SaaS: Is security still under a cloud?

by thomas 20. August 2009 22:07
Security of data, especially financial information seems to be the biggest concern of business owners and leaders when it comes to employing cloud applications. Here are a couple of comments from professional accountants when asked if they would consider moving from their current on-premise applications to on-demand applications delivered on the internet.

"As a user I would be concerned with security, especially payroll and customer financial information and the liability if the data gets out. I would also be concerned if you did not pay your bill this month would you lose access to all your data. For me there are too many potential problems at this time and so I will not be using cloud systems even if the data stays on my machines."

"I suspect that the micro companies I deal with will stay with desktop accounting programs (as will I). I think unless you have a T-1 type internet connection, connection speed and reliability will be an issue. I also wonder about security, in spite of assurances of adequate safeguards."

I recently heard someone say how security is sometimes a notional concept. When I am in the confines of my house or neighborhood, I tend to feel more secure than if I were inside Fort Knox. This has to do with familiarity more than fact. My sense of security is driven by the familiarity I have with my environment, the people I see and trust day in and day out, as opposed to my general unfamiliarity within Fort Knox. It perhaps is an interesting exercise to go look at the assurances that on-demand service providers give. Granted, accountants may not fully understand or trust these as yet, but business owners and leaders seeking strategic advantages can put their minds to it and evaluate their choices. Approaches to security spread across the following:

  • Industry standard tools: SSL (Secure Socket Layer), two factor authentication and strong access controls. Option of encryption of data for additional fee.
  • Security frameworks and programs: based on or modeled after ISO 27002, CoBIT (Control Objectives for Information and related technologies)
  • Physical controls : Restricted and limited access to personnel. Only those working with production systems can gain access, that too on limited period engagements with tight controls.
  • Audits: SAS 70
  • Contractual Guarantees: eg:NDAs. 
  • Disaster recovery plans
  • Housekeeping: Periodic data back-up for offline storage.

In my next post, I would like to examine the assurances given by some of the industry leaders like NetSuite, Intacct and Bill.com 

Currently rated 4.5 by 2 people

  • Currently 4.5/5 Stars.
  • 1
  • 2
  • 3
  • 4
  • 5

Tags: , , , , ,

Corporate Values and Security | SaaS and Cloud based services

Leading with Affection

by thomas 4. August 2009 20:11

I recently came across these words from J R D Tata, who is regarded as the doyen of industry in India. "If I have any merit, it is getting along with individuals according to their ways and characteristics. At times it involves suppressing yourself. It is painful but necessary. To be a leader, you have got to lead human beings with affection"

And in a separate event, a slide that stood out for me was the one that pointed out that for improving efficiencies you count on technical skills, for enhancing value you count on business skills and for bringing about transformation, you count on behavioral skills.

A leader cannot escape the need to develop high sensitivities toward the people he influences. Understanding their ways and characteristics, as Tata pointed out, is important. I would like to think that this is more about character than methodology. The golden rule that Jesus Christ laid down - "Do unto others as you would like others to do unto you" is an apt behavioral competence to build such character. And down that lane one soon starts to grapple with the paradox that a true leader is actually a servant.

Currently rated 5.0 by 1 people

  • Currently 5/5 Stars.
  • 1
  • 2
  • 3
  • 4
  • 5

Tags:

Corporate Values and Security

Managing Productivity towards better Performance

by thomas 7. July 2009 01:46

Introduction of Performance management systems in Small and Medium businesses has often been contentious. While these businesses boast of loyalties promoted by trust and relationship, the challenge has been with infusing professionalism and objectivity. 

However, when accounting and bookkeeping or other corporate finance functions are smartsourced (The key to SmartSourcing: Team and Workflow Design) to ThomasandAlex, it presents a wonderful opportunity to introduce a highly objective system that focuses on throughput and productivity. The supersensitivity for cost and value has been set forever by the recession. Management by productivity and throughput becomes the key lever for regulating cost and value. This is an essential competitive advantage that small and medium businesses can no longer ignore. 

The productivity tracking system is set up together with the customer and pricing is calibrated to this system. From our experience we have found that it is best for the system to evolve through these stages. 

 

  1. To keep the risks low initially for the customer, engagement begins with a dedicated resource on a full time or part-time equivalent basis
  2. Workflow definitions are achieved and transition of processes to this accountant completes
  3. A productivity system is set up for these processes. Throughput measures are outcome focussed and typical measures would be transaction volumes, quantity and type of documents  processed etc.
  4. Baselines are marked for current processes as well as other potential processes that can be smartsourced. These are based on measurements agreed jointly with the customer.
  5. From this point onwards, scalability of engagement is on the basis of productivity. 
Without significant impact to its culture, a small and medium business can now play the game in the premier league and reap advantages that their big brothers are familiar with. If you are ready to consider this for your business, contact us and we will be happy to serve you.

 

 

Be the first to rate this post

  • Currently 0/5 Stars.
  • 1
  • 2
  • 3
  • 4
  • 5

Tags:

Corporate Values and Security | Remote Engagement | Service Update

Powered by BlogEngine.NET 1.4.5.0
Theme by Extensive SEO

RecentPosts