How to Get Started with Cloud Computing

Feb 7, 2011 | Cloud, Featured Articles

1. Get smart

Before making a move into the cloud, get educated on the principles and definitions of cloud computing, advises Johan Goossens, head of NATO’s Allied Command Transformation’s (ACT) Technology & Human Factors Branch in Norfolk, Va.

“We started in the summer of 2010 with educational efforts. We got ourselves smart on the terminology, sitting down with vendor partners,” he says.

2. Know your apps

“Before we got started with the cloud, we made sure that we had a good grasp of our application inventory,” says Pedro Villalba, CTO at EmblemHealth, a health insurance provider in New York.

“We identified which applications are driving the business, and then determined which ones need standalone environments. We found a lot of applications, because of the way they’ve been built, don’t lend themselves to be used in a cloud strategy unless they’re completely reengineered,” he adds.

Once he had wrapped up the application inventory, Villalba says he had a clear understanding of what applications would work well in a virtualized cloud environment.

3. Put together a sample business case

“Cloud is not magic. It’s not a silver bullet or a panacea. It’s an implementation of technology with certain advantages and characteristics,” says Mark White, CTO for Deloitte Consulting’s technology practice. “Like in any implementation, particularly when you’re trialing activities, we recommend CIOs do a business case as a first experience.”

The good news is, the public cloud lends itself to “sticking a toe in the water and doing a first department, geography or use case, as in a first workload to move to the cloud,” White adds.

Take into account factors such as the characteristics of cost, the expected return on investment categories and hurdle levels, SLA and performance expectations, service characteristics – what is this doing for me and how – and measure those after the fact.

David Linthicum, CTO at Blue Mountain Labs, a cloud consulting firm, and cloud computing blogger at InfoWorld, a Network World sister publication, agrees. “Most of my clients have prototypes going on and that’s what I recommend they do,” he says.

“If someone comes to me and says, ‘We want to look at infrastructure as a service to solve our storage needs,’ I say, ‘Well that’s great, but let’s first understand what that is from an academic perspective and then let’s look at the business case,'” he says.

“That’s the best way to understand the capabilities of the cloud and how it works in context of your system,” Linthicum adds. “You might spend maybe a couple hundred thousand dollars in time and effort in doing this, but you’ll get something that can end up saving you millions of dollars if you pick the right solution.”

Read More

Top 10 Cybersecurity Stories This Week: Oracle EBS and FreeSWITCH Under Active Exploitation, 1.5 Million Anonymous Crime Stoppers Tips Exposed in Navigate360 Breach, APT28 Deploys In-Memory HOOKEDGE Backdoor Against NATO Defense Contractors

Top 10 Cybersecurity Stories This Week: Oracle EBS and FreeSWITCH Under Active Exploitation, 1.5 Million Anonymous Crime Stoppers Tips Exposed in Navigate360 Breach, APT28 Deploys In-Memory HOOKEDGE Backdoor Against NATO Defense Contractors

October 30, 2026 | ITBriefcase.net Story 1: Oracle E-Business Suite CVE-2026-101767 (CVSS 9.8) — Unauthenticated SQLi-to-RCE Actively Exploited in the Wild Impact: HIGH CVE: CVE-2026-101767 CVSS: 9.8 (CVSSv3.1) Product: Oracle E-Business Suite (EBS) — TCF servlet...

read more
Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

October 23, 2026 | ITBriefcase.net Why it matters: Tuesday, October 21 delivered one of the heaviest single-day security disclosures of the year: PHP2Shell, GitLab CVE-2026-110264, and Node.js security releases all shipped simultaneously, each carrying unauthenticated...

read more
Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

October 16, 2026 | ITBriefcase.net Why it matters: Microsoft's October 2026 Patch Tuesday is the largest software security release in the company's history — 1,411 flaws, three zero-days, 75 critical vulnerabilities, and a live Windows Shell security feature bypass...

read more
Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

October 9, 2026 | ITBriefcase.net Why it matters: The FBI and US Secret Service issued a joint advisory on October 6 confirming that the FortiBleed credential-harvesting campaign — which has compromised credentials for 86,644 Fortinet FortiGate firewalls and SSL VPN...

read more