An SME perspective on Cloud Computing

November 09

Survey

europa. Moreover.eu/ . giving advice and recommendations and acting as a switchboard of information for good practices. Contact details e-mail: Daniele.hogben@enisa. the Member States and private business and industry actors.europa.catteddu@enisa. the agency facilitates contacts between the European institutions.eu. ENISA is a centre of excellence for the European Member States and European institutions in network and information security. Internet: http://www.About ENISA The European Network and Information Security Agency (ENISA) is an EU agency created to advance the functioning of the internal market.enisa.eu and Giles.europa.

we have launched a survey of the actual needs.An SME perspective on Cloud Computing Survey 3 Background ENISA Cloud Computing Security Risk Assessment ENISA (the European Network and Information Security Agency) has conducted a security risk assessment of cloud computing technologies aimed at giving advice to (among others) SME's on the most important risks in adopting cloud computing technologies. requirements and expectations of SMEs for cloud computing services. as well as ways to address those risks. The results of the survey were used to support the creation of a use case scenario: “An SME perspective on Cloud Computing”. Here you can find the raw data from the survey . As part of this study. risks and recommendations for information security”. On this scenario we have then base part of our analysis. The results the analysis can be found in the report: “Cloud computing Risk Assessment: Benefits.

...................................................................................................................................................................................................................................... 7 Cloud Models .............. 6 Company geo location ............................................ 10 Use of multiple providers ...... 12 Cloud Services ................. 11 Disaster Recovery options ....... 7 Drivers ..................................Question 2........................................................................................................................................................ 2 Background ............ 2 Contact details............................................ 5 Company Size ..............................................................................Question 9 ..........................4 An SME perspective on Cloud Computing Survey Contents About ENISA .........Question 3 .............................................................................................................Question 8 ........... 13 Main concerns .............Question 1 .................................... 9 Cloud Types .................................................................................................................................................................................................................... 3 Questionnaire ......................................................................Question 6 .................................................. 15 .............Question 4 .................................................................................................................................................................................................Question 7 .....................................................................................................Question 5 ........................................................................................................................

The survey is still available at this link: http://www. aiming to identify:        the reasons behind a possible engagement of an SME in the Cloud Computing the most suitable cloud model (Private. etc) the type (SaaS.aspx?sm=CZdVubBa9LIzYlR3KNeZIQ_3d_3d. PaaS. The survey is composed of nine questions.com/s. Please find below the details . etc) of cloud service an SME will likely use the willingness to outsource to multiple providers the disaster recovery options considered the cloud computing services. are considered the main concerns At the 1st of November 74 answers were collected. and ENISA will keep on collecting data until June 2010. Public. in terms of IT services/Applications.An SME perspective on Cloud Computing Survey 5 Questionnaire The survey “An SME perspective on cloud computing” was launched the 16th of April 2009 through the on line survey service Survey Monkey.surveymonkey.

2% 18.9% 28.4% Response Count 27 12 14 21 74 answered question .6 An SME perspective on Cloud Computing Survey Company Size .5% 16.Question 1 What is the size of the enterprise you represent Answer Options 1-9 Employees 10-50 Employees 50-250 Employees Over 250 Employees Response Percent 36.

by developing business cases into the Cloud) Adding redundancy to increase availability and resilience Controlling marginal profit and marginal costs Other (please specify) Response Percent 30.An SME perspective on Cloud Computing Survey 7 Company geo location .e.CANADA: 1 answered question Drivers .2% 27.8% 15. IT support.3% 13.Question 3 What are the reasons behind your possible engagement in the Cloud Computing area? Answer Options Remove economic/expertise barriers impeding to modernize business processes by the introduction of Information Technology Avoiding capital expenditure in hardware.9% 36.INDIA: 2 .6% 68.8% 29.1% 63.Question 2 Please choose the country your SME is based in Country AT 2 BE 2 CY 2 CZ 1 DK 2 FR 3 DE 5 IE 5 IT 6 LU 1 NL 5 SI 2 ES 9 SE 1 CH 2 UK 15 Response Count 63 11 74 Other (please specify): USA: 8 .1% 11. software. Information Security by outsourcing infrastructure/platforms/services Flexibility and scalability of IT resources Increasing computing capacity and business performance Diversification of IT systems Local and global optimisation of IT infrastructure through automated management of virtual machines Business Continuity and Disaster recovery capabilities Assessing the feasibility and profitability of new services (i.0% 52.1% 25.9% Response Count 22 49 46 26 8 18 38 21 20 11 10 72 2 answered question skipped question .

Usually free to test. Providing cloud hosting services Unlimited storage capacity Research purposes .8 An SME perspective on Cloud Computing Survey Number 1 2 3 4 5 6 7 8 Other (please specify) Creating new business models and new revenue As small company our tasks and time should not be addressed to backup & system aspects Simplification of updating. error correction and similar security functions automatically Major knowledge of IT systems and methodologies and needs of security policy & infrastructure application Access everywhere.

5% 1.4% 31. according to this possible Cloud Computing taxonomy? Answer Options Public Cloud (owned and managed by an unrelated business) Private Cloud (owned and managed internally) Partner Cloud (owned and managed by a trusted partner) A federation of clouds provided by various sources (partner. etc).An SME perspective on Cloud Computing Survey 9 Cloud Models .7% 15. Other Response Percent 24.4% Response Count 18 11 20 23 1 73 1 answered question skipped question . private.Question 4 Which solution do you see as the most suitable for an SME.1% 27.

7% 9.6% 2. network capacity etc (Iaas) Security services in the cloud Other (please specify) Response Percent 34.10 An SME perspective on Cloud Computing Survey Cloud Types .2% 28.Question 5 Which “layer” of the Cloud would you be most likely to approach? Answer Options Individual software packages (SaaS) Complete operating system and software package available via cloud services (PaaS) Just infrastructure services such as storage.7% Response Count 25 21 18 7 2 73 1 answered question skipped question .8% 24.

Question 6 Would you be willing to outsource to multiple providers? Answer Options YES NO Other (please specify) Response Percent 73. just as it has in the network infrastructure area .An SME perspective on Cloud Computing Survey 11 Use of multiple providers . not sure we prefer single-source.6% 26. but I expect reliability concerns to lead to multiple providers.4% Response Count 53 19 3 72 2 answered question skipped question Number 1 2 3 Other (please specify) Likely not.

.Question 7 Which of the following disaster recovery options are of interest to you? Answer Options Fully outsourced disaster recovery and business continuity A contingency plan based on internal resources (i. leveraging services/platform/infrastructure already in use ‘before the Cloud’) Other (please specify) Response Percent 48.12 An SME perspective on Cloud Computing Survey Disaster Recovery options .9% 1.6% 63.4% Response Count 35 46 1 72 2 answered question skipped question Number 1 Other (please specify) Possibly a mix of Outsourced and Internal facilities.e.

2% 12. including Archiving I don't want to be bothered with anything that isn't my core business.An SME perspective on Cloud Computing Survey 13 Cloud Services .8% 30.9% 19.6% 41.7% 52. Electronic Records Service. Excel ect) Knowledge management infrastructure Web presence Call centre .Question 8 Which IT services/Applications supporting business processes are most likely to be outsourced to a Cloud Computing service provider? Answer Options Payroll Human Resources Procurements CRM/Sales Management Accounting and Finance Project management Application development on the cloud Anonymised data analysis Other (please specify) Response Percent 38. Hosted Desktop (Word.5% Response Count 28 14 12 38 22 30 32 21 9 72 2 answered question skipped question Number 1 2 Other (please specify) Messaging/collaboration as well as 'standard office tools' 3 4 5 6 7 8 9 We are under development of a massive multiplayer game based on web browser.7% 44. Apache.4% 16. MySQL and PHP) services must share resources and work together into servers cloud.4% 29. SharePoint. LAMP (Linux. Mail servers Exchange.

14 An SME perspective on Cloud Computing Survey .

33 2..37 2.67 2.An SME perspective on Cloud Computing Survey 15 Main concerns .98 3.62 2.36 3.) Intra-clouds (vendor lock-in) migration Other (please specify) 0 3 0 1 1 2 1 8 10 4 7 5 7 9 9 3 24 14 15 25 26 21 31 21 28 28 28 17 25 29 25 15 14 26 14 20 31 26 27 43 7 17 19 12 9 7 6 10 3.Question 9 What are your main concerns in your approach to Cloud Computing? Answer Options Answer Options Not Important Medium Importance Very Important Showstopper Rating Average Response Count Privacy Availability of services and/or data Integrity of services and/or data Confidentiality of corporate data Repudiation Loss of control of services and/or data Lack of liability of providers in case of security incidents Inconsistency between trans national laws and regulations Unclear scheme in the pay per use approach Uncontrolled variable cost Cost and difficulty of migration to the cloud (legacy software etc.17 3.59 2..63 66 66 64 64 57 62 60 60 59 58 58 56 3 answered question skipped question 73 1 .28 3.52 2.03 2.

16 An SME perspective on Cloud Computing Survey .