Click here to close now.


Government Cloud Authors: Elizabeth White, Pat Romanski, Liz McMillan, Kevin Jackson, Bob Gourley

Related Topics: Cloud Security, Containers Expo Blog, Agile Computing, @CloudExpo, Government Cloud

Cloud Security: Interview

Exclusive Q&A with Rich Marcello - Unisys President, Systems & Technology

Security is a big concern as well as privacy of the data once it leaves a client's data centers

Unisys announced in September a four-part cloud computing strategy that will enable clients to move their enterprise application workloads securely to tailored cloud environments and give them confidence in maintaining the integrity of their critical information.

In this Exclusive Q&A with Cloud Computing Journal in the run-up to SYS-CON's 4th International Cloud Computing Conference & Expo (November 2-4, 2009) - Cloud Expo Conference Chair Jeremy Geelan speaks with Rich Marcello - Unisys President, Systems & Technology - about the Unisys Secure Cloud and sets the scene for the upcoming Unisys Cloud-in-a-box.

Cloud Computing Journal: Starting at 35,000 feet, what overall relationships does Unisys see between cloud computing and the increasingly real-time needs of today's enterprise?

Rich Marcello: I believe that  cloud computing will revolutionize the way enterprises obtain IT and business services because of a number of converging factors - 1) the economy has forced enterprises to rethink their traditional cost models and minimize their capital expenditures in favor of pay-as-you-go models, 2) the need for anywhere, anytime IT since data sets continue to grow exponentially, and 3) the  shift in the way IT works with,  for example,  virtualization and automation,  which enable cloud computing.

Cloud Computing Journal: So cloud computing isn't just a buzzword, it's actually a glimpse of the future of enterprise IT so far as you are concerned?

Rich Marcello: Absolutely.  When you think about "IT as a service", ease of delivery, access from anywhere at anytime, the ability to have a totally flexible IT infrastructure, and the cost benefits of a subscription or pay as you go model, you realize very quickly cloud computing, in any of its forms (internal, external, hybrid) is here to stay.

Cloud Computing Journal: I understand, though, there are some concerns with moving to the Cloud.

Marcello: That's right. Security is a big concern as well as privacy of the data once it leaves a client's data centers and the ability of a cloud provider to meet the client's compliance requirements.  Additionally, there's concern about whether or not a client's applications can be moved to the cloud without rewriting them.  Unisys addresses each of these concerns with Unisys Cloud Computing Strategy and solutions portfolio announced June 30, 2009.

Cloud Computing Journal: Tell me more about this new Strategy and what it means to your clients.

Marcello: We announced a four-part cloud computing strategy that will enable clients to move their enterprise application workloads securely to tailored cloud environments and give them confidence in maintaining the integrity of their critical information.  We're delivering on the first two parts this year beginning with our June 30 announcement and the availability of our Cloud Transformation Services, followed by our Unisys Secure Cloud Solution available on July 31.  Our "Cloud-in-a-box" solution planned for later this year is a comprehensive IT infrastructure package that will enable quick and cost-effective implementation of a private cloud.  We also plan to deliver hybrid cloud technologies early next year that will provide the best of managed and dedicated services by combining public and private cloud capabilities.
Our comprehensive Cloud Transformation Services include Advisory and Assessment services that can provide our clients with strategic guidance on how best to move to the cloud.

Cloud Computing Journal: How are you leveraging your breadth of Enterprise IT experience?

Marcello: We believe our strong heritage in Data Center Transformation and Outsourcing is foundational to cloud computing - you can't begin to offer a cloud computing solution unless you understand the data center and are true experts.  We've been helping clients transform their data centers and make the right IT sourcing decisions for a long time by leveraging our services, technology, and outsourcing capabilities so they can achieve maximum return from capital expenditures, reduce operating expenses, and increase business performance.  Our heritage of experience and innovation combined with our independent thinking, innovative infrastructure and sourcing capabilities deliver data center solutions that are secure, productive and reliable.  We see all of this as a key advantage over other cloud providers who are just entering this market.

Cloud Computing Journal: How big an issue is security for enterprises who wish to migrate toward this kind of an infrastructure wholly or in part?

Marcello: As I mentioned earlier, security is the biggest barrier to cloud adoption as cited by organizations and industry analysts, as well as our own clients in a recent survey we conducted.

When it comes to security in a cloud it's really about the workloads and how clients can confidently move them to the cloud.  A lot of vendors talk security in the cloud but we've tackled this issue head-on and believe we have an advantage.  Security is inherent in all Unisys operations and offerings and, like Data Center Transformation and Outsourcing, is one of Unisys four key areas of strength.

We address security by ensuring operational excellence.   Unisys Secure Cloud services teams operate ISO 20000-certified delivery processes that are ITIL V3-compliant.  All of this protection is delivered in independently audited and ISO 270001-certified delivery centers. We utilize security best practices - a layered multi-vendor approach to security with Intrusion Detection and Prevention Services (IDPS), firewall management, 24x7 security monitoring, advanced correlation and analytics, auditable logs, and so forth.

From a cloud perspective, our commitment is to provide a security framework that is as good as or better than any clients could establish for themselves.  We do all of this and more with the addition of our patent-pending Stealth technology that allows private communities of interest based on FIPS 140-2, 256-bit Advanced Encryption Standard (AES) encryption and cloaks the data with proprietary "bit splitting".   Unlike other approaches to security, Unisys Stealth is very simple to deploy and does not require rewriting applications.  We believe this is a key differentiator as Stealth technology allows different groups in a multi-tenant client environment to share the same IT infrastructure without fear of exposing one client's data to another, and there's no need for the client to rewrite the applications it chooses to move to the cloud.

Cloud Computing Journal: What kinds of applications need security that your cloud offers?

Marcello: Clients who have workloads that require application, database or user security will have exposure if they put such workloads onto an unsecured cloud service.  Consequently, today companies are primarily using unsecured cloud services for workloads that have few security needs, such as Application Development and Testing or basic Web services, along with some less secure email workloads.

With Unisys Secure Cloud, you can move conventional business applications that contain patient data, employee, financial, or customer information, or document management or disaster recovery applications to the cloud environment.  In addition to security, most of these applications tend to require quite a bit of IT infrastructure and staff time to manage even though they tend to run in spurts and are quite cyclical or the workloads can dramatically vary in size from one period to the next.  For example, they may only run at the end of day, end of week, month, or year.  Some good examples are: Budgeting and planning; or HR systems like employee self-service, or time reporting.  Retailers have massive swings in system demand from one season to the next and need flexible capacity.  IT also has workloads that are cyclical in nature, including back-up, disaster recovery, and quality assurance, each of which has very high security requirements.   And, most of the time they are not using all of the hardware dedicated to them. This is why the average enterprise server utilization is only 5-10%. Think of the savings in capital and IT operations if these applications could be moved to a cloud service where you only pay for what you use.

Lastly, large OLTP-based workloads, or ERP systems or web store fronts are the most critical applications for your business.  If you are a manufacturer, it could be your order, inventory and supply chain systems; for banks, it's core systems like deposits, transfers, etc;  for airlines it would be the reservation systems. When these go down, the business is all but dead. Therefore, these are the kinds of systems that make sense to continue to invest in traditional, in-house IT infrastructures. Because these kinds of workloads tend to run nearly all the time, it makes good economic sense to buy the infrastructures to support them.

Cloud Computing Journal: How would someone decide if cloud computing is right for their business and which workloads to move?

Marcello: It's really about understanding what makes the most business sense for the client and what they are trying to accomplish.  As part of the June 30th announcement, we have Unisys Cloud Transformation Services, available now, which allow clients to plan and migrate to the type of cloud environment that best meets their business goals.  These services help clients assess what application workloads can be moved to the cloud, how that can be done, and the technology, financial and security implications of their choices.

Cloud Computing Journal: How about virtualization and automation, where do they fit in the big picture?

Marcello: These are fundamental to cloud computing and for Unisys, our Real-Time Infrastructure technology powers our cloud.  Virtualization is an enabler that helps us supply only the needed amount of IT resources based on the workload demand of the business at any given time.  Automation adds elasticity to the environment, reduces the time needed for changes, and eliminates or at least simplifies the manual intervention in a potentially rapidly changing environment.

Cloud Computing Journal: And what kinds of governance and service management tools does the enterprise need?

Marcello: From a service management perspective, many vendors operate as siloed mechanisms.  Unisys, on the other hand, has built into our secure cloudware stack an integration layer that enables us to interface with our clients' service management framework as well.  The virtual data center, regardless of the location of the resources, is managed seamlessly.  Unisys makes it look like one holistic environment. A key point to keep in mind is how hard it is for any IT organization to develop world class governance and service management.  With Unisys Secure Cloud Solution and "Cloud in a Box" we have developed a broad set of ITIL best practices, which are fully automated, and which allow us and our clients to run a very efficient IT infrastructure. With this, a lot of automation occurs, and this can save money by minimizing manual tasks, reducing errors, and getting much higher utilization rates.

Cloud Computing Journal: What verticals among your customers are leading the adoption of the Cloud?

Marcello: We're getting a number of inquiries from a broad range of Unisys clients in telco's, financial institutions, transportation, and the public sector as well as partners who are interested in Unisys hosting their solutions within our Secure Cloud.

Cloud Computing Journal: What does Cloud Computing have to offer to mid-tier enterprises?

Marcello: Cloud computing is compelling for mid-tier enterprises since it minimizes the need for capital expenditures as well as lowers the need for on-going operational support.  They will be interested in our Secure Cloud Solution, especially secure Software as a Service (SaaS).

Additionally for those clients who want to build an internal cloud, the Unisys Cloud-in-a-box that we'll deliver later this year will be a cost-effective, simplified cloud deployment alternative.

More Stories By Jeremy Geelan

Jeremy Geelan is Chairman & CEO of the 21st Century Internet Group, Inc. and an Executive Academy Member of the International Academy of Digital Arts & Sciences. Formerly he was President & COO at Cloud Expo, Inc. and Conference Chair of the worldwide Cloud Expo series. He appears regularly at conferences and trade shows, speaking to technology audiences across six continents. You can follow him on twitter: @jg21.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.

@ThingsExpo Stories
In his session at @ThingsExpo, Tony Shan, Chief Architect at CTS, will explore the synergy of Big Data and IoT. First he will take a closer look at the Internet of Things and Big Data individually, in terms of what, which, why, where, when, who, how and how much. Then he will explore the relationship between IoT and Big Data. Specifically, he will drill down to how the 4Vs aspects intersect with IoT: Volume, Variety, Velocity and Value. In turn, Tony will analyze how the key components of IoT influence Big Data: Device, Connectivity, Context, and Intelligence. He will dive deep to the matrix...
When it comes to IoT in the enterprise, namely the commercial building and hospitality markets, a benefit not getting the attention it deserves is energy efficiency, and IoT’s direct impact on a cleaner, greener environment when installed in smart buildings. Until now clean technology was offered piecemeal and led with point solutions that require significant systems integration to orchestrate and deploy. There didn't exist a 'top down' approach that can manage and monitor the way a Smart Building actually breathes - immediately flagging overheating in a closet or over cooling in unoccupied ho...
The enterprise is being consumerized, and the consumer is being enterprised. Moore's Law does not matter anymore, the future belongs to business virtualization powered by invisible service architecture, powered by hyperscale and hyperconvergence, and facilitated by vertical streaming and horizontal scaling and consolidation. Both buyers and sellers want instant results, and from paperwork to paperless to mindless is the ultimate goal for any seamless transaction. The sweetest sweet spot in innovation is automation. The most painful pain point for any business is the mismatch between supplies a...
Mobile messaging has been a popular communication channel for more than 20 years. Finnish engineer Matti Makkonen invented the idea for SMS (Short Message Service) in 1984, making his vision a reality on December 3, 1992 by sending the first message ("Happy Christmas") from a PC to a cell phone. Since then, the technology has evolved immensely, from both a technology standpoint, and in our everyday uses for it. Originally used for person-to-person (P2P) communication, i.e., Sally sends a text message to Betty – mobile messaging now offers tremendous value to businesses for customer and empl...
SYS-CON Events announced today that ProfitBricks, the provider of painless cloud infrastructure, will exhibit at SYS-CON's 17th International Cloud Expo®, which will take place on November 3–5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. ProfitBricks is the IaaS provider that offers a painless cloud experience for all IT users, with no learning curve. ProfitBricks boasts flexible cloud servers and networking, an integrated Data Center Designer tool for visual control over the cloud and the best price/performance value available. ProfitBricks was named one of the coolest Clo...
“The Internet of Things transforms the way organizations leverage machine data and gain insights from it,” noted Splunk’s CTO Snehal Antani, as Splunk announced accelerated momentum in Industrial Data and the IoT. The trend is driven by Splunk’s continued investment in its products and partner ecosystem as well as the creativity of customers and the flexibility to deploy Splunk IoT solutions as software, cloud services or in a hybrid environment. Customers are using Splunk® solutions to collect and correlate data from control systems, sensors, mobile devices and IT systems for a variety of Ind...
Organizations already struggle with the simple collection of data resulting from the proliferation of IoT, lacking the right infrastructure to manage it. They can't only rely on the cloud to collect and utilize this data because many applications still require dedicated infrastructure for security, redundancy, performance, etc. In his session at 17th Cloud Expo, Emil Sayegh, CEO of Codero Hosting, will discuss how in order to resolve the inherent issues, companies need to combine dedicated and cloud solutions through hybrid hosting – a sustainable solution for the data required to manage I...
You have your devices and your data, but what about the rest of your Internet of Things story? Two popular classes of technologies that nicely handle the Big Data analytics for Internet of Things are Apache Hadoop and NoSQL. Hadoop is designed for parallelizing analytical work across many servers and is ideal for the massive data volumes you create with IoT devices. NoSQL databases such as Apache HBase are ideal for storing and retrieving IoT data as “time series data.”
Clearly the way forward is to move to cloud be it bare metal, VMs or containers. One aspect of the current public clouds that is slowing this cloud migration is cloud lock-in. Every cloud vendor is trying to make it very difficult to move out once a customer has chosen their cloud. In his session at 17th Cloud Expo, Naveen Nimmu, CEO of Clouber, Inc., will advocate that making the inter-cloud migration as simple as changing airlines would help the entire industry to quickly adopt the cloud without worrying about any lock-in fears. In fact by having standard APIs for IaaS would help PaaS expl...
As more and more data is generated from a variety of connected devices, the need to get insights from this data and predict future behavior and trends is increasingly essential for businesses. Real-time stream processing is needed in a variety of different industries such as Manufacturing, Oil and Gas, Automobile, Finance, Online Retail, Smart Grids, and Healthcare. Azure Stream Analytics is a fully managed distributed stream computation service that provides low latency, scalable processing of streaming data in the cloud with an enterprise grade SLA. It features built-in integration with Azur...
Apps and devices shouldn't stop working when there's limited or no network connectivity. Learn how to bring data stored in a cloud database to the edge of the network (and back again) whenever an Internet connection is available. In his session at 17th Cloud Expo, Bradley Holt, Developer Advocate at IBM Cloud Data Services, will demonstrate techniques for replicating cloud databases with devices in order to build offline-first mobile or Internet of Things (IoT) apps that can provide a better, faster user experience, both offline and online. The focus of this talk will be on IBM Cloudant, Apa...
SYS-CON Events announced today that HPM Networks will exhibit at the 17th International Cloud Expo®, which will take place on November 3–5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. For 20 years, HPM Networks has been integrating technology solutions that solve complex business challenges. HPM Networks has designed solutions for both SMB and enterprise customers throughout the San Francisco Bay Area.
As enterprises capture more and more data of all types – structured, semi-structured, and unstructured – data discovery requirements for business intelligence (BI), Big Data, and predictive analytics initiatives grow more complex. A company’s ability to become data-driven and compete on analytics depends on the speed with which it can provision their analytics applications with all relevant information. The task of finding data has traditionally resided with IT, but now organizations increasingly turn towards data source discovery tools to find the right data, in context, for business users, d...
SYS-CON Events announced today that MobiDev, a software development company, will exhibit at the 17th International Cloud Expo®, which will take place November 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. MobiDev is a software development company with representative offices in Atlanta (US), Sheffield (UK) and Würzburg (Germany); and development centers in Ukraine. Since 2009 it has grown from a small group of passionate engineers and business managers to a full-scale mobile software company with over 150 developers, designers, quality assurance engineers, project manage...
The broad selection of hardware, the rapid evolution of operating systems and the time-to-market for mobile apps has been so rapid that new challenges for developers and engineers arise every day. Security, testing, hosting, and other metrics have to be considered through the process. In his session at Big Data Expo, Walter Maguire, Chief Field Technologist, HP Big Data Group, at Hewlett-Packard, will discuss the challenges faced by developers and a composite Big Data applications builder, focusing on how to help solve the problems that developers are continuously battling.
SYS-CON Events announced today that IBM Cloud Data Services has been named “Bronze Sponsor” of SYS-CON's 17th Cloud Expo, which will take place on November 3–5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. IBM Cloud Data Services offers a portfolio of integrated, best-of-breed cloud data services for developers focused on mobile computing and analytics use cases.
Learn how IoT, cloud, social networks and last but not least, humans, can be integrated into a seamless integration of cooperative organisms both cybernetic and biological. This has been enabled by recent advances in IoT device capabilities, messaging frameworks, presence and collaboration services, where devices can share information and make independent and human assisted decisions based upon social status from other entities. In his session at @ThingsExpo, Michael Heydt, founder of Seamless Thingies, will discuss and demonstrate how devices and humans can be integrated from a simple clust...
SYS-CON Events announced today that Cloud Raxak has been named “Media & Session Sponsor” of SYS-CON's 17th Cloud Expo, which will take place on November 3–5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. Raxak Protect automates security compliance across private and public clouds. Using the SaaS tool or managed service, developers can deploy cloud apps quickly, cost-effectively, and without error.
Who are you? How do you introduce yourself? Do you use a name, or do you greet a friend by the last four digits of his social security number? Assuming you don’t, why are we content to associate our identity with 10 random digits assigned by our phone company? Identity is an issue that affects everyone, but as individuals we don’t spend a lot of time thinking about it. In his session at @ThingsExpo, Ben Klang, Founder & President of Mojo Lingo, will discuss the impact of technology on identity. Should we federate, or not? How should identity be secured? Who owns the identity? How is identity ...
SYS-CON Events announced today that Solgeniakhela will exhibit at SYS-CON's 17th International Cloud Expo®, which will take place on November 3–5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. Solgeniakhela is the global market leader in Cloud Collaboration and Cloud Infrastructure software solutions. Designed to “Bridge the Gap” between Personal and Professional Social, Mobile and Cloud user experiences, our solutions help large and medium-sized organizations dramatically improve productivity, reduce collaboration costs, and increase the overall enterprise value by bringing ...