Business users bypass IT and go rogue to the Cloud

Corporate departments act on their own, contending IT is too slow in creating a path to Cloud services

IT departments need to watch out for business units or even individual workers going rogue and bypassing IT to go straight to the Cloud.

There's a tug-of-war tension in the enterprise right now, Gartner analyst, Lydia Leong, said. IT administrators very rarely voluntarily want to go with the public Cloud. I call this the turkeys don't vote for thanksgiving theory. The people who are pushing for these services are not IT operations people but business people.

When marketing, events or other corporate business units conclude that IT is dragging its feet on the way to the cloud, the contract for the services themselves. IT often doesn't discover the move until it shows up in the tech expenses papers.

Right now business strength lies in going around IT, said Rob Enderle, an analyst at the Enderle Group.

Enterprise IT often sees the Cloud as a risk. If you go to a large IT meeting, they'll generally place the public cloud as one of their top three or four threats because their line organizations, like marketing or manufacturing, go around IT to set up their own cloud service deals. They can get something cheaper and faster than they could by going through IT but its probably not compliant, he added.

Several analysts said they've talked with enterprise IT executives who are facing such issues. None of the execs, though, want anyone to know its happening to them.

Jeff Kagan, an independent analyst, said the problem lies in the fact that these are still the early days of corporate cloud services use. Companies lack rules for the technology and users are more eager than IT try it out.

This is the wild, wild West where there are no rules, he added. People are used to storing their own information on their own laptop. Storing it on the Cloud doesn't seem to them all that different from what theyve been doing. Were stepping into this Cloud world bit by bit and every company has different challenges. This affects many of them.

The Bring Your Own Device (BYOD) trend has contributed to the user push to the Cloud, analysts say.

People have gotten pretty comfortable using their own smartphones and tablets at work. IT has had to adapt and learn to manage a network that they're not totally able to control.

People, who don't want to wait for IT to catch up will contact companies like Google or Amazon directly and simply start storing data in the cloud.

It's also about departments using Clouds to get around budget constraints and a lack of capacity in IT, said Dan Olds, an analyst at Gabriel Consulting Group.

In a lot of ways, this reminds me of the 1990s when departments went wild with building their own data centers and IT capabilities. In a lot of cases, that resulted in higher costs, security vulnerabilities, and poor integration, Olds said.

When IT is left out, its personnel has no idea how secure the Clouds are or exactly where the information is being stored. It also means IT can't negotiate the best deal -- one that could encompass many different departments or data stores.

Best case, organisations might end up spending more on Cloud services than they would if they mounted the service on systems the data center already owns, said Olds. Worst case, the organisation could find that critical data is now outside their firewall and perhaps could be accessed by folks who shouldn't be able to see it.

Since analysts doubt IT can stop businesses from bypassing them on a whole-scale level, they say the tech execs need to set up strong cloud governance policies.

It's not really acceptable for IT to say no when someone wants to use the Cloud, said Leong. They need to set up service agreements with approved providers and set up controls for how secure information needs to be. How do they provide risk management? How do they make this work instead of just saying, You cant do this.

Every time we take a step further into the information age, it's unprotected, said Kagan. IT says they're swamped just keeping everyone connected. They don't really have the time to proactively protect against future threats. They have to make the time.

Sharon Gaudin covers the Internet and Web 2.0, emerging technologies, and desktop and laptop chips for Computerworld. Follow Sharon on Twitter at @sgaudin, on Google+ or subscribe to Sharon's RSS feed. Her email address is sgaudin@computerworld.com.

See more by Sharon Gaudin on Computerworld.com.

Read more about cloud computing in Computerworld's Cloud Computing Topic Center.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags cloud securitycloud computingIT managementinternetGartnerIT Leadership

More about Amazon Web ServicesGartnerGoogleTopicWest

Show Comments
[]