Cloud Providers Are Not All The Same

Oct 1, 2015 | Cloud, Inside the Briefcase

Shoretel

Featured article By Julian Box, CEO of Calligo Limited

With the maturing cloud now a de facto technology choice for most businesses, especially start-ups, the choice of which cloud solution providers (CSP) to trust is the next big decision. With so many options to choose from, and so many providers, big and small, vying for your attention, it’s important to understand what critical aspects of a CSP to look for. What makes one cloud company better than the next?

Data Protection   

The area of data protection is critical when selecting a cloud provider. There are four areas that really differentiate between providers:

1)     Where is your data stored? Best practice now points to keeping data within a jurisdiction that meets the highest levels of transparency and alignment to the soon to be seen gold standard, that of the EU new data protection law. This should include the ultimate owner of the provider.

2)     Your data should be encrypted from point of access through to where it’s stored and your backups.  This should also include multiple keys, when possible.

3)     An Escrow service in the event that your service provider is no longer operating.

4)     Guarantees of data residence, to ensure you continually meet your legal obligations.

Performance guarantees

When moving business critical systems to the cloud, select a provider that will underwrite their performance metrics, thus giving you a level of comfort that your systems will perform at least as good as they currently do, if not better.

Contracts and Service Level Agreements

This again is a critical area of the selection process when choosing your provider.  The contract should cover areas including:

·         Guarantees and proof of data residency

·         Understanding of your local data protection laws and residency requirements. Assess your provider’s ability to meet these requirements and ensure they are covered fully within the contract

·         High availability and disaster recovery capabilities of the service provider, as well as the service itself

·         How easy is it to move your data to another provider/service? The service and the contract underpinning it should include the ability to off board your data in a format of your choice

·         Interdependencies between services run by multiple providers need to be included within both the contract and service level agreement

·         Ensure an escrow-like contract covering access to a copy of your data in the event of a supplier failure and is covered contractually

Service

Service is an area that has held back cloud – many cloud service providers don’t give you access to a true helpdesk or even a helpdesk person. Instead they give you email only or access to a chat service. Cloud-based services should be an extension to your existing IT service/team. This is more akin to IT as a Service.  This leverages cloud-based technologies to truly create an agile infrastructure that’s able to meet an organisation’s IT demands. At the same time allowing the business to focus on its core areas.  Cloud through IT as a Service can, and is likely to, be made up of several different suppliers and it is here that an organisation needs to focus to ensure it gets a coherent and overarching solution from providers that are able to work together.

Organisations should be focusing on the IT service that will be delivered, rather than the underpinning cloud technology. It is a vital and very important step and one that many organisations will struggle with, yet it’s where many progressive businesses have already moved to.

In your selection of the right cloud provider, focus on data protection, performance guarantees, contracts and SLAs and Service, as outlined above to find the partner that is truly capable of freeing your business to focus on your core capabilities. Ultimately, it comes down to trust. Without a trusted cloud partner delivering true business agility, you will end up with just another “cool” piece of technology devoid of any material benefits or true value.

 

Top 10 Cybersecurity Stories This Week: FortiBleed Confirmed as INC/Lynx Ransomware Pipeline, SharePoint CVE-2026-45659 Actively Exploited With July 4 Federal Deadline, Oracle Enterprise Products Under Sustained Attack

Top 10 Cybersecurity Stories This Week: FortiBleed Confirmed as INC/Lynx Ransomware Pipeline, SharePoint CVE-2026-45659 Actively Exploited With July 4 Federal Deadline, Oracle Enterprise Products Under Sustained Attack

July 3, 2026 | ITBriefcase.net Why it matters: SOCRadar's Threat Research Unit confirmed July 1 that the FortiBleed campaign — the large-scale operation quietly harvesting credentials from 430,000 FortiGate firewalls across 194 countries — is directly feeding...

read more
Top 10 Cybersecurity Stories This Week: Operation Endgame Dismantles StealC/Amadey/SocGholish Infrastructure, Cisco Unified CM Zero-Day Drops Webshells, Mandiant Reveals Months-Long Cisco SD-WAN Zero-Day Campaign

Top 10 Cybersecurity Stories This Week: Operation Endgame Dismantles StealC/Amadey/SocGholish Infrastructure, Cisco Unified CM Zero-Day Drops Webshells, Mandiant Reveals Months-Long Cisco SD-WAN Zero-Day Campaign

June 26, 2026 | ITBriefcase.net Why it matters: Europol, Microsoft, and law enforcement partners from six countries dismantled the infrastructure behind three malware families — SocGholish, Amadey, and StealC — that together form the opening stages of the modern...

read more
Top 10 Cybersecurity Stories This Week: Record Microsoft Patch Tuesday 200+ CVEs, Check Point VPN Zero-Day Linked to Qilin Ransomware, Ivanti Sentry CVSS 10.0 Exploited Within Hours of PoC Release

Top 10 Cybersecurity Stories This Week: Record Microsoft Patch Tuesday 200+ CVEs, Check Point VPN Zero-Day Linked to Qilin Ransomware, Ivanti Sentry CVSS 10.0 Exploited Within Hours of PoC Release

June 12, 2026 | ITBriefcase.net Why it matters: Microsoft's June 2026 Patch Tuesday, released June 9, addressed approximately 200 security vulnerabilities — the largest single Patch Tuesday release in the program's history — including one actively exploited Exchange...

read more