Friday, December 21, 2012

IT and requests for Cloud Technology solutions

[2016/05/19] Update
 Ok, I'm actually finding some reasonable use cases for 3rd party cloud solutions. I still don't think it makes sense in instances where multiple large applications and lots of integration's are involved but for "point" solutions with few integration needs it may make good sense.  The cases I am thinking about (outside of family :) ) are development tools/process related.  With staffing so slim, it is pretty risky having only one person that knows how all the development and operations infrastructure is built, installed, setup and maintained. Having someone else deal with most of that means that staff have more time to focus on actual development. As is, maintenance of development tools/processes is falling to the wayside more and more for lack of time - that increases risk that something could go very wrong resulting in loss of assets or substantial disruption to systems/processes.  I will say that a cloud solution isn't a silver bullet though - it has its own risks like provider outages, network disruptions etc which can have a large negative impact on development processes too.  Which risks are more likely and have the higher negative impact?  Hard to tell right now but worth thinking about.

Anyways, use the appropriate tool for the job..
-------------------------------------------------------

This post is a bit of a general complaint against some people in IT and management.  It seems that there is an increasing tendency for people to request "cloud" applications or make requests to convert existing applications to "cloud" applications.  Why should this concern anyone?  I find it concerning because these requests are made for a specific solution instead of having a specific need or requirement where "the cloud" is the best solution.  The decisions behind any IT solutions should be made to solve specific problems or meet specific requirements.  Technology decisions based mainly on some research companies "quadrant" leads me to
  • wonder whether the solution is really a good fit for the organization
  • concern regarding the longer term viability of a solution
  • concern whether a project is setup for failure from the start
  • concern that the total/on-going cost will be wasteful of money and/or other resources
I am not saying that there is anything wrong with "cloud" technology but I am saying that many people don't understand more than the executive briefing level of information that the media pushes.  Although, if management makes a final decision that they want "cloud solutions" then I (and anyone else) should abide an employers decisions and do their best to make it work as well as possible.  If a person cannot get themselves  to do that then they should consider a different employer - but let me leave that for a different post.

The type of situation that leads me to finding a lack of in-depth understanding includes someone trying to justify a cloud solution by saying it will save money but can't back that with any further details.  If the only further justification is "we don't need to by hardware" then you are likely in the same situation.  If the application/service is a mission critical application then you may end up with a really big problem. 

If someone wants to talk about cloud solutions with me then I expect them to be willing to start the discussion with the following items at a minimum:
  1. Security requirements
    1. application access
    2. data sensitivity
  2. User base
    1. size
    2. locations
    3. types of users
      1. public
      2. internal only
      3. etc
  3. Data sources, locations and integration types
  4. Performance/capacity requirements
  5. Availability requirements
  6. Disaster recovery requirements
  7. Compliance/auditing requirements
 If the answers don't exclude cloud solutions then some cloud questions/discussion items should include:
  1. Potential internal staffing needs
    1. training
      1. developers
      2. operations/support personnel
  2. Potential network requirements
  3. cloud types
    1. 3rd party -  external cloud / hosted solution
    2. internal cloud
    3. hybrid
This last question (especially if potentially working with 3rd party/external cloud) should lead into
  1. Potential maintenance logistics/coordination
    1. If you require specific availability windows unsupported by the 3rd party then what?
    2. If you have maintenance windows for integrations/data sources then how is that handled/coordinated?
  2. Help desk / communications logistics
    1. If there is a problem, how is it reported?
    2. How are users notified?
  3. Monitoring
    1. how is it performed?  Can you leverage existing infrastructure? 
    2. Who performs it?
    3. what are the boundries?  If there is a performance issue, how do you identify whether it is a cloud issue or a data source integration issue?
  4. Contracts
    1. Do you have adequate legal counsel to help in evaluating contracts so you are not left high and dry if a problem of any sort comes up?
      1. hosting company goes out of business
      2. hosting company raises rates beyond what is affordable
      3. hosting company can no longer meet your needs
      4. hosting company not adaptable to changing technology needs
    2. Cost model
      1. Are you able to account for all changes required by your organization and still determine that there is a real cost savings?
This last item should cause you to ask - if you are forced to leave a hosting company:
  • Can you get all your data out?
  • What format is your data available in?
  • How transportable is your application/service to some other cloud vendor?    Do you have to rewrite your application from scratch? 
 This is certainly not a comprehensive list of things to consider but is meant to cause people to pause and consider more than just the short briefs on cloud computing (and technology in general for that matter).  Every organization is different so decision makers must use knowledge, experience and common sense of  their own and from people with a proven track record that work for them.



No comments:

Post a Comment