Cloud adviser: Contract for functionality, not a brand
Your cloud-computing contract should specify what you expect the vendor to do, not just the name of its cloud service
Computerworld - Before buying a cloud computing service, you evaluate it, test it, see it in action, so you know what it's supposed to accomplish for you, right? Well, a description of that functionality belongs in the contract. You'd be amazed at how many contracts simply state the cloud service's name without specifying what that service is supposed to do.
That's inadequate. A well-formed contract will describe the results you expect the service to achieve for you. If your contract merely says that you are buying the XYZ cloud service, you will have no recourse if the vendor repositions that service so that it no longer offers all the functionality you thought you were paying for. The vendor's argument will be that you contracted for the XYZ cloud service, and the XYZ cloud service can be whatever the vendor says it is.
One commonly touted benefit of cloud computing is that the services automatically update so that you're always using the current version and functionality. It's great that your IT staff doesn't need to continually update and patch the software running on your in-house systems because the cloud vendor does it all for you. But you can't just assume that all updates will be to your benefit. Standard cloud-vendor contract clauses regarding updates usually say something very one-sided, such as:
"We may change, discontinue or deprecate any element of the service, or change or remove features or functionality of the service from time to time. We will notify you of any material change to or discontinuation of the service offerings."
That changed, discontinued or deprecated functionality could be something that you're counting on, and maybe even the sole reason that you acquired the service in the first place. To ensure that you don't lose the expected functionality, the cloud contract should include language regarding your rights to decline an update if possible, or at least requiring the vendor to provide a specific amount of notice prior to discontinuing or changing any functionality of its service. The notification period should be in line with the time that it would take your institution to move to another service provider if necessary. Without such clauses, a vendor could effectively force you to shift to a replacement service at a potentially higher cost than you had contracted to pay.
Additional, important elements of functionality that can be easily overlooked when negotiating a cloud contract include:
Technical Access Requirements
How will your users access the cloud computing services? Have you standardized upon a particular Web browser or mobile device? If so, you'll want to protect your investment in the cloud service by contractually obligating the vendor to ensure that these access channels will continue to work. And require a specific amount of advance notice about any changes.
Other columns by Thomas Trappler
- NASA's cloud audit holds value for all
- Who can pry into your cloud-based data?
- Does your cloud vendor protect your rights?
- Software licensing in the cloud
- For credit card handlers, cloud computing guidelines just got clearer
- Regulations and the cloud: HIPAA modification provides clarity
- Certification programs are making it easier to know all about a cloud vendor
- The do's and don'ts of safeguarding cloud-based data with encryption
- For a good cloud contract, start with an RFP
- It takes a team to create a good cloud contract
- 15 Non-Certified IT Skills Growing in Demand
- How 19 Tech Titans Target Healthcare
- Twitter Suffering From Growing Pains (and Facebook Comparisons)
- Agile Comes to Data Integration
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- Pay-as-you-Grow Data Protection: IBM Tivoli's Full-featured Data Protection Suite for Small to Medium Businesses IBM Tivoli Storage Manager Suite for Unified Recovery gives small and medium businesses the opportunity to start out with only the individual solutions...
- Streamline Data Protection with IBM Tivoli Storage Manager Operations Center IBM Tivoli Storage Manager (TSM) has been an industry-standard data protection solution for two decades. But, where most competitors focus exclusively on Backup...
- Using VM Archiving to Solve VM Sprawl This CommVault whitepaper discusses how archiving virtual machines can mitigate VM sprawl with a comprehensive approach to VM lifecycle management.
- Keep Your Network Available, Efficient and Secure Make the most of your network by working with experts who "get it." CDW and F5 have partnered to keep networks highly optimized....
- Make or Break: New Auto Products Must Go To Market On Time This Webcast quantifies the value of time to market for the auto industry and highlights how Primavera Enterprise Portfolio Management can help organizations.
- IBM Flash Webcast: Optimizing your Datacenter for Efficient Storage & ROI Register for this webcast to learn the benefits of flash storage from IBM Customer, Leonardo Irastorza of Royal Caribbean Cruise Ltd and Storage... All Data Storage White Papers | Webcasts