Microsoft’s cloud trust study indicates cloud security is a matter of perception. A recent Trustworthy Computing survey indicates that small businesses that try cloud services seem to appreciate what they have to offer. This is no surprise since they are in business to make money, not manage infrastructure. Outsourcing is an opportunity cost decision. In almost all cases the impact to the business cash flow statement will override any concerns regarding outsourcing vs. insourcing. Small business survival depends on the adoption of LEAN principles. Reducing waste reduces cost.
94 percent of SMBs have experienced security benefits in the cloud that they didn’t
previously have with their on-premises service, such as up-to-date systems, up-to date antivirus protection and spam email management.
91 percent of SMBs said the security of their organization had been positively impacted as a result of cloud adoption
![TwCCloudSMBTrustinfoUS_Page[1]](http://dearestleader.me/wp-content/uploads/2013/06/TwCCloudSMBTrustinfoUS_Page1.png)
Many non-technical SMBs without full time IT staff are going to experience benefit from cloud services. In order to get the full benefit of security monitoring, it has to be a dedicated 24/7 function. An 8-5 business that doesn’t generate revenue for the other 16 hours is sinking money in performing this function themselves. From a financial point of view it almost never make sense to ramp up a 24/7 IT shop in these circumstances.
While the survey discusses businesses with 25-499 PCs there is another demographic that cloud services can provide benefit to. Studies indicate that up to 50% of the US workforce will be self-employed by 2020. The group that stands to benefit most from cloud services is the 1-5 person company where everyone involved is an owner/operator and all other work is subcontracted. Cloud services make the most sense where the owners are the salespeople and unrelated people are subcontractors. It doesn’t matter if you’re selling IT services or office cleaning services, you are already taking on risk from subcontracting. Let’s pretend you are selling IT services and you find a few generic MCSE’s to do the hands on work that are 1099 contractors or B2B such as LLC to LLC. If your entire business is built around finding these freelancers to do the work, you are already outsourcing. What possible reason could you have for wanting to insource your IT infrastructure or personnel?
Security professionals that only look at security may survive in Enterprise IT. In SMBs every employee is not an IT professional, an accounting professional, etc. They are stakeholders. The ability to diversify your portfolio of skills, roles, and personality traits is what will make you a winning team member and a winning investor.