Please share! Jonathan L. Raper, A+, MCSA, MCSE Technology Coordinator Eagle Physicians & Associates, PA [email protected] www.eaglemds.com
-----Original Message----- From: Ziots, Edward [mailto:[email protected]] Sent: Monday, January 10, 2011 12:56 PM To: NT System Admin Issues Subject: RE: domain controller in the cloud??? I have a slide deck written for ISACA NE that I can share if you want it to review the issues with moving to the cloud, which should give you talking points. Z Edward E. Ziots CISSP, Network +, Security + Network Engineer Lifespan Organization Email:[email protected] Cell:401-639-3505 -----Original Message----- From: Ziots, Edward [mailto:[email protected]] Sent: Monday, January 10, 2011 12:51 PM To: NT System Admin Issues Subject: RE: domain controller in the cloud??? There is a lot of things you need to look at if and when moving your resources to the cloud. Just because a member of your board says moving to the cloud is the way to go, doesn't make it so. There are a lot of things to consider: 1) Availability ( of your resources) and of the cloud provider ( needs to be put in SLA) ( what happens when a major Internet ISP or link goes down which affects your availability? ( Is it the fault of the cloud provider? ( Not really, but the customer might not be able to get to their systems, which means availability is not assured) 2) Data Management ( of your servers) and encryption ( needs to be put in SLA) 3) Right to Audit ( of their processes) ( don't take a SAS 70 or SSAE 16 part 1/2, for face value) 4) Compliance ( Legal requirements) ( Most auditors don't know how to audit systems in the cloud, so how are you going to stay compliant? ( try PCI DSS for example) 5) How do you get your data and systems out of the cloud if you have to terminate your contract with the cloud provider, or want to move to another cloud provider? 6) Vetting process of the cloud provider when hiring staff that has access to your systems and data? And probably a lot of others also? ( You don't know this, and they aren't going to tell you either in most cases) Just food for thought, but again its all about risk, and how much you are willing to take, that and giving up control. Z Edward E. Ziots CISSP, Network +, Security + Network Engineer Lifespan Organization Email:[email protected] Cell:401-639-3505 -----Original Message----- From: techconnect [mailto:[email protected]] Sent: Monday, January 10, 2011 11:44 AM To: NT System Admin Issues Subject: domain controller in the cloud??? We are a private k-8 school and we have a board member who is telling us that we should not buy any new servers to replace the current ones, he says everything is moving to the cloud and so should our stuff(user folders, authenication AD win 2003 R2 and Exchange 2003 is what we're using, they want to move to gmail but there's no central management there I know of,and offsite backups only.) We have about 350-400 students and faculty and they want to be on the bandwagon to the cloud I think without understanding everything about it(I'm not entirely clear either) and was looking for thoughts and opinions or resources. Thanks, Jason ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin Any medical information contained in this electronic message is CONFIDENTIAL and privileged. It is unlawful for unauthorized persons to view, copy, disclose, or disseminate CONFIDENTIAL information. This electronic message may contain information that is confidential and/or legally privileged. It is intended only for the use of the individual(s) and/or entity named as recipients in the message. If you are not an intended recipient of this message, please notify the sender immediately and delete this material from your computer. Do not deliver, distribute or copy this message, and do not disclose its contents or take any action in reliance on the information that it contains. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
