6 Ways to Reduce the Risks of Cloud Computing

by Joe McKendrick
Insurance Networking News, April 19th, 2010

Let's face it, the insurance industry is all about risk, and the management thereof. Companies in this sector have a very high intolerance level for risky business—it's hardwired into their DNA. That's why, when cloud computing comes up in conversations, security and overall reliability pop up very quickly as concerns and, more often than not, are showstoppers.

I put this concern out to Bill Jefferis of Evolve IP, and Jon Gatrell of Stonebranch/Scribbos—two people immersed in the cloud business—and got some words of advice for insurance-sector executives looking to explore the cloud realm.

•    Start slow and incrementally: “If an insurance organization is concerned about the possible risks, the best bet is to start out slow,” says Jefferis. “If you’re hesitant to jump right into infrastructure-as-a-service or communications-as-a-service, start by piloting a technology or application that is low-risk, and confined to one department of your organization.”

•    Establish best practices policies from the start: “As with any new technology, setting down some guidelines, usage policies and best practices will help mitigate risk, and ensure you get the most out of cloud-based services,” Jefferis says.

•    Make sure your cloud vendor follows best practices and policies: “If the provider offers the ability to track, monitor and control proprietary and confidential information inside and outside of normal business processes, risk is mitigated,” says Gatrell. Among those best practices are rich auditing, encryption and policy management options, he adds. “Claims, health care information and process exceptions require information that may not be easily automated due to the nature of the process and existing tools just won’t work.”

Read the full article at Insurance Network News: http://www.insurancenetworking.com/blogs/insurance_technology_risk_management_cloud_computing-24610-1.html