Migrating to the cloud? Beware the many hurdles

Issue 6 2023 Infrastructure, Security Services & Risk Management


Benjamin Coetzer.

Businesses today are moving en-masse to the cloud. However, before undertaking such a move, companies should understand the many hurdles they face and how to overcome these, so says Benjamin Coetzer, Director at local VMware Cloud Verified provider and VMware Principal Partner, Routed.

Most businesses today, if they have not already undertaken a cloud migration, are certainly in the process of planning such a move. The desire to do so is fuelled by the many benefits loudly proclaimed, including scalability, flexibility and cost-efficiency. However, while there are undoubtedly many benefits, there are also numerous hurdles to cloud adoption. CIOs need to be especially aware of these challenges when planning a migration.

In fact, some of the biggest challenges revolve around managing cloud spend, understanding the cost components of cloud infrastructure, and how those costs can scale. Additionally, migrating traditional on-premises workloads to hyperscale providers is not always a simple equation. Unlike buying physical servers and equipment, hyperscalers charge for communication and disk access in ways that are unfamiliar to most organisations.

Still, perhaps the single biggest global challenge currently, and one that is certainly a major issue in South Africa, is the lack of adequate cloud skills. A shortage like this means that many people do not have the relevant experience in cloud migration and thus face a steep learning curve when transitioning from on-premises to the cloud.

Part of the problem lies in the fact that IT teams have more control over data access and security with on-premises setups. In the cloud, security becomes a shared responsibility, requiring awareness and training across the enterprise. Moreover, as businesses shift to software-as-a-service (SaaS) models, employees also need retraining in order to adapt to new ways of using applications and accessing data, while still maintaining effective security.

Legacy versus cloud native

Another concern is that technical leaders sometimes try to take legacy on-premises applications and shift these straight into a cloud-native environment. Not only do such applications not always work properly in the new environment, but organisations that are used to the usual capex-type investments for hardware refreshes or perpetual software licences quickly find that the cost operation model in a cloud environment is completely different.

Worse still, it is often the non-IT departments in the business that do not know how to handle this new cost paradigm model, people like the Finance Director, accountants and product teams.

There are also significant technical challenges to consider, with connectivity being first and foremost among these. Since connectivity is the lifeblood of the cloud, it is imperative that your business or office park has some form of redundancy built in. The best approach is to utilise two different connectivity mediums, such as a main fibre link, with a wireless connection as a secondary option.

A second challenge here is the issue of locality. This is of concern due to the nature of compliance requirements – like the General Data Protection Regulation (GDPR) and the Protection of Personal Information Act (PoPIA) – indicating that certain data must reside within local borders. It is vital to be aware of the personal information that you are saving in your databases, systems, and applications, as this is stringently controlled and there are strict rules around where such data resides from a compliance perspective.

Security and data privacy concerns should be among your top of mind thoughts, as such issues significantly hinder cloud adoption. For example, we are aware that the cloud introduces new operating paradigms and governance challenges, such as shadow IT. This is where different departments use various cloud services without oversight, something that can easily lead to data breaches of local regulations like PoPIA, and international ones like the US Cloud Act. Such laws add complexities to data sovereignty and privacy, meaning that organisations need to consider these aspects when selecting a cloud provider.

High costs and vendor lock-in

It is also worth noting that one really needs to recognise and address these challenges beforehand. This is critical because once you are committed to a cloud provider, switching or repatriating data without incurring high costs is difficult. Vendor lock-in is a real concern, and carefully planning ahead can prevent your business from getting trapped in a situation where options are limited and costs are unforeseen.

This happens because the fees from hyperscalers are often consumption-based when it comes to repatriating data or information out of cloud environments. What occurs is that the providers entice new customers with an offer of huge discounts on their workloads, but this is done because they know that within the contract period, the client’s consumption of their platform is going to grow drastically. Moving to a hyperscaler cloud is like checking into Hotel California: You can check in, but you can never leave – once you have committed, you may find yourself stuck with them – because in order to move out again, it may well cost you more than you would have saved with the original discount.

Another thing to consider is the concept of multi-cloud, similar to the previously coined term ‘hybrid cloud’, where organisations place different workloads with different hyperscalers. This is often considered the next step in cloud migration, but represents further challenges, as it is now about governance, compliance, control, and operational insights across multiple different cloud providers, making the whole process even more complex.

Looking at the big picture, cloud adoption is obviously a move that can be expensive due to the operational complexities outlined above. However, these expenses can be balanced by the expertise cloud providers bring in managing risk and operations, compared to relying solely on internal IT staff, particularly if they do not even have proper cloud skills.

Besides doing your homework before making the move, the best advice for those still seeking to migrate to the cloud is this: Find a trusted partner that has a proven track record in cloud migration. Avoid those that like to throw buzzwords around and instead seek out a partner that will look at your current IT state and your current business processes with a critical eye, and that will be capable of both evaluating your situation and providing ongoing guidance as you move through your transformation journey.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Partnership addresses fire hazard mitigation
Brigit Fire (a Division of Hudaco Trading) Elvey Security Technologies Fire & Safety Security Services & Risk Management
Brigit Fire has partnered with the Elvey Group. The collaboration will see Brigit Fire distributing both the advanced C-TEC addressable fire detection systems (CAST Technology) and GreenMist lithium extinguishers.

Read more...
Fire protection for a solvent extraction plant in Africa
FS Systems Fire & Safety Security Services & Risk Management Mining (Industry)
A prominent mining site operates a state-of-the-art solvent extraction (SX) plant, integral to separating and purifying metals from ores, which pose significant fire risks, as SX processes involve highly flammable organic solvents and elevated operating temperatures.

Read more...
Taking fire safety seriously
G2 Fire Editor's Choice Fire & Safety Security Services & Risk Management
To gain insights into how fire systems must be designed, installed and maintained, SMART Security Solutions asked Nichola Allan, MD of G2 Fire, for some insights into the local fire market.

Read more...
SMARTpod talks to The Risk Management Forum
SMART Security Solutions Editor's Choice News & Events Security Services & Risk Management Videos Training & Education
SMART Security Solutions recently released its first SMARTpod podcast, discussing the upcoming Risk Management Forum Conference 2024, which will be held on 26 September 2024 at the Indaba Conference Centre in Fourways, Johannesburg.

Read more...
There is a SaaS for everything, but at what cost, especially to SMEs?
Editor's Choice Information Security Security Services & Risk Management
Relying on SaaS platforms presents significant cybersecurity risks as the number of providers in your landscape increases, expanding your attack surface. It is important to assess the strength of the SaaS providers in your chain.

Read more...
Western Digital reveals new solutions
Products & Solutions News & Events Infrastructure
Western Digital unveiled new solutions and technology demonstrations at the Future of Memory and Storage Conference 2024. The innovations cater to diverse market segments, from hyperscale cloud to automotive and consumer storage.

Read more...
Innovation and security go hand in hand
Technews Publishing Facilities & Building Management Security Services & Risk Management
In a world where the demand for tech innovation is matched only by the acceleration of cybersecurity threats, businesses face the challenge of balancing new product development and robust security measures.

Read more...
The Duxbury Services Gateway revolutionises the Edge
Products & Solutions Infrastructure
Duxbury Networking has announced the launch of the Duxbury Services Gateway (DSG) range. These cost-effective edge compute appliances are designed to meet the diverse needs of South African businesses including SD-WAN, Firewall, and IP PBX applications.

Read more...
Bomb threat landscape in South Africa
Editor's Choice Security Services & Risk Management
Over the past 25 years, South Africa has faced thousands of bomb threats and explosive incidents annually, imposing a significant economic burden on the nation, costing billions of rand.

Read more...
Navigating the evolving tech landscape in 2024 and beyond
Residential Estate (Industry) Infrastructure
Progress in the fields of AI, VR and social media is to be expected, but what is not, is our fundamental relationship with how we deploy solutions in our business and how it integrates with greater organisational strategies and goals.

Read more...