Organisations should have a basic idea as to what they want from a cloud solution. This starts with a good understanding of what the cloud is, knowledge of the various cloud service and deployment models, as well as an understanding of the maturity of both the organisation adopting a cloud solution and the potential cloud service provider.
So says Tiger Brands CIO Darryl Thwaits, who adds that the questions organisations need to ask when implementing a cloud solution depend on the individual business.
For example, he explains, large organisations will have very different requirements to smaller ones; also, organisations in different industries will have different requirements.
However, there are a few commonalities that apply, regardless of the business size and industry. These include asking if the organisation has the appropriate governance mechanisms in place to manage a cloud solution; considering the risks and benefits of implementing a cloud solution; and finally, determining if the organisation is mature enough to move to the identified solution, Thwaits says.
One of the most important aspects when developing a virtualisation and cloud strategy is the identification of the need for a solution, which can include cost inefficiencies, security concerns and the time to deliver solutions, he says.
An environmental scan, which looks at activity that can impact or influence the environment, will identify technical opportunities, Thwaits says. For example, virtualisation may not be financially viable as a result of newly acquired equipment. Alternatively, if opportunities do exist, the scan will help quantify the benefits, he says.
Identifying an appropriate cloud provider is another important step, Thwaits emphasises, as this is critical to being able to answer questions on security, risk and sustainability.
Having identified the need, the opportunity and an appropriate service provider, a pilot project is a good way start the implementation of the cloud strategy, he says.
Regarding security, Thwaits says organisations need a good understanding of the potential risks as well as acceptable mitigation controls in cloud service offerings. He adds that the organisation must perform in-depth investigations into the capabilities of cloud service providers, particularly with regard to their experience and ability in dealing with information security.
Thwaits is a speaker at the ITWeb Virtualisation and Cloud Computing Summit, which takes place from 17 to 19 July. For more information, click here.
Share