Feeds

Cloud storage: It's strictly for airheads

Time to back up on blind faith

Boost IT visibility and business value

Comment Cloud storage is fatally flawed right now. After the chaotic outage of Microsoft's Sidekick T-Mobile service and the collapse of SwissDisk's filers, what sensible business is going to entrust their data to the cloud?

Big brands, with their reputation for reliability, give no guarantee of cloud storage trustworthiness. T-Mobile is a solid and trustworthy mobile phone service provider yet it lost users' data. Microsoft runs Hotmail, has its own mega-data centres, and has ambitions to parlay its years of experience into the Azure cloud service - yet it still lost Sidekick users' data.

It gets worse. The Sidekick data loss wasn't due to a failure in Microsoft's infrastructure, as no Microsoft-based Windows-based infrastructure was used at all. It was seemingly based on Sun Linux and Solaris servers, an Oracle Real Application Clusters database and Sun back-end storage that Microsoft was unfamiliar with.

The service wasn't run according to Microsoft in-house standards at all, but users would not know this. They wouldn't know that the Mobile brand and the Microsoft brand were just wrappers around a third-party service.

In the cloud it's not just data that vanishes, it's the ability to verify what is actually happening to it. Brands are surface things in the cloud with no guarantee at all that you can trust what goes on beyond them inside the cloud or verify it either.

Buy a notebook computer from Dixons, Comet, PC World or Carphone Warehouse in the UK and sign up for an online backup service. You have no idea who actually provides the service, where their data centres are and what infrastructure and processes are involved in looking after your data. Sure, it may say “powered by Spare Backup”, but what does that mean to the average user?

Buy an online backup service from Mozy, Carbonite or a cloud storage service from Nirvanix, Google or Amazon, or from any of the myriad other local, regional and national services springing up, and you have no idea at all of the data centre infrastructure, products and processes involved. You just throw your data in and hope that they look after it properly. You can't verify that they do. It's a matter of blind faith.

That faith can be misplaced. If SwissDisk, T-Mobile, and Microsoft can fail to look after your data then anybody can. A brand is no guarantee of trustworthiness, not without the ability to know what’s going on. As Ronald Reagan said: “Trust, but verify.”

Any business, tiny, small, medium or massive, that entrusts its data to the cloud today without having its own local backup is being irresponsible. It's gambling with its data. If the data is mission-critical then the business' director or executive in charge of that decision should be fired.

It is totally unrealistic to expect users to have the ability to verify a cloud service provider's infrastructure and processes. Such things will be regarded as sensitive commercial information by them anyway. There has to be regulation if there is no public verification. The state won't get involved so the industry will have to regulate itself.

The good news is that this isn't rocket science. It's what trade associations of professional service providers do already. They self-regulate by certifying members behave according to standards and carry sufficient insurance for the risks they run if they make mistakes. Look at dentists, lawyers, civil engineers or any other trade professional person or business - they all sport the distinction of their professional body and its standards.

What we need is a code of practice backed up by membership of a Cloud Storage Providers' Association with certification for members. No business should contract for cloud storage services from suppliers who are not members of such a CSPA body, and the CSPA should rigorously enforce the creation of a minimum acceptable standard of service; and also rigorously police its members and throw out suppliers who fail to meet the standard.

Every cloud storage provider with a belief that they are an honest business providing a good and solid service should see the sense of this, and start making moves for a CSPA-type body to come into being. Without it cloud storage services will be offered by cowboys and incompetents, who lose users data, as SwissDisk, T-Mobile and Microsoft have.

Cloud storage needs open standards for the custodianship of users' data, and only a reputable trade body can provide it. What is the industry waiting for? Do we need another SwissDisk, another Sidekick before it will act? ®

The essential guide to IT transformation

More from The Register

next story
The Return of BSOD: Does ANYONE trust Microsoft patches?
Sysadmins, you're either fighting fires or seen as incompetents now
Microsoft: Azure isn't ready for biz-critical apps … yet
Microsoft will move its own IT to the cloud to avoid $200m server bill
US regulators OK sale of IBM's x86 server biz to Lenovo
Now all that remains is for gov't offices to ban the boxes
Flash could be CHEAPER than SAS DISK? Come off it, NetApp
Stats analysis reckons we'll hit that point in just three years
Oracle reveals 32-core, 10 BEEELLION-transistor SPARC M7
New chip scales to 1024 cores, 8192 threads 64 TB RAM, at speeds over 3.6GHz
Object storage bods Exablox: RAID is dead, baby. RAID is dead
Bring your own disks to its object appliances
Nimble's latest mutants GORGE themselves on unlucky forerunners
Crossing Sandy Bridges without stopping for breath
prev story

Whitepapers

5 things you didn’t know about cloud backup
IT departments are embracing cloud backup, but there’s a lot you need to know before choosing a service provider. Learn all the critical things you need to know.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.
Rethinking backup and recovery in the modern data center
Combining intelligence, operational analytics, and automation to enable efficient, data-driven IT organizations using the HP ABR approach.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.