Welcome!

Microservices Expo Authors: Elizabeth White, Pat Romanski, PagerDuty Blog, Derek Weeks, Liz McMillan

Related Topics: @CloudExpo, Mobile IoT, Microservices Expo, Agile Computing, Apache, Cloud Security

@CloudExpo: Article

Seizing Control of Data Delivery

A tough economy has forced IT departments to do more with less – especially within small and medium-sized businesses (SMBs)

The "consumerization of IT" is a topic we've heard a lot about recently - especially when it comes to "Bring Your Own Device (BYOD)." One area that is less talked about, yet a growing trend under the "consumerization" umbrella, is the use of free, consumer-type file transfer services in the workplace.

A tough economy has forced IT departments to do more with less - especially within small and medium-sized businesses (SMBs). Working with limited resources and budget, SMB IT professionals are still expected to manage everything from network infrastructure to cloud services to security and compliance issues, all while keeping the business running smoothly. Sometimes this results in long "wait" times for employees.

Unfortunately, some employees get tired of waiting for IT to help them out and take matters into their own hands in order to get their jobs done. When it comes to sending large files that an email server can't handle, many employees are turning to consumer-type, cloud-based tools, such as YouSendIt, Dropbox and iCloud. To them, it's a way to send files in a matter of minutes without having to bother the IT department. But in reality, it's a recipe for disaster and a data security nightmare.

Employees aren't the only problem. A recent survey by DataMotion found that nearly 35% of IT and business managers admit that they've actually used or recommended that others use free consumer-type, file transfer services for work purposes.

This is a major problem that needs to be addressed. Free services disrupt any semblance of centralized IT control, as there is no way to track and manage files sent via these solutions. These tools often have weak or non-existent security controls, which introduce serious risks when transmitting sensitive information. This can lead to data leakage, compliance fines, legal liabilities and a tarnished reputation. Need proof of the security issues surrounding these services? Dropbox recently confirmed that usernames and passwords stolen from third party websites were used to access its customers' accounts.

What Can Be Done?
To avoid putting their infrastructure at risk, some companies are banning consumer-type, file-transfer services in the workplace altogether. In fact, nearly 42% of DataMotion's survey respondents stated that their company forbids the use of these services in the workplace, and nearly 30% said their company even goes so far as to block the sites' URLs.

But, IT must offer employees viable, easy-to-use alternatives or frustrated workers will continue to find workarounds. Luckily, there are data delivery solutions that help employees transmit information quickly and easily through secure channels, while still providing IT staff with visibility and control over this data.

Here is a brief, yet important, checklist of product features to consider when evaluating data delivery offerings for your organization. Make sure the solution:

  • —Offers Simplicity - If the product is not intuitive and easy-to-use for both senders and recipients, not only will the IT support burden increase, but, employees will find alternative, insecure ways to send their data. The best security does no good if it is not used.
  • —Provides Flexibility - Going back to BYOD, employees are sending just as many emails via their mobile devices as they are on their computers. Consider a data delivery solution that integrates with mobile devices, so security and compliance controls are enforced no matter how - or on what device - data is sent. Solutions that do so natively (without the need to launch an application) make it easy for the employee to follow policy.
  • Prioritizes Security - The ability to easily send sensitive information securely is vital. Make sure your data delivery solution encrypts data while it's in transit and at every "hop" where it's stored along the way. It's also important to ensure the solution's delivery methods adhere to your own internal - as well as industry - security and compliance regulations.
  • —Gives Control to the IT department - A solid solution will provide IT with centralized control, the ability to easily provision/de-provision users, and track and monitor all data transfers, including file names, sender and recipient IDs, timestamps, completion status notifications and other important metadata.
  • —Delivers ROI - Consider the difference between on-premise and cloud-based solutions. Cloud solutions often offer lower total cost of ownership (TCO) because of significant cost savings in hardware, OS licenses, staffing and disaster recovery. Additionally, because up-front costs are minimal and the solution can be up and running quickly, cloud solutions provide companies with a quick return on investment. Just remember to make sure your cloud provider upholds or exceeds the same security and compliance standards that you follow.

With data breaches more prevalent than ever, industry regulations rapidly expanding, and Big Data becoming the norm, companies must re-evaluate their methods of data sharing. Choosing a solution that encompasses the features outlined in this checklist will put you well on your way to protecting sensitive information and staying ahead of the competition. And pairing this with employee education and awareness will help you gain control back from the "wild west" of rogue application use.

More Stories By Pete Cafarchio

Technology veteran Pete Cafarchio is vice president of DataMotion, innovators in cloud-based data delivery services. Millions of users worldwide rely on DataMotion to transparently improve business processes and reduce costs, while mitigating security and compliance risk. The company’s core DataMotion Platform solves business issues by providing a secure data delivery hub. Its easy-to-use solutions for secure email, file transfer, forms processing and customer contact leverage the DataMotion Platform for unified data delivery.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@MicroservicesExpo Stories
The past few years have brought a sea change in the way applications are architected, developed, and consumed—increasing both the complexity of testing and the business impact of software failures. How can software testing professionals keep pace with modern application delivery, given the trends that impact both architectures (cloud, microservices, and APIs) and processes (DevOps, agile, and continuous delivery)? This is where continuous testing comes in. D
SYS-CON Events announced today that Synametrics Technologies will exhibit at SYS-CON's 22nd International Cloud Expo®, which will take place on June 5-7, 2018, at the Javits Center in New York, NY. Synametrics Technologies is a privately held company based in Plainsboro, New Jersey that has been providing solutions for the developer community since 1997. Based on the success of its initial product offerings such as WinSQL, Xeams, SynaMan and Syncrify, Synametrics continues to create and hone in...
Many IT organizations have come to learn that leveraging cloud infrastructure is not just unavoidable, it’s one of the most effective paths for IT organizations to become more responsive to business needs. Yet with the cloud comes new challenges, including minimizing downtime, decreasing the cost of operations, and preventing employee burnout to name a few. As companies migrate their processes and procedures to their new reality of a cloud-based infrastructure, an incident management solution...
Some people are directors, managers, and administrators. Others are disrupters. Eddie Webb (@edwardawebb) is an IT Disrupter for Software Development Platforms at Liberty Mutual and was a presenter at the 2016 All Day DevOps conference. His talk, Organically DevOps: Building Quality and Security into the Software Supply Chain at Liberty Mutual, looked at Liberty Mutual's transformation to Continuous Integration, Continuous Delivery, and DevOps. For a large, heavily regulated industry, this task...
Modern software design has fundamentally changed how we manage applications, causing many to turn to containers as the new virtual machine for resource management. As container adoption grows beyond stateless applications to stateful workloads, the need for persistent storage is foundational - something customers routinely cite as a top pain point. In his session at @DevOpsSummit at 21st Cloud Expo, Bill Borsari, Head of Systems Engineering at Datera, explored how organizations can reap the bene...
Kubernetes is an open source system for automating deployment, scaling, and management of containerized applications. Kubernetes was originally built by Google, leveraging years of experience with managing container workloads, and is now a Cloud Native Compute Foundation (CNCF) project. Kubernetes has been widely adopted by the community, supported on all major public and private cloud providers, and is gaining rapid adoption in enterprises. However, Kubernetes may seem intimidating and complex ...
Gaining visibility in today’s sprawling cloud infrastructure is complex and laborious, involving drilling down into tools offered by various cloud services providers. Enterprise IT organizations need smarter and effective tools at their disposal in order to address this pertinent problem. Gaining a 360 - degree view of the cloud costs requires collection and analysis of the cost data across all cloud infrastructures used inside an enterprise.
You know you need the cloud, but you’re hesitant to simply dump everything at Amazon since you know that not all workloads are suitable for cloud. You know that you want the kind of ease of use and scalability that you get with public cloud, but your applications are architected in a way that makes the public cloud a non-starter. You’re looking at private cloud solutions based on hyperconverged infrastructure, but you’re concerned with the limits inherent in those technologies.
Gone are the days when application development was the daunting task of the highly skilled developers backed with strong IT skills, low code application development has democratized app development and empowered a new generation of citizen developers. There was a time when app development was in the domain of people with complex coding and technical skills. We called these people by various names like programmers, coders, techies, and they usually worked in a world oblivious of the everyday pri...
Our work, both with clients and with tools, has lead us to wonder how it is that organizations are handling compliance issues in the cloud. The big cloud vendors offer compliance for their infrastructure, but the shared responsibility model requires that you take certain steps to meet compliance requirements. Which lead us to start poking around a little more. We wanted to get a picture of what was available, and how it was being used. There is a lot of fluidity in this space, as in all things ...
The dynamic nature of the cloud means that change is a constant when it comes to modern cloud-based infrastructure. Delivering modern applications to end users, therefore, is a constantly shifting challenge. Delivery automation helps IT Ops teams ensure that apps are providing an optimal end user experience over hybrid-cloud and multi-cloud environments, no matter what the current state of the infrastructure is. To employ a delivery automation strategy that reflects your business rules, making r...
The notion of improving operational efficiency is conspicuously absent from the healthcare debate - neither Obamacare nor the newly proposed GOP plan discusses the impact that a step-function improvement in efficiency could have on access to healthcare (through more capacity), quality of healthcare services (through reduced wait times for patients) or cost (through better utilization of scarce, expensive assets).
Admiral Calcote - also known as Lee Calcote (@lcalcote) or the Ginger Geek to his friends - gave a presentation entitled Characterizing and Contrasting Container Orchestrators at the 2016 All Day DevOps conference. Okay, he isn't really an admiral - nor does anyone call him that - but he used the title admiral to describe what container orchestrators do, relating it to an admiral directing a fleet of container ships. You could also say that they are like the conductor of an orchestra, directing...
Cloud Governance means many things to many people. Heck, just the word cloud means different things depending on who you are talking to. While definitions can vary, controlling access to cloud resources is invariably a central piece of any governance program. Enterprise cloud computing has transformed IT. Cloud computing decreases time-to-market, improves agility by allowing businesses to adapt quickly to changing market demands, and, ultimately, drives down costs.
For DevOps teams, the concepts behind service-oriented architecture (SOA) are nothing new. A style of software design initially made popular in the 1990s, SOA was an alternative to a monolithic application; essentially a collection of coarse-grained components that communicated with each other. Communication would involve either simple data passing or two or more services coordinating some activity. SOA served as a valid approach to solving many architectural problems faced by businesses, as app...
Some journey to cloud on a mission, others, a deadline. Change management is useful when migrating to public, private or hybrid cloud environments in either case. For most, stakeholder engagement peaks during the planning and post migration phases of a project. Legacy engagements are fairly direct: projects follow a linear progression of activities (the “waterfall” approach) – change managers and application coders work from the same functional and technical requirements. Enablement and develo...
The “Digital Era” is forcing us to engage with new methods to build, operate and maintain applications. This transformation also implies an evolution to more and more intelligent applications to better engage with the customers, while creating significant market differentiators. In both cases, the cloud has become a key enabler to embrace this digital revolution. So, moving to the cloud is no longer the question; the new questions are HOW and WHEN. To make this equation even more complex, most ...
Recent survey done across top 500 fortune companies shows almost 70% of the CIO have either heard about IAC from their infrastructure head or they are on their way to implement IAC. Yet if you look under the hood while some level of automation has been done, most of the infrastructure is still managed in much tradition/legacy way. So, what is Infrastructure as Code? how do you determine if your IT infrastructure is truly automated?
Every few years, a disruptive force comes along that prompts us to reframe our understanding of what something means, or how it works. For years, the notion of what a computer is and how you make one went pretty much unchallenged. Then virtualization came along, followed by cloud computing, and most recently containers. Suddenly the old rules no longer seemed to apply, or at least they didn’t always apply. These disruptors made us reconsider our IT worldview.
As people view cloud as a preferred option to build IT systems, the size of the cloud-based system is getting bigger and more complex. As the system gets bigger, more people need to collaborate from design to management. As more people collaborate to create a bigger system, the need for a systematic approach to automate the process is required. Just as in software, cloud now needs DevOps. In this session, the audience can see how people can solve this issue with a visual model. Visual models ha...