Cloud Hosting

LONDON, July 13 (Reuters) - Cloud computing providers to the financial sector can be "secretive", and regulators need to act to avoid banks' reliance on a handful of outside firms becoming a threat to financial stability, the Bank of England said on Tuesday.

Banks and other financial firms are outsourcing key services to cloud computing companies such as Amazon (AMZN.O), Microsoft (MSFT.O) and Google (GOOGL.O) to improve efficiency and cut costs, with the trend accelerating last year as the COVID-19 pandemic unfolded.

The BoE said cloud computing could sometimes be more reliable than banks hosting all their servers themselves. But big providers could dictate terms and conditions - as well as prices - to key financial firms.

"That concentrated power on terms can manifest itself in the form of secrecy, opacity, not providing customers with the sort of information they need to monitor the risk in the service," BoE Governor Andrew Bailey told a news conference. "We have seen some of that going on."

Bailey did not name specific firms he had concerns about.

Earlier, the BoE's Financial Policy Committee said additional policy measures were needed to mitigate financial stability risks in cloud computing.

"In terms of the standards of resilience and the testing of those standards of resilience, frankly we will have to roll some of that back, that secrecy that goes with it. It's not consistent with our objectives," Bailey said.

Bailey said the BoE understood cloud providers' desire not to reveal too much publicly about their operations, in case it opened the door to cyber-attacks, but that the firms needed to give more information to regulators and customers.

"We have got to strike a balance here," Bailey said.

Google Cloud said cloud's benefits had come into full view during the pandemic, and it welcomed further discussion with policymakers on areas raised by the BoE.

"We're committed to working with financial services customers and regulators to provide them with controls and assurances on risk management, data locality, transparency, and compliance," a Google Cloud spokesperson said.

Amazon and Microsoft had no immediate comment.

The BoE said it welcomed the engagement of the finance ministry and Financial Conduct Authority on how to tackle risks from cloud computing, but that a broader approach may be needed, including other regulators and overseas partners.

Additonal reporting by William SchombergEditing by Mark Potter

Our Standards: The Thomson Reuters Trust Principles.

Read the original:
Bank of England to crack down on 'secretive' cloud computing services - Reuters

The idea of computing via the cloud has become so commonplace through the pandemic that virtually no one gives it much of a thought anymore. Application suites like Office 365, Microsoft 365, and Google Workspace, communication tools like Zoom, Teams, and Webex, and even file storage services like OneDrive, DropBox, or Google Drive are all just part of how we get things done these days.

For most of us, however, the operating system through which we use these applications and access our files typically comes through the client device: Windows 10 or MacOS on PCs, iOS or Android on smartphones and tablets, etc.

With the launch of Microsofts latest cloud servicedubbed Windows 365however, Microsoft is now streaming the Windows OS and full PC experience from Microsofts Azure cloud infrastructure to any type of connected computing device, from smartphone to PC, running any major OS. Hence, the Cloud PC.

Truth be told, the concept isnt exactly newin fact, far from it. There have been numerous variations on delivering a desktop experience from powerful remote computing resources for several decades, dating back to mainframes and terminals, through thin clients and associated servers, to virtual desktops delivered over the cloud via tools like Citrix Workspace.

In fact, Windows 365 is essentially a simplified version of Microsofts Azure Virtual Desktop offering (which will continue). Win365 is designed for what the company described as the 80% of organizations that are interested in desktop virtualization-type services but lack personnel with the very specific skills necessary to run sophisticated VDI environments.

One other important point of clarification is that Microsofts current concept of a Cloud PC is not a physical devicethough those are likely to come in the futurebut rather a cloud-delivered PC experience. The concept of a cloud PC has been bandied about by numerous PC and chip makers for many years. We may finally see future hardware designs that are optimized for the cloud-delivered desktop experience offered by Windows 365, but not with the initial launch.

Windows 365 serves a full Microsoft Windows experience including personal apps, data and settings from the cloud to any device with an internet connection. Image courtesy of Microsoft.

What Windows 365 does offer is an easily configurable, flexible way to let people working for businesses, schools, and other organizations to run a consistent Windows experience across whatever devices they have access toeven a regular Windows PC.

The basic concept is that these organizations can create standardized Windows 10 desktop environments (or Windows 11 once it becomes available later this year), complete with the necessary applications, settings, security protocols, and file access needed, and then make these standardized environments available to whatever groups of workers desired for whatever time frame desired.

Unlike previous virtual desktop-based solutions, however, Windows 365 keeps the process of configuring these cloud PC desktops simple, by limiting options to a few key choices. People who need to access these resources can then launch a simple application on whatever devices they have available and get access to their cloud-delivered Windows desktop. If they switch to another device or start working from another location, the experiencedown to the backgrounds, open windows, etc.remains consistent.

For organizations with seasonal workers, project-based temps, etc., this is obviously an ideal solution, because it lets these organizations turn on and turn off access to applications, shared files, etc. on an as-needed basis.

Even businesses that dont have these kinds of part-time employees can benefit by virtue of things like letting employees use personal devices to access their work resources in a secure, separated way. In addition, there are options to essentially provide super-powered PCs remotely to workers who need them for demanding applications like 3D modelling, graphic design, coding, etc.

By essentially providing access to more cloud-based computing resources (through the simple Endpoint Manager console that Microsoft provides admin access to as part of the Win365 offering), some users can get access to more computing power than they could get from even the most well-configured local PC. In fact, Microsoft has added what they call a new Watchdog Service thats constantly monitoring the performance of all Windows 365-connected systems and can provide tools and suggestions on how to fix any issues that may arise.

Despite these assurances, veterans of previous VDI technologies may raise performance-related concerns, because there have certainly been many employees who suffered slowly and painfully through poorly configured virtual desktop solutions in the past. In order to address that, Microsoft said that one other key change it is making with Windows 365 is essentially widening the pipe between the client device and cloud-based computing resources.

Obviously, the speed, quality, and consistency of any broadband connection between a given device and the internet is going to have a potentially even more profound impact on performance, but Microsoft claimed that it has optimized the client-to-cloud connection for Windows 365 to ensure a high-quality experience.

The company has also made several important security enhancements, including a number of simplified baseline settings that leverage tools like Microsoft Defender. In addition, the company claims its security policies are built around zero trust and least privileged access principles, while also offering support for multi-factor authentication through Azure Active Directory (AD). From a device management perspective, the revised Endpoint Manager console lets Cloud PCs and physical PCs be managed side-by-side in an intuitive manner, making it approachable even for small businesses with limited IT resources.

Given the growing use of other cloud-based computing servicessuch as Microsofts own OneDriveits certainly easier now for workers to navigate the potential complexities of hybrid working environments than it has been in the past. Still, for many organizations, those types of capabilities simply arent enough, and the need for an even more flexible and far-reaching service like Windows 365 makes a great deal of sense.

Cloud-delivered virtual desktops have proven to be a very effective tool for many more advanced IT organizations throughout the pandemic. They also appear to be a powerful starting point as we enter the new world of hybrid work. Previous complications have certainly limited the use of virtualized desktop systems up until now, so its good to see Microsoft bring these Cloud PC-based computing models to a wider audience with Windows 365.

Bob ODonnell is the founder and chief analyst of TECHnalysis Research, LLC a technology consulting firm that provides strategic consulting and market research services to the technology industry and professional financial community. You can follow him on Twitter @bobodtech.

Read the original here:
Microsoft Windows 365 moves your PC to the cloud - TechSpot

As companies assess their current technology infrastructures and look for new ways to tackle the rigors of the current business environment, more and more of them are turning to the Cloud.

Whether theyre replacing existing, on-premises supply chain software or simply looking to add newer, more modern functionalities, these companies are tapping into Cloud delivery models. Promising faster implementation times, cheaper upfront costs, and less reliance on internal IT teams, these solutions are now being fully embraced by both shippers and software vendors alike.

Supply chain organizations are in good company. According to Accenture, the global Cloud services industry has been growing year-over-year since 2010 and is now worth $370 billion (as of 2020). It says worldwide spending on public Cloud services is expected to grow by 18.4% this year, driven in part by the move to more remote worka shift that requires more flexible, Cloud-based software.

Calling 2020 a pivotal year for the Cloud, Accenture says it played a lead role in facilitating remote work solutions. According to Accenture, the Cloud has become an essential part of continuing business and is the key to unlocking organizational growth.

A software sector that has been gradually moving into the Cloud for over a decade now, supply chain management (SCM) handles a broad range of functions for logistics and supply chain operators. Under that umbrella, supply chain execution (SCE) manages activities like warehouse management (WMS), procurement, transportation management (TMS), global trade management (GTM), yard management (YMS), and labor management (LMS), among others.

Also encompassing supply chain planning (SCP) solutions, SCM touches most links in the typical, end-to-end supply chain. Within that realm, Bart De Muynck, vice president of research at Gartner, says Cloud SCM has experienced steady growth over the last four years.

Consider this: In 2017, De Muynck says software as a service (SaaS) comprised about 30% of all new SCM implementations, with the remainder being on-premises installations. By 2022, he predicts that ratio will flip, as SaaS implementations will outnumber on-premises installations.

Certain market segments within SCM will move to the Cloud faster than others. According to De Muynck, roughly 62% of all new procurement implementations will take place in the Cloud by 2022, versus a current 40%and around 30% in 2017. He says SCE solutions will follow a similar pattern, having grown from being 30% in the Cloud in 2017 and now on track to exceed 50% Cloud implementations by 2022.

Some of the drivers are economic in nature. With companies watching their spending right now, capital expenditures (capex) are taking a backseat to operating expenses that are quick-to-value and less resource constrained. At the same time, quick, easy implementations have taken precedence over long, drawn-out on-premises software implementations. Companies are deferring their larger, capex software investments that take a long time and that consume a lot of resources, says De Muynck. Those have been put on hold.

De Muynck says that other key market drivers right now include the need to replace legacy on-premises warehouse management systems. We still see a high number of companies with warehouse systems on premise, in a server room in the back of their warehouses, says De Muynck, who adds that some shippers are reluctant to move that data out into the Cloud. Convincing a business to take a box thats physically sitting in its warehouse and put it in a centralized locationlet alone into the Cloudcan be difficult.

Transportation management, on the other hand, has historically been one of the most Cloud-first SCM applications. To operate most effectively, TMS must be able to connect to many different carriers, trading partners, and even customers. As a result, this corner of the SCM market tends to be one of the biggest drivers of overall supply chain software Cloud adoption. This, in turn, has helped drive innovation within the segment, as new vendors come on the scene and find new ways to help shippers leverage the Cloud.

Established in 1896, Castelliniis a U.S. distributor of fresh produce that provides next-day shipping and cold storage options. With foodservice operations and wholesale locations in Wilder, Ky., and Conley, Ga., the company is the largest distributor of organic produce east of the Mississippi River.

An enVista customer since 2014, Castellini looked to enVistas team to implement a Cloud-based warehouse management system (WMS) to replace its existing, mature system. As the company continued to grow, it needed a best-in-breed WMS that would enable greater flexibility and better service for its customers, as well as offer a competitive edge in the market.

With these specific needs in mind, Castellini selected Blue Yonder for its WMS and engaged enVista for implementation in early March 2020. EnVista created a plan for Castellini within a week of the initial conversation, prior to COVID-19.

As uncertainty surrounding the pandemic grew and restrictions were put into place throughout the country, mid-March became an ideal time to begin the project to provide the distributor with greater flexibility and enhanced service for its customers during the pandemic.

The enVista and Blue Yonder teams worked to create a seamless integration from Castellinis existing, on-premises WMS. Due to restrictions, enVista restructured its methodology to collaborate with both Castellini and Blue Yonder and effectively use tools and technology to ensure success. As a result of this restructure, 90% of the project was done remotely.

At the same time as the Cloud WMS implementation, Castellini also upgraded its enterprise resource planning (ERP) system, adding a new level of communication needed to ensure a seamless go-live. EnVista channeled its expertise and proper implementation methodology to help the distributor ensure the WMS was fully tested against the right systems with the right data.

Training was also provided by enVista to help ensure that the distributor could be self-sufficient post implementation. By ensuring the correct training and education was delivered to the right users from Castellinis team, the company has remained self-sufficient after the system has been implementedthereby reducing the potential need for outsourcing or system errors and ensuring it can successfully prioritize resources.

The key factors for choosing to work with enVista were their in-depth knowledge, dedication to our needs and requirements, as well as their ability to supply Castellini with innovative supply chain solutions that has transformed our entire business, says Dan Taylor, Castellinis CIO.

Some vendors have made TMS much easier and cheaper to implement and use, and this has driven up the use of Cloud-based TMS, says De Muynck, who points to the new crop of last-mile, rail management and fleet management software solutions as a few examples of the latest vendor innovations in this arena. Were seeing software providers developing Cloud-based solutions that are fairly reasonably priced and that can be live within 30 days, in some cases.

Over the last year, William Brooks, vice president of the North American transportation portfolio at Capgemini, says he has seen more customers asking for Cloud-based SCM systems. That interest reached new heights during the pandemic, as companies worked to shore up their supply chain operations, manage remotely, and fully leverage their technology investments.

Cloud adoption is continuing its strong growth trajectory, says Brooks. I dont see any letup in sight.

At least some of that growth is being driven by the fact that the Cloud is now viewed as a tested and proven software delivery method. Past stigmas concerning data security and the possible loss of control that comes when the Cloud replaces on-premises servers have been dispelled by the 92% percent of organizations whose systems were already at least somewhat in the Cloud as of 2020, according to a recent InfoWorld survey.

Companies are more educated on the Cloud, have tested its waters, and realize that it really does work as advertised, says Brooks. And because of that, the Cloud is becoming more and more mainstream. Those converted organizations also like Cloud softwares lower upfront costs, the fact that it doesnt consume internal IT resources, and because it can be scaled up easily as a company grows.

Knowing this, SCM vendors have steadily started offering more Cloud-based solutions. Some have made Cloud their core product offerings, says Brooks, and are using pre-built integrations and application programming interfaces (APIs) that allow shippers to hook those applications back into their existing, on-premises systems.

Clint Reiser, director of supply chain research at ARC Advisory Group, says the big news on this front for 2020 was the introduction of Manhattan Associates Active WMS, a Cloud- native platform comprised of microservices architecture.

According to Manhattan, these platforms connect different applications (the microservices), each of which runs a unique process. In retail, for example, these applications may include order management, point of sale, inventory management, and fulfillmenteach of which contributes to the overallcustomer experience.

In 2021, Manhattan followed up with its Active TMS solution, which takes a similar approach with transportation. Reiser sees this as a key development in the push to create even more advanced, Cloud-based SCM solutions. Manhattan built these solutions using different, interchangeable widgets [microservices], says Reiser. This isnt just a lift and shift to the Cloud; the platform is designed on a different infrastructure.

Put simply, the software developer didnt just move its existing WMS and TMS into the Cloud, it completely rearchitected the technology within the microservices environment. De Muynck says this allows shippers to more easily use the solutions, which can be acquired on a microservice by microservice basis. Its also makes it much easier for vendors to extend their solutions capabilities, he adds.

Asked whether he thinks other SCM vendors will follow Manhattans lead on the microservices front, De Muynck says those that are starting from scratch may naturally move in this direction. Established vendors may have to rethink their current application stacks if they decide to move in the microservices direction.

From the vendor perspective, Reiser says increased Cloud adoption has helped provide stability for the WMS market over the last three years to four years. In other words, even companies that backburnered their large capex investments and on-premises software implementations have been willing to give Cloud a try.

In response, vendors have created more Cloud offerings, effectively stabilizing the revenues of the market, says Reiser. A percentage of the marketplace has moved to SaaS, so now there arent as many vendors that rely on the software portion of their revenues, he continues. This trend has also stabilized the vendors relationships with their own customers.

With no end in sight to Clouds domination in the supply chain software arena, expect to see new innovations, functionalities, and capabilities hitting the market in 2021 and beyond. As companies continue to emerge from the pandemic and continue their digitalization journeys, De Muynck says that more of them will be seeking Cloud-based solutions that incorporate artificial intelligence (AI), real-time visibility and advanced analytics capabilities.

The pandemic-related disruptions that have taken place over the last 16 months have suddenly made these needs much more acute, says De Muynck. As a result, companies are investing in these different technologies within the logistics space, where the race is on to get these digital capabilities in place.

Visit link:
2021 State of the Cloud: No end in sight - Logistics Management

The good news is that you dont need to take on everything at once. In fact, we suggest you dont.

We find that most organizations start strong when they adopt PAM getting a vault set up and domain passwords and local shared accounts under control. Then, they start to get complacent. They stagnate on their journey somewhere between stages two and three.

Most organizations start strong then stagnate somewhere between stages two and three.

Meanwhile, the organization keeps growing and the IT environment gets more complex and difficult to manage Service accounts proliferate, unchecked. Identities multiply and become siloed in Active Directory, LDAP, etc. This is especially true for Linux systems in the cloud, with no centralized management like AD. Cloud platforms like AWS have their own IAM services, which leads to more siloed accounts.

Just as technology mushrooms, the number of privileged users grows exponentially. Business users adopt more applications without IT management, engineering teams spin up more systems, and developers store passwords in libraries and code.

Cyber criminals are getting more sophisticated and emboldened all the time.

To protect your growing attack surface, you cant hold your organization at the Basic stage. The jump to Advanced is an important one and its manageable. Lets break it down.

Fundamentally, the Advanced stage of PAM maturity is about implementing a Zero Trust model founded on the Principle of Least Privilege (PoLP). With this approach, users and systems should only have the access and permissions they need to do their jobs, nothing more.

Traditional password vaults offer a basic level of control and fundamental security benefits. Password theft, however, is only one step in a cyber criminals attack chain. Should an attacker successfully gains access to a system, they will also need the ability to export data without detection, so they can sell it on the black market or ransom it off. To further secure your organization, and mature in your PAM program, privilege elevation solutions should be used. This will allow you to assign admin rights to individual tasks, applications, or scripts that require them for a granular level of control.

There are two parts of your attack surface where maintaining least privilege is essential for a strong security posture: user workstations and servers. In both situations, privilege elevation capabilities allow you to easily assign or revoke privileges for a specific period, providing just-in-time, just-enough access when admin control is absolutely necessary.

The rest is here:
Privilege Elevation for Workstations and Servers - Security Boulevard