29
ii.
A Private Cloud Service is when there are no shared resources at the
service level and that the service is provided for a single organisation
(
company or government).
Buying into a Public Cloud Service
Very small business, startups for example, will find the public Cloud services
available today sufficient to build their business process on it. If there is no
existing IT infrastructure it is very easy to combine email, storage and text
processing services with a public CRM based Cloud application and get a
new business up and running. A very large enterprise on the other hand will
easily buy into services like storage or mail archive, because those
companies have done their homework and have already classified their data
and have a structured service catalogue at hand. They know exactly which
services they could insource or outsource. Also the scale is working in the
direction of a large company. In general, midsized companies with an
existing IT infrastructure currently have the most problems buying into
public Cloud services, as they lack the ground work (service catalogue, data
classification) and have limited human resources, especially in the area of
project management and contract handling. If Public Cloud services are
insourced, there are some questions, beside the question if the service fits
the business needs, in the area of availability (using Service Level
Agreements ‐ SLA), on‐boarding, off‐boarding (how to exit and transition the
service), data protection, business continuity, backup, restore point in case
of a system failure, restore time after a disaster happens and many other
security, legal and commercial issues (For detailed information see chapter
2.4).
Whenever these questions need answers, it is a good start to ask the
provider for some kind of certification for his equipment, the datacentre and
his processes. EuroCloud provides such a certification in form of the Star
Audit
6
.
A problem which arises with the integration of Public Cloud services, is how
to maintain a consistent user administration and authentication system. It is
easy to integrate a public service into a small company, nobody will care if
you have to maintain a different security and user account structure, if the
management interface is not integrated in the company’s main
management software, and so on. However, consider the nightmare if such
a service must be integrated into a large enterprise; immediately the
question of an identity management system arises, is it capable to provide
security and user rights to the Cloud service? Large enterprises will have to
provide a large number of Cloud services and they will tend to provide
6
