business are gaining from Cloud Computing are even more obvious. From hardware and software license cost savings, to energy savings, to better utilizing available resources with available headcount, reducing total cost of ownership for once without having to resort to the typical head count reductions of past years, are just a few. Quick provisioning of application development and test environments, in hours, affordably, and then spooling it down, are additional examples.

So, going back to our esteemed and honorable ex-hacker's contentions about Security, let's ask: Is Security important? No. It is not important, it is ESSENTIAL.

But, for anyone to say that Cloud vendors are thinking of security as an afterthought is absolutely ridiculous. It is even more silly posturing than politicians of all parties typically indulge in, with meaningless statements that raise their audiences' fear levels. Just recently I wrote a popular item, which discussed the Cloud Security Alliance's good work, especially in the area of enabling greater levels of governance, risk management and compliance in Cloud.

An important thing to keep in mind is that Next Generation Data Centers, with highly converged and virtualized infrastructures, are not being created out of thin air, with paper, glue and paint. They are being created by integrating, and hardening, existing parts of the solution stack - virtualization, network, compute, and storage.

None of these elements consists of some untested new gadget created in a lab by two geeks and their dog. Each element has industry leaders, and strong competitors. Each has its own security postures, needs and mechanisms. And, vendors who are putting together the entire vertical stack, either from in-house, or partner technologies, are all working to build additional wrappers of Security. Trusted Multi-Tenancy, authentication and access control, encryption of data at rest and in flight, are just some examples of additional wrappers being built around the "core-stack" and what is in the "box".

Is this all perfect? Of course not? But, even the most secure, non-cloud, current data centers of big corporations have shown how Security can be breached.

From millions of credit card numbers being stolen, to WikiLeaks, even when Security is the most talked about topic, e.g. in financial services, government, military, healthcare, etc., some "misguided" (read malicious) person can find a way into any system, or may already be inside the system (as an employee).

What is required is for people like the former hacker to specify examples of where they see major vulnerabilities, how they would fix them, or how they suggested the fix and some vendor(s) or clients did not listen. I will be happy to take him to industry leaders at industry leading companies even better known than the large firm he was a guest of.

But, then, he better have some specific risks and vulnerabilities identified, with specific recommendations and proposed solutions. Otherwise, there are plenty of people who can sit outside complaining about a "problem" without being part of a "solution." Who has got time for those.

What do you think vendors need to pay more attention to, immediately, to make Cloud Computing more secure?

===

Imran Anwar is founder of Internet email in Pakistan, co-founder and co-owner of the .PK ccTLD of Pakistan, and founder of the credit card industry there. As a New York based technology, cloud computing, strategy, marketing, media and business professional he is often seen and heard on global media like CNN, Fox News, Express TV, WWRL and many others. These are Imran's personal opinions and do not necessarily reflect those of any employer, parent company, client, family member or other persons or organizations. Phew!

Technorati Tags: cloud, computing, Imran Anwar, technology, Cloud Computing, IMRAN, Imran Anwar, Security, Technology, Strategy

Governing Governance, Risking Risky Analysis Paralysis & Complying With Compliance In Successful Cloud Computing Initiatives

The Cloud Security Alliance, just announced a new stack to address issues of governance, risk management and compliance for the nascent but exploding cloud computing industry. InformationWeek has a good short news report on the subject.

I consider this welcome news, from two perspectives - as an individual professional opinion; and as the opinion of someone leading vertical solutions and service provider offers planning & management, at an industry-leader cloud technology company.

Cloud Computing has been fortunate that its hype only slightly exceeded the real world benefits it provides, and its ad-hoc, vendors and clients deciding what's best for them, implementation of governance, risk and compliance management were "just good enough" to keep the ball rolling. For early adopters, and for those seeking immediate TCO (Total Cost of Ownership) and ROI (Return On Investment) value of next generation data center models, with highly converged virtualized infrastructure, this was not a show stopper.

But, for the Cloud industry to evolve to the next stage, where it literally can explode to the stage, which would make the latest set of analyst predictions, such as those quoted in the article above, actually likely to come true, governance, risk and compliance issues had to be addressed sooner rather than later.

The challenge in every new paradigm (or even what some consider a repackaged old paradigm enabled by technology capabilities that enable the concept to take off this time) is to balance between extremes along those three lines of concerns.

I have called attention to these topics in the past in print and online. My concern has been that overly excited buyers, and sell-at-all-costs vendors could lead to risky behavior on one side of the spectrum, while analysis paralysis would keep a huge majority from losing out on the benefits of cloud computing.

What is needed, as I have said before, is a pragmatic and practical approach; rather than utopian and impossible drives for perfection, that cannot be achieved in one, much less, three areas of importance like GRC. Add to that the complexity and impossibility of agreement, a situation in which every stakeholder brings their own colored and colorful viewpoint.

The need is for comprehensive, but not onerous, approaches to governance; risk management without seeking absolute, "perfect", impossible to achieve, levels of "zero risk"; and compliance standards that enable enterprise and service provider moves to cloud models, rather than being roadblocks. These are are all essential steps without tripping up clients or vendors.

The CSA's latest contribution to successfully achieving these is a free GRC stack, a set of toolkits, for enterprise customers, vendors of cloud & security solutions, as well as those tasked with auditing IT. The toolkits are, Cloud Audit, Cloud Controls Matrix and the Consensus Assessments Initiative Questionnaire (Apparently they did not spend much time on coming up with a better name for this last one!). You can download the GRC stack free.

This is not, by any stretch of the imagination, GRC nirvana. There will be many significant areas, from Department of Defense related federal requirements, to the extremely granular levels of security an increasingly networked global financial system requires, and many others.

But, I hope, and remain confident, that this will be the first in an ongoing series of steps towards ever-improving quality of governance, risk management and compliance standards, which will help cloud vendors and users alike.

—

Imran Anwar is founder of Internet email in Pakistan, co-founder and co-owner of the .PK ccTLD of Pakistan, and founder of the credit card industry there. As a New York based technology, media and business professional he is often seen and heard on global media like CNN, Fox News, Express TV, WWRL and many others. These are Imran's personal opinions and do not necessarily reflect those of any employer, employer's parent companies, clients, family members or other persons or organizations. Phew!

Technorati Tags: IMRAN, Imran Anwar, Technology, Cloud, Cloud Computing, Compliance, Risk, Governance

Intel Back With A Vengeance, Apple Back To High End Drawing Board

Intel Core 2 Quad brand logo (Photo credit: Wikipedia)

ComputerWorld (and others) have reported some interesting news items out of Intel, the erstwhile computer chipmaker.
During the last several years, it was interesting to see how Intel faced competition and where it's greatest threats came from. Instead of Intel getting beaten by PowerPC chips, that were made originally by the giants IBM, Motorola and Apple, Intel had a far rougher time competing with the brash and bold people of AMD. Now, however, the tide seems to have turned.
I have to say that Intel has come back with quite a lot of steam, thunder and vengeance, or, add your own cliche' here.
I do find it amazing that Microsoft is still so far behind in helping applications and users take advantage of even the dual-core chips available today in most computers being sold today. Not that Apple has done much better. Application makers are also not off the hook in that regard.
As usual, people are buying computers that can do far more than they can do. What I mean by that circular sentence is that the capabilities of the chips in most cases are outstripping the capabilities of the software to benefit from them.
Sure, most software products, especially image processing, speech recognition, video compression, etc. push computer CPU chips to the limit in terms of their clock speed. But, to use a bad example, that is somewhat like driving a Ferrari mostly with just one of the rear wheels, while the engine RPM nears redline.
One hopes that better use of these multi-core chips is at hand soon, before people realize that the multi-cores are not worth upgrading for.
As a MacUser I am looking forward to the Q4 release of smaller quad-core Intel chips, with QuickPath. I suspect that may be when my beloved 2003 vintage PowerBook G4 17" (whose design is still used on MacBook Pro laptops) will finally get a new shape and design.
That may also be just in time for some new battery technologies, as well as laptop sized Blu-Ray drives to become available, assuming Steve Jobs allows them in Macs.
That surely would be a nice toy, I mean, tool, to get in the New Year 2009.
What do you think?