Systems and Infrastructure Life Cycle Management

MIS5203

Fox School of Business

Week 13 – Discussion

by 79 Comments

In this unit, we spend some time discussing the cloud.  In this unit, take some time to learn a bit about the various cloud service providers.  Using your answer to the practical assignment in this unit, describe how you might implement your design using the cloud.  Which provider(s) would you use?  What type of services would you require?  How might you assure the security of the applications in the cloud?

Reader Interactions

Comments

  1. I would use Microsoft Azure cloud services. The company needs to provide web services to clients so that they can request package pickup and delivery. They could use Microsoft Azure’s platform as a service which provides a website hosting service. On the Spot Courier services can not only develop and customize their web applications but they also benefit from the open source applications available. Since drivers need to view the schedules, update the status of packages in real time using portable digital devices they can benefit from Microsoft Azures mobile services which provide push service. The mobile apps can be used to connect to the company’s data center allowing Bill to update, schedule delivers and do billing, at the same time updating the driver’s digital devices. The company could also consider using Amazon web services (AWS) cloud services. Amazon also offers web hosting services and AWS mobile services.

    It is important to verify that the cloud service provider complies with data security industry standards. The service level agreement should state how the company data will be protected, what the authentication and authorization procedures will be, whether the provider will allow visits to validate the process and procedures and data wiping at the end of the contract. Even though data might be hosted by a cloud provider is it the responsibility of on the spot courier services to ensure that their data is protected. This includes encrypting the data in transit to the cloud service provider, and controls are in place to protect the data at the cloud provider’s site.

  2. I would use Amazon Simple Storage Service (S3) as it offers organizations like Bill’s, who cannot afford to develop sophisticated software, the advanced features that may be needed at an affordable price. Small organization are able to access the same cloud that Amazon is able to offer to its larger enterprise customers, with the same security, reliability, and speed . Features like web-scale computing capabilities would help ensure business continuity in the face of disruption for the organization. The solution also offers a highly scalable infrastructure to account for not only the current requirements of On the Spot Couriers, but the future which may require expansion. Tiered pricing is available for additional storage and bandwidth needs. Amazon Simple Storage Service (S3) would allow them to store and retrieve data from anywhere web site (online orders) and mobile apps (portable devices) to help Bill make better business decisions.
    They could then use this information to also benefit from Amazon’s other web services available.

    As an auditor we would work to assure the security of solutions in the cloud by:
    • Ensuring effective governance, risk, and compliance processes exist,
    • Reviewing audits of the cloud service provider’s operations by independent auditors.
    • Ensuring the cloud service provider is managing its employees and roles, as these individuals will have
    access to the customer’s data and applications.
    • Being aware of the new challenges of proper protection of data in the cloud.
    • Enforcing privacy policies.
    • Confirming cloud networks and connection are all secure.
    • Evaluating the security controls on physical infrastructure and facilities.

    • Hi Iyana,

      Thank you for your explanation of Amazon Simple Storage Service. I like the point that Amazon Simple Storage Service is affordable for even small organization, that is flexible and reasonable. Besides, the methods you mentioned here to assure the security are appropriate and effective.

  3. I would recommend Zymr. Zymr is a Silicon Valley-based software engineering studio designed to integrate state-of-the-art software paradigms, agile development culture, and global delivery centers. Since 2012, Zymr’s clients have enjoyed access to premium engineering services to support disruptive business models and challenging development timelines. With a proven track record, mature engineering and design teams, and veteran management, Zymr is a strong choice of partner worth considering.
    The services I would require are:
    • From customers’ side: Package pickup online; Check packages’ status online; Download package labels via the Internet
    • From courier’s side: View their schedules via a portable digital device while on their routes; Update the status of packages while on their routes; The system “knows” where the driver is on his route and can send updates in real time; Drivers can accept payments and record them on the system.
    • From management’s side: Record package pickups; Schedule delivery/pickup runs; Record billing.
    Zymr provides the could applications (Cloud Enterprise & Social SaaS Apps – XaaS, Big Data, Social, Dashboards, IoT, E-commerce) which can satisfy both customers and management to use. Zymr also provides cloud mobility, which supported by cloud enterprise & social mobility apps – JavaScript Web UI, native iOS and native Android apps, so that satisfy courier needs.
    As an IS audit and assurance function shall use an appropriate risk assessment approach and supporting methodology to develop the overall IS audit plan and determine priorities for the effective allocation of IS audit resources. We need to ensure the data security, network security, and application security. IS audit and assurance professionals shall identify and assess risk relevant to the area under review.

    • Thank you for your sharing. After reading about your introduction about the Zymr, I believe Zymr is a good choice for the organization to use. It’s excellent cloud mobility function make much convenience for the organization users.

    • Thank you for your comment. You provided great feedback regarding how the design of Zymr can meet their pick-up and delivery needs especially related to ensuring Internet design consistency, service management issues influencing customer loyalty, and security.

  4. The top four Cloud-Computing vendors are:

    1-Amazon Warehouse Services(AWS)
    2-Oracle
    3-Microsoft
    4-Google

    I’m going to use the AWS, they were the market leader since 2013 and first to market 12 years back. AWs offers the widest selection of services overall, again in part because it’s been in the market longesr but also it’s shown little sign of slowing down. But should keep in mind that buying an implementing AWS services often requires a lot of technical experties.

    The regulatory environmnet has become more complicated because organizations often find themselves required to comply with multiole regulations and industry mandates.

    The leading frameworks and guidelines to meet regularty requirments are as follow:
    -Cybersecurity Framework base on NIST
    -Control Objectives for Information and Related Technology (COBIT) aligns IT with strategic business goals (ISACA 2015)
    – Comply with International Organization for Standardization (ISO)
    -Comply with the Payment Card Industry Data Security Standard (PCI DSS)

    • Hi. I think your analysis on why AWS would be a good option is very thorough. In other classes, we discuss AWS as a cloud providing service and conclude in the same way, feeling that it is a superior service that is versatile and scalable.

    • Hi Mahroo,

      I agree with you. After research I would like to choose AWS too. It provides the widest services that cover many types of business and fulfill their needs. And besides the advantages you mentioned above, I think another important reason is that AWS is cost-effective with good quality and security.

    • I agree with you, because it is important to follow these frameworks to ensure cyber security NIST is the one I usually use It provides guidelines and requirements for different security controls. It is also important to understand the relationship between different sections of NIST. It will better understand the good performance of controls.

  5. The Providers that I would use are:
    1-Amazon Warehouse Services
    2-Microsoft Azure cloud services

    I would require to use of Microsoft Azure cloud services for web services such as package pickup and delivery request. They could use Microsoft Azure’s push notification system to update shipping status in real time which would also be connected to the main system back in the warehouse and Bill would update, schedule delivers and do billing. On the Spot Courier services would benefit significantly from the open source applications available. On the Spot Courier services could also use Amazon warehouse services (AWS) which offers a huge variety of services.
    As an auditor I would assure the security of the applications in the cloud by meeting regulatory requirments as follow:

    -Comply with Cybersecurity Framework base on NIST
    -Comply with International Organization for Standardization (ISO)
    -Control Objectives for Information and Related Technology (COBIT) aligns IT with strategic business goals (ISACA 2015)
    -Comply with the Payment Card Industry Data Security Standard (PCI DSS)

    • Great explanation, Casid! I like you selected two cloud service providers, Amazon Warehouse Services and Microsoft Azure, to ensure the different services and business processes are met. I agree that security of the applications in the cloud should meet regulatory compliance. The frameworks that you have listed (NIST, ISO, COBIT) offer guidelines to ensure adequate controls to maximize protection of information.

    • Thank you for tying the security into existing regulatory requirements. This was very helpful in ensuring security of the applications in the cloud. Especially as this is a key concern of cloud computing solutions, along with reliability and regulation compliance.

    • I think you provide a concise yet thorough explanation of the different cloud computing tools available and why they should be used for the delivery company from the practical assignment. I also appreciate that you included the security aspects of the web services.

  6. There are many cloud service providers in the market. When you google it, the results will show several main players in this market such as:

    – Amazon Web Services (AWS)
    – Microsoft Azure
    – Oracle Cloud
    – Google Cloud Platform
    – Digital Ocean
    – IBM cloud computing
    – GoDaddy
    – …

    In fact, the choice of cloud service providers is based on different needs. After research, for me, I would like to choose Amazon Web Services (AWS) because it is cost effective. AWS uses a pay-as-you-go payment plan which is flexible with high security, scalability and availability. And also, AWS owns high market share in the market which believed more reliable.

    To ensure the security of the applications in the cloud, it is good to verify whether or not this cloud service provider comply with related guidelines, standards, and regulations. Also, it is also necessary to pay attention to its procedures of authentication and authorization to see if there any vulnerability or potential risks exist in the cloud service. Besides, checking the privacy policies and even reviewing comments from other customers are another way to ensure the security.

    • Thanks for sharing so many could service providers. Microsoft Azure is the application I used before. It provides good could service to users. Users can select different servers for their PCs. It is good for using different applications and extend storage.

    • Well said, Yingyan! I agree that cloud servicses must be chosen in terms of needs. Not all available cloud service providers best fit the requirements of any particular business. I like that you chose Amazon Web Services (AWS) among the other providers. Per the size and operations of Bill’s business, it is safe to say that AWS is the appropriate selection given its cost-effective feature. .

    • I agree with you. I think AWS is the most cost-effective and versatile tool for cloud based computing and would be the best option for the delivery service. It is also secure and has many capabilities that would be desirable and functional for the company.

  7. I would like to recommend the Amazon Web Services (AWS). AWS provides on-demand cloud computing platforms to individuals, companies, and governments. The technology allows subscribers to have at their disposal a full-fledged virtual cluster of computers, available all the time, through the internet. The fees are based on a combination of usage, the hardware/OS/software/networking features chosen by the subscriber, required availability, redundancy, security, and service options, so it is suitable for the small business like Bill’s who does not have too much budget for the cloud services.

    AWS comprised more than 90 services, but the services that required for Bill’s business are: storage, networking, computing, database, application services, so and so forth.

    In terms of the applications in the cloud, there are cloud security guidance:
    Step 1: Ensure effective governance, risk and compliance processes exist
    Step 2: Audit operational and business processes
    Step 3: Manage people, roles and identities
    Step 4: Ensure proper protection of data
    Step 5: Enforce privacy policies
    Step 6: Assess the security provisions for cloud applications
    Step 7: Ensure cloud networks and connections are secure
    Step 8: Evaluate security controls on physical infrastructure and facilities
    Step 9: Manage security terms in the cloud service agreement
    Step 10: Understand the security requirements of the exit process

    • Hi xiaomin,
      You provide a good introduction on AWS and a good cloud security guidance. I agree that effective governance, strong authentication, physical environment, agreements are all important to ensure the cloud security. Adding your points that having the right to audit clause in the agreement will help the identification of the risks and support the compliance.

    • Thank you for your sharing. You give many details about the cloud security guidelines. The step 10 Understand the security requirements of the exit process is important because this step is often be ignored by users.

    • I think you have made a great list of qualities that would be useful for database and application service users. I also think its great you mention that the services provided are cost effective, which would make it desirable for all businesses, regardless of size.

    • Yes, AWS is good. AWS provides on-demand cloud computing platforms for individuals, companies, and governments. This technology allows users to use a mature virtual computer cluster at any time through the Internet. These costs are based on the combinations used.

    • Hi there – thank you for sharing those crucial points to cloud sharing. I took a “Cyberspace and Society’ in Fall of 2018, and we briefly spoke and touched upon cloud services. It was very interesting to see your views as to why they are so important. I’m sure I echo everyone else by stating that your AWS is very clear and well-put, too.

  8. There are quite several cloud service providers. Some of the major providers around today are:

    • Amazon
    • Google
    • IBM
    • Microsoft
    • Salesforce
    • VMware

    A preference for cloud provider is not that simple, but key things to consider for cloud provider selection are:

     Business goals
     Cost
     Data Security
     Data Storage (location)
     Support system
     Data Recovery
     Service Level
     Manageability
     Compliance, etc.

    Reaching out to users of short listed provider to ascertain the provider service(s) would not hurt decision making.

    With the variables mentioned above; a review of some of the cloud providers and their services, my analytical framework is developed toward Amazon Warehouse Service(AWS). The services provided by

    AWS cover a lot of areas – compute, storage, databases, analytics, networking, mobile, development tools, etc. This gives client the choice of having all cloud activities with one vendor.

    Most provider bill client by rounding up the number of minutes used on demand while AWS bills by rounding up the number of hours use.

    AWS is preferred by a lot cloud user; besides it is one of leaders in the industry and has been for a while – recommendation and compliance.

    In short, I will choose AWS. Its Platform will help achieve business goals today, and with improvement, there can be adjustment with services – AWS has it all.

    • Thank you for your feedback. Your list of key things to consider for cloud provider selection is very help. Another key consideration that is often overlooked is maintenance and support of the solution(s).

    • I really like the list you complied of things cloud providers should have for customers’ convenience and usability. AWS is definitely a growing competitor in the industry. They have so many features that will help any kind of user develop the appropriate web resource they need.

  9. Cloud computing can be described as on-demand delivery of compute power, applications, database storage, and other information technology resources through a cloud services platform via the internet with pay-as-you-go pricing. Some of the top cloud computing services providers include:(1) Microsoft (2) Amazon Webservices (3) IBM (4) Salesforce (5) SAP. The cloud solution and its implementation activities are quite like that of an outsourced solution. Implementing a design with the cloud involves conducting business analysis, building a business case, sourcing a cloud services provider, and implementing the solution.
    Considering certain factors, I will use the Amazon Webservices because it’s effectively documented, has seamless integrations and has the most widespread tools and services available.
    Secondly, the AWS, is known for its cost-effective cloud tools for business operations, high scalability and availability.
    The cloud computing provides a lot of benefits to organization; however, these benefits are likely to be eroded by the failure to ensure adequate security and/or privacy protection when using cloud services.
    The following steps will help ensure the security of applications in the cloud: (a) Effective governance and compliance processes. (b) Manage people, roles and identities (c) Enforce privacy policies (d) Assess the security provisions for cloud applications (e) Ensure cloud networks and connections are secure (f) Evaluate security controls on physical infrastructure and facilities (g) Manage security terms in the cloud service agreement (h) Ensure that your team understands the security requirements of the exit process.

    • Well tuf50240. Amazon web services does indeed have sophisticated applications with increased flexibility, scalability and reliability at lower prices. There have already build a great reputation in the market as a cloud service provider which that can be trusted. Good choice.

  10. I might use the cloud in the design for storage of customer master including name and contact information, courier cost computing, and data transfer for delivery purpose. I would use Amazon Warehouse Service (AWS), which is a cost-effective option for business operations with high availability, scalability and the features needed such as storage and computing.

    To assure the security of the applications in the cloud, I would recommend following:
    1) A thorough understanding of the business of my company and the cloud service provider to ensure the compliance of common standards.
    2) Having SLA in place to clearly define the service will provide, expected performance level (responsibilities), monitoring process and consequence of the failure of service.
    3) Using strong authentication tool to protect cloud application (e.g. two-factor authentication, one-time passwords).
    4) Having an incidence response plan in place to protect the potential shared vulnerbilities, and making sure the plan are updated and documented in a timely manner.
    5) Periodical reviews of the cloud service provider to ensure the agreements within the contract are completed in a satisfactory manner.

    • I agree with you, because SLA is important if users use third party providers’ products. It makes sure the service quality of the products. People can also measure the service level based on the standard on SLA.

    • Thank you for your sharing. I really like what you mentioned about the two-factor authentication, one-time passwords. These authentication methods are good to protect the data. However, how it can affect the cost and customer’s experiences.

    • I like it, too. AWS provides on-demand cloud computing platforms for individuals, companies, and governments. This technology allows users to use a mature virtual computer cluster at any time through the Internet. These costs are based on the combinations used.

  11. The cloud I use is Windows Azure. It provides different Windows servers Users can install many Windows system on a PC. That can also provide extra storage for a PC by cloud service. The service is important because storage on cloud can be huge and cheap. In addition, if some application cannot be used in other system, Windows Azure can install windows system on the same PC to make the application usable. For example, some application can not be operated on Mac system, so Apple users can use Windows Azure to deal with this problem. Furthermore, security is important. Password should be set based on certain format. That is hard for hackers to guess. The password should not be same as the password on PC. That is good for information security.

  12. The strong cloud services provider are Amazon Warehouse Services(AWS), Oracle, Microsoft, Google, and IBM.
    I would like to use Microsoft Windows Azure or Amazon Warehouse Services(AWS).
    They can choose Microsoft Windows Azure’s website hosting service and Spot Courier services, it is easy for organization to design their web applications. Also, the Microsoft Windows Azure have a people friendly price for the organization and it has a good compatibility which means mac can also use it easily.
    The organization can also try the AWS, AWS uses a pay-as-you-go payment plan which is flexible with high security. And also, AWS has high market share in the market which believed more reliable.
    To ensure the security of the web application, we should consider about:
    1. privacy policies;
    2. security controls on physical controls;
    3. networks security;
    4. access controls and data protection.

    • I agree, Hanqing. With many service providers out there, it is significant to choose the one that provides high security on the information. After looking at the features pf Microsoft Windows Azure or Amazon Warehouse Services(AWS), it can be said that this AWS can prove to be an effective and efficient cloud service for Bill’s business.

  13. I would use Amazon Simple Storage Service. Amongst the AWS suite of cloud-based compute, network and storage solutions is their ‘Simple Storage System’ or ‘S3’. S3 is an object based storage solution and can be thought of as an easily accessed, easily managed and infinitely expandable data warehouse.
    There are some ways to secure cloud applications:
    Define the requirements align with your cloud application vendors.
    Build a threat model for each cloud application you are considering.
    Choose the level of risk tolerance your organization is comfortable with when using services that rely upon a multi-tenancy model.

    • That’s true, Zhixin. Cloud storage is a developing business for the past 5 years. They can provide the user a relatively huge space for them to store any type of information and data. If a small business owner doesn’t have enough money to build their local storage system, they can just simply store some of them in the cloud storage platform. However, for On The Spot courier company, some information and data related to customer’s PII should not be stored in the cloud storage system.

  14. There are various cloud service providers. To name a few, there are: Amazon Web Service (AWS), Microsoft Azure, Google Cloud Platform, IDrive, Adobe, VMware, IBM Cloud and so on. To meet the business processes requirements, I would go with IDrive that is said to be affordable for small businesses like Bill’s. IDrive provides services like data backup, file-sharing, remote management, online syncing. These services are needed to operate Bill’s business. The employees can utilize IDrive’s services to store and update information on purchase orders, packages, delivery, payments and so on.

    In order to to assure the security of the applications in the cloud, high level controls like encryption, strong authentication, incident response plan, risk management, proper governance should be in place and implemented adequately. Doing so can provide reasonable security to the information.

  15. there are many cloud service provider in the market, they offer different functions, accessibility, and pricing.
    i would suggest both microsoft azure and amazon web service. Try both and then figure out which on works best for the organization. i would require features and services for system customization, integrated storage, virtual network. for the service security, i would suggest a third party cloud service security management service and help with the security management of the system, which can provide throughout and professional security cover

    • I agree with you, Xiaozhou. Both cloud computing and cloud-based operating platform are essential for most small business owners, including On The Spot courier company. Amazon Web Service (AWS) will help the courier to calculate the best routine while they are delivering the packages. Also, managing the packages in the courier’s warehouse could also need cloud computing for a better package schedule. Microsoft Azure can provide a cloud platform for companies to customize their own demand for computer configuration based on different type of business.

  16. The concept of cloud is raised by John McCarthy as a “public utility” it was used for military at the beginning. After the population of the internet, the cloud computing become possible. In 2006 Google’s CEO Eric Schmidt introduced the term “cloud computing” Since then, Google and IBM are keeping provide the cloud service until today. The Microsoft and google are famous for their office service, which indeed change our working behaviors and make the long distance working become possible. The key implement of cloud service are real time and multiple ends. I do believe both companies did a good job on this parts. To ensure the security of the applications on the cloud we need to prepare for the shared vulnerabilities, take care of the authentication, identifications and issues; keep the DDoS service in place; backup the important data offline to in case.

  17. As a courier company, On The Spot may need different types of cloud service. Initially, calculating the fastest routine for a truck driver is always an important job. Under this circumstance, Amazon Web Service (AWS) can provide enough computing resources for On The Spot to achieve an economic and quick delivery service. On the other hand, creating an operating environment in the cloud may help the small business owners to run their business easily. Using Microsoft Azure to build a cloud platform for running some basic applications and software can save On The Spot a certain amount of money in purchasing their own devices. Sometimes, cloud platform can provide a better security to the user since they have enough resources to manage their service.

  18. there are so many cloud service providers in the market, such as Amazon Web Service (AWS), Microsoft Azure, Google Cloud Platform, and Adobe. The different providers have different pricing and functions, I would recommend the company to try at least two vendors which are Amazon and Google because both of the company offers the best service in the industries for all size of business needs. the company should hire a consultant to evaluate the suitability and the security of the cloud vendor.

  19. Unfortunately, I cannot find the name of the specific start up delivery management systems company I found for this project. For the purpose of this post I will just call them mapply I. I would use a combination of mapply and Google cloud services. Mapply is an interesting start up cloud business that helps with route logistics including delivery In in the most efficient manner possible. The company actually helped do this for fedex. I would use a combination of this company and Google cloud in part because I believe Google cloud would just be cheaper. They have a lot of similar feature as AWS. Even if it doesn’t offer of the services directly it definitely have the capability of finding a solution that involves mapping out routes logistics and incorporate these into our website and billing system that allows the business to function. If AWS was comparable in price I would probly pick that instead. Maple actually uses Amazon to a certain degree. The only reason I don’t go with AWS is, in fact because of cost.

  20. Depending on cost I would use AWS or Google cloud services for the security aspect of this question. As a large multi billion dollar cloud service provider either of these companies would have invested a great deal of money into security. More importantly I believe these 2 companies would be only some of the handful that are actually engaging and prepared to deal with the next generation of issues security issues with the cloud. I imagine it would be more expensive then going with a smaller security service or in house solutions. In the end I think paying the extra cost for the ease of use and secure nature of their systems it’s worth it.

  21. Microsoft Azure cloud services is a reliable cloud service provider. On the Spot Courier needs to provide web services to clients so that they can request package pickup and delivery. They could use Microsoft Azure’s platform as a service which provides a website hosting service. On the Spot Courier services can not only develop and customize their web applications but they also benefit from the open source applications available. Having the digital services supplied by azure would be a great tool for the organization to have to update package details as well.
    I would make sure that the information of the security of the information by adhering and complying with the following regulatory standards; Cybersecurity Framework base on NIST, International Organization for Standardization (ISO), Control Objectives for Information and Related Technology (COBIT) aligns IT with strategic business goals (ISACA 2015), and the Payment Card Industry Data Security Standard (PCI DSS).

  22. The cloud I use is baidu cloud. It provides different Windows servers and users can install many Windows systems on the PC. This can also provide the PC with additional storage space through cloud services. This service is important because cloud storage can be huge and cheap. In addition, if certain applications cannot be used on other systems, Baidu can install Windows on the same PC to make the application available. For example, some applications cannot run on Mac systems, so Apple users can use baidu cloud to solve this problem. In addition, safety is very important. The password should be based on a specific format setting. This is difficult for hackers to guess. The password should not be the same as the password on the PC. This is good for information security.

  23. If I were to use cloud services for a company I would probably go with Microsoft Azure. I previously worked with this program a few months ago. It is not the fastest or most efficient service, but it gets the job done. With the service I could use virtual machines to conduct my business and other Microsoft services so that my work would go smoothly. It would also be convenient with multiple other people because files would easily be shared. Using various security frameworks and measures will assure that the system is secure.

Leave a Reply