Synesthesia

I spent a mind-stretching few hours yesterday at the Cloud Security Conference organised by The Cloud Circle.

Summing up the whole day into a few points is hard, but these were the key things I took away:

• Security for the Cloud is mostly “just” security, with a few new architectures and contract models
• Know what data you collect and use, and the associated risks
• Know where your data goes, how it gets there and how it might be exposed
• Cloud delivery usually gives you less control
• But sometimes less control is also less risk
• Different landscapes give you different control & risk profiles (IaaS / PaaS / SaaS)
• The importance of knowing about data location and what jurisdictions apply – remember services are often composites from many sub-providers
• if it’s important to you, talk about it with the vendor and get it in the contract – and involve the legal advisors early
• But don’t expect a custom contract for 5p/hr computing bought on a credit card!
• The importance of standards (but this is still an immature market, so not everything has a standard)
• Plan for something to fail, because it will
• Cloud makes you ask questions you should already be asking

I can say with absolute certainty that I am not doing full service to the depth of presentations – I recommend looking for the slides on The Cloud Circle’s website.

Key References

Some key reference sources cited by one or more speakers

• Security Guidance for Critical Areas of Focus in Cloud Computing v3 published by Cloud Security Alliance
• European Network and Information Security Agency
• Secure Development Lifecycle
• ISO27001, SSAE-16, Vericode
• Fifteen Mobile Policy Best Practices
• Google Apps Security

(more…)

Bookmarks I’ve shared on 2011-11-09:

• IT must prepare for Hadoop security issues | ITworld

  hadoop infosecurity

• Resetting Your WordPress Password

  wordpress

• Save Web Pages to Delicious Bookmarks by Email
  starred items / from Digital Inspiration Technology Blog http://www.labnol.org
  delicious tools webapps PKM
• Cloud Computing Use Cases | Cloud Zone

  cloud computing

• distinct values using xpath – XML, XSLT and XPATH | DaniWeb

  xpath xml xslt

• 5 Ways To Build Engagement Using Positive Feedback On Your Company’s Website | Fast Company
  starred items / from Fast Company http://www.fastcompany.com
  via:ifttt @review @retag
• Define again what an Enterprise capability is
  starred items / from Enterprise Architecture Development Matters http://it.toolbox.com/blogs/ea-matters
  via:ifttt @review @retag

 I am Synesthesia

 Add me to your network

Bookmarks I’ve shared on 2011-10-06:

• Microsoft’s cloud computing eBook | The Cloud Circle

  microsoft cloud-computing cloud office365

• Repository Maintenance

  svn svnsync

• svn – Running SVNSync on a windows box – Server Fault

  svn svnsync

• mod_dav_svn Configuration Directives

  apache svn mod_dav_svn reference subversion

 I am Synesthesia

 Add me to your network

Bookmarks I’ve shared on 2011-05-25:

• SharePoint Online Administration Center Guide – SharePoint Online for enterprises – Office.com

  sharepoint office365 microsoft cloud cloud-services

• SharePoint Online planning guide for Office 365 for enterprises – SharePoint Online for enterprises – Office.com

  sharepoint office365 microsoft cloud cloud-services

• SharePoint Online Developer Feature Availability Matrix

  sharepoint developer office365 microsoft cloud cloud-services

• SharePoint Online: An Overview for Developers

  office365 microsoft cloud cloud-services sharepoint

• Office365 Deployment Guide for Enterprise

  microsoft-online cloud-computing cloud office365

 I am Synesthesia

 Add me to your network

Bookmarks I’ve shared on 2010-10-26:

• Don’t try to negotiate special treatment from cloud providers, warns Google

  Informationage articles cloud-computing dataprotection

• Implications of Technical Debt Uncertainty for Software Licensing Negotiations « The Agile Executive
  Action Item: Before licensing an enterprise application or renewing an existing license, ask the vendor for technical debt data for the application and the plans to reduce the debt
  technicaldebt enterprise_it
• Applying Kanban to IT Processes (Part 5)

  kanban lean ITSM

• Applying Kanban to IT Processes (Part 4)

  kanban lean ITSM

• Applying Kanban to IT Processes (Part 3)

  kanban lean ITSM

• Applying Kanban to IT Processes (Part 2)

  kanban lean ITSM

• Applying Kanban to IT Processes (Part 1)

  kanban lean ITSM

• Modelling Behaviour « on Enterprise Architecture
  Excellent article on how to incorporate Business Capabilities into a model
  modelling architecture EA enterprise_architecture
• SearchHash
  make your own spreadsheet of hashtagged tweets
  searchhash socialmedia twitter_tools
• The Stack: The Fifteen (now Sixteen) Classes of the Social Business Software Suite
  Interesting categorisation by Jeremiah Owyang – may be useful adjunct to help thinking about the architecture of personal and network learning/knowledge management
  socialmedia socialsoftware stack
• Managing Yourself: What’s Your Personal Social Media Strategy? – Harvard Business Review

  HBR socialmedia brandyou

 I am Synesthesia

 Add me to your network

Bookmarks I’ve shared for 2010-09-27 to 2010-09-30:

• Enterprise Microblogging Use Cases: Help Reduce Your Inbox Clutter!

  microblogging

• WordPress 3.0: Multisite Domain Mapping Tutorial

  wp Multisite WordPress

• WordPress 3.0 Walkthrough: Getting Started with Multisite

  WordPress Multisite wp

• Costs and risks to consider when planning a move to the public cloud

  SOA case-studies cloud-computing cloud

• The Internet’s Library of Economic Statistics | timetric.com
  Online economic data series with a fancy interface
  data visualization statistics graph charts
• How The Guardian is pioneering data journalism with free tools » Nieman Journalism Lab

  data guardian.co.uk

• 7 Things That Blogging Does | Six Pixels of Separation – Marketing and Communications Blog – By Mitch Joel at Twist Image
  Blogging = Critical Thinking<br />
  Blogging = Ideation<br />
  Blogging = Tinkering<br />
  Blogging = Relationships<br />
  Blogging = Business<br />
  Blogging = Sharing<br />
  Blogging = Exhaust Valve
  blogging
• Quality Control—A WordPress Theme
  Turn a basic WordPress install into a simple and straight-forward ticketing system. Quality Control allows users to create tickets, assign statuses, milestones, categories, and tags. Other users can then interact with the tickets, updating their state, milestone, or any other property.
  wordpress bugtracker
• Local Council Spending Data: The Good, The Bad, and The Downright Obstructive

  council opendata

• What 108M Lines of Code Tell Us
  The Agile Executive highlights a CAST report into the technical debt of major enterprise applications.
  technicaldebt codequality
• Four roles for social media in workplace learning

  socialmedia organisations learning

• Moving Past Legacy Networking in a Virtualized Data Center
  Intel and VMWare sponsored whitepaper
  VMWare Intel networking cloud 10GbE
• Dilbert: The New Social Media Manager

  dilbert socialmedia

• Welcome to The Document Foundation!
  Fork of OpenOffice.org to maintain independence
  libreoffice openoffice opensource
• Domain-Driven Design Community

  development programming DDD

• Technical Debt a Perspective for Managers
  Good overview article, with some practical suggestions for paying down technical debt
  technical-debt agile programming development
• Domain-Driven Design in an Evolving Architecture

  architecture domaindrivendesign software

• 50 Great Web Alternatives to Desktop Software

  applications webtools software

 I am Synesthesia

 Add me to your network

Bookmarks I’ve shared on 2010-03-18:

• Using Credit Limits to Constrain “Development on Margin”

  agile technical-debt refactoring

• Should IT keep its distance from social media?

  socialmedia it-v-business

• The Total CIO: The Many Faces of the CIO

  cio

• Windows Azure Platform Training Roadmap

  architecture cloud-computing azure

• Using Groovy Scriptom to report on Outlook
  Groovy scriptom allows Java-based scripting of Windows ActiveX and COM objects
  groovy scriptom scripting
• Kanban’s Not Better than Scrum, It’s Just Smaller

  kanban agile scrum

 I am Synesthesia

 Add me to your network

Bookmarks I’ve shared on 2010-03-01:

• Cloud Computing’s Three Revolutions: Part 3 | The Standard

  cloud-computing

• Cloud vs. in-house: Where to run that app?

  cloud-computing

• Agile Resources: Feature Estimation | VersionOne

  agile versionone estimation backlog

• 8 Guiding Principles for Pilot Programs: A Key for Enterprise 2.0
  Ross Dawson identifies the 8 guiding principles for an Enterprise 2.0 Piulot 
  rossdawson enterprise2.0

 I am Synesthesia

 Add me to your network

Bookmarks I’ve shared on 2010-02-13:

• Cloud Security Using… Social Networks?
  Interesting idea…
  cloud-computing security identity

 I am Synesthesia

 Add me to your network

Bookmarks I’ve shared on 2009-12-16:

• Where To Find Picture For Your Web Site

  stockimages clipart

• Clip Art – Free Images, Photos, and Sounds – Microsoft Office Online

  clipart stockimages microsoftonline

• stock.xchng – the leading free stock photography site

  stockimages

• Flickr: Creative Commons

  flickr photos creativecommons stockimages

• 10 New Privacy Settings Every Facebook User Should Know

  facebook privacy HOWTO socialsoftware

• Social Media, Cloud Computing and architecture
  Excellent slideshow by CapGemini's Rick Mans about the opportunities and challenges posed by social everything and the cloud
  socialsoftware via:rickmans cloud-computing enterprise_architecture ea
• iFixit opens up repository of repair manuals
  iFixit publish DIY repair manuals for a lot of Apple stuff. The manuals are now under a Creative Commons licence.
  [Guardian Technology blog]
  ifixit diy apple tech HOWTO
• An Introduction to Feature-Driven Development

  agile FDD

 I am Synesthesia

 Add me to your network

Bookmarks I’ve shared on 2009-12-07:

• OpenProj
  OpenProj is a free, open source project management solution. Opens MS Project or Primavera files
  project_management_tools opensource
• Eight Wastes of Lean in a Services Context
  Debashis Sarkar translates "Muda" into a services context
  lean muda
• Appirio: Cloud Computing Ecosystem Map
  Clickable map, with stack layers plotted against public/hosted/private
  via @rickmans
  cloud-computing via:rickmans appirio
• Horizontally Sequenced Display Order for WordPress Posts in Two Columns

  wordpress HOWTO

• Multiple Loops and Multiple Columns with WordPress

  wordpress HOWTO

• ‘Communities’ and ‘Networks’: A Conceptual and Linguistic 2.0 Mess
  Useful distinction between the two terms, often used interchangeably especially in marketing material!
  enterprise2.0

 I am Synesthesia

 Add me to your network

Shared bookmarks for del.icio.us user Synesthesia for 2000-01-31 to 2008-04-21:

• Hotel Husa Moncloa Madridhotels madrid
• Asus Eee PC 701 Revieweee
• Reflections on Cloud Computing
  Interesting post on this from ex-IBM’er Irving Wladawsky-Berger
  cloud-computing

Shared bookmarks for del.icio.us user Synesthesia on 2008-03-18:

• The Right Decision Every Time

  management

• Rackspace goes â��Mossoâ�� for developers « Scobleizer

  hosting cloud-computing