I received a note from Steve Helms over at Gartner the other day about a release they made covering Rights and Responsibilities for Cloud Computing Services. In it they outline seven rights related to cloud consumption:
- The right to retain ownership, use and control one's own data
- The right to service-level agreements that address liabilities, remediation and business outcomes
- The right to notification and choice about changes that affect the service consumers' business processes
- The right to understand the technical limitations or requirements of the service up front
- The right to understand the legal requirements of jurisdictions in which the provider operates
- The right to know what security processes the provider follows
- The responsibility to understand and adhere to software license requirements
They provide a paragraph of context to each right as well. I thought this was a thought provoking list.
One area that I believe was only weakly addressed was the right to understand how to move cloud work elsewhere. That may be covered by the 1st or the 2nd right, but it is interesting how poorly understood the ramifications of moving work to some types of service providers who could be shut down by a number of different situations and the costs or even ability provided to move the work elsewhere. To some extent this is like the old software escrow issue for products, but it of a much higher priority if it needs to be executed, since for some organizations this is production work that resides in the cloud.