Techaisle Analyst Insights

December has traditionally served as the occasion for the publication of New Year forecasts. It’s understandable that we want to look ahead to the sources of opportunity that lie ahead. But in the business world, December also marks the beginning of the review season. And while detailed forecasts focus on the next twelve months, the planning horizon needs to look a little further, so that tactics provide support for business strategies, rather than simply delivering a series of course adjustments.

This is a two part blog article. The first part, below, reviews the predictions we made for 2015. Second part will focus on outlook for 2016 and for the longer term.

A look back – what was it we said was right around the corner, again?

Here are the issues we highlighted, “Ten predictions for 2015 – and five issues to keep an eye on for 2016 and beyond” and how we think we did in our prognostication.

The Top 10 for 2015

1. Hybrid arrives – not as a strategy but as the result of many discrete decisions

With the benefit of today’s perspective, we might fairly say that in 2015 and for several more years to come, a more apt description of hybrid is journey rather than destination. Digging into the detail, though, we believe our prediction that “an ability to manage hybrid infrastructure will become a key corporate IT requirement in 2015” has been borne out by the focus on tools and strategies (ranging from Docker to Agile) that we saw throughout the year. In Techaisle’ SMB Cloud adoption studies, there was a sense of growing ubiquity in the usage and plans for private, hybrid and public cloud. Use of hybrid cloud continued to increase as both a conscious strategy and as a reaction to use of both public and private resources within a single infrastructure; by the end of 2015, two-thirds of companies with 100-999 employees were using hybrid models.

2. Collaboration becomes a much bigger concept

In 2015, collaboration began to expand beyond file-sharing to become a necessary tool for driving decision-based agility, fostering innovation and extending customer intimacy. Collaboration is a process rather than a discrete outcome. Our key notion that collaboration “extends beyond the corporate staff (and as a result, beyond large enterprises) to include customers” clearly did reflect strategies and investments in 2015. Within the SMB segment collaboration is increasingly becoming a central component to virtually all business activities rather than a means to enable connections between discrete tasks. Other changes in this area will further reshape collaboration, but you’ll need to refer to the “forecast” part of the blog for that discussion.

3. Collabmobilicloud becomes a management reality

The core concept explained that despite vendor tendency towards defining collaboration, mobility and cloud as separate domains, both enterprise and SMB users have started viewing them as integrated components of business solutions. The user belief that collaboration, mobility and cloud should all be attributes of modern applications has become clearer, and even suppliers are starting to recognize the importance of an integrated collabmobilcloud approach.

SMBs are not only increasingly dependent on IT – they are dependent on increasingly-interconnected systems, which are in turn open to an ever-expanding population of devices and access points. The volumes and value of data contained in these systems continues to grow, which both increases the potential damage associated with a breach, and attracts heightened attention from hackers. Techaisle’s SMB survey data finds a disconnect between security policy and security practice that creates the potential for poorly-coordinated approaches to security – an uncertainty that is magnified by shadow IT.

In Techaisle’s latest survey of SMBs, only 13% said that they were fully prepared and confident to handle security challenges, especially mobility security. The remaining 87% were partially prepared, unprepared or unsure. These are very sobering statistics.

Techaisle’s SMB Shadow IT survey data shows that over 70 percent of applications and nearly 60 percent of IT infrastructure related spend and decision authority lies outside of IT. These expenditures are made without the IT department’s approval, guidance, or in some cases, even without IT’s knowledge. 

Security is becoming a more critical component of business rather than IT strategy.

SMB IT security managers should petition for senior executive support which will help to build an approach that safeguards the organizations, users and data, in a framework that is flexible enough to respond to emerging opportunities and threats.

SMB Mobility increases threat perimeter

The problem with mobility (like cloud) is that it changes the concept of “perimeter.” Intruders don’t need to batter through closely-guarded walls to gain access to the interior of the network; they can ride through a permeable configuration on the backs of mobile devices that have been granted access to the precious applications and data that live in the interior of the organization. It is as if the castle walls and drawbridge were replaced by windows and breezeways offering access to visitors arriving from all directions.

With mobility, the SMB user community becomes a ubiquitous and shifting source of portals through the perimeter. As a result, IT doesn’t need to only defend against recognized foes: it needs to protect the corporation from breaches that can result from the actions of its own workers, and needs to protect the same data that it delivers as an essential component of support for the mobile workforce – the workforce that is viewed by senior management as making compelling contributions to the top and bottom-line success of the business.

SMBs should consider a four-layer security framework model for deployment:

A blog “Big Data in the Cloud - an ideal solution for SMB banks” that we wrote touched a nerve, in a good way. Post blog, in our several discussions with both large and community banks we find that cloud objection is largely based on the size of the bank. In addition, regulatory compliance concerns are huge as most midmarket businesses and banks in particular spend a lot of money being compliant. With the move to cloud they want to make sure that the investment extends to the cloud without being exposed to security breaches and from a regulatory point of view.

What is clear is that migration to cloud is forcing businesses to think differently about security, in very standardized ways because the delivery of cloud service is standardized. It is also pushing them to automate security because utilization of cloud is dynamic, elastic, automated and fluid thus making manual or even semi-automated security processes unmanageable. However, this approach creates multiple vulnerabilities. The bad guys themselves are taking advantage of all the cloud technologies and are becoming a lot faster and more automated than the businesses. Security therefore becomes a moving target and cloud security is a perfect opportunity for businesses to improve defenses and reduce risks.

While most midmarket businesses are reactive, hunting after point solutions when something goes wrong, others are taking a proactive approach to risk and threat so that they have more fluidity in the way they respond when a threat occurs.

IBM security is on a path to help businesses think differently about cloud security. It is moving the businesses along a maturity curve from reactive to proactive to optimized. Optimization refers to the difference between being able to weather an attack and continue with business and how much time could one can shave off and how much cost could be optimized for being able to respond to that event in reducing risk.

As Sharon Hagi, Global Strategist and Senior Offering Manager, IBM Security, said in an interview “the state that IBM is advocating goes beyond reactive or proactive. We call it the optimized state where organizations use automation coupled with predictive security analytics to drive towards a higher level of efficiency. By mixing the elements of proactive approach, automation and security intelligence businesses can actually get to the point where they are a lot more efficient and they actually reduce time and cost to respond to risk.”

IBM is differentiating and trying to distance itself from others in a number of different ways. IBM has a managed security services practice with ten plus security operation centers around the world servicing 133 different countries with 6,000 security professionals and its research lab X-Force provides actionable threat intelligence and insights for business and IT leaders. IBM monitors 10,000 security customers globally, 70 million end-points with 20 billion events per day, has made enormous investments in security intelligence analytics platform that allows it to distill information, identify threats and respond quickly.

But for banks and businesses that come under deep regulatory scrutiny, security goes beyond managed services and is a major psychological barrier to cloud adoption triggering a high level of fear-factor. Recently, we posed a fundamental question of “Why do you want security” to banks and midmarket businesses in general. The responses received could easily be bucketed into five categories:

BROADENS RANGE OF OFFERINGS AND INCREASES NUMBER OF SMB CHANNEL PARTNERS

On March 13th, 2012, Dell announced the acquisition of SonicWALL, a leader in Unified Threat Management (UTM), further broadening its portfolio of security offerings, especially for SMBs and branch offices. By acquiring SonicWALL, Dell gains on multiple fronts.

• Broaden its Portfolio of Products and Services for SMBs. While SonicWALL has added enterprise-level offerings in recent years, for a long time it was known primarily as SMB-focused company and one of the leaders in UTM for SMBs. Known primarily for its security appliances, it offers SMBs gateway security to protect their networks as well as web and email security, secure remote access and continuous data protection (secured at remote locations). Most of these offerings would supplement Dell’s existing products and enable SMBs to purchase more of their products from a single source.

• Expand its Channel Partner Base. SonicWALL sold almost all of its products through a loyal base of channel partners, who benefitted not only by selling SonicWALL appliances but also earning ongoing service revenues from managing those appliances as well as off-site continuous data protection (CDP). In that respect, SonicWALL was a step ahead of the industry in offering remote services and would fit in well with Dell’s cloud ambitions. While there may be some overlap between the channel partners of the two companies, and Dell may not grandfather all of SonicWALL’s partners to resell Dell products, Dell would still significantly increase the number of its channel partners (including many MSPs) and broaden its footprint in the SMB market.

• Enter a Fast Growing and More Profitable Area. SonicWALL accounts for less than one-half of one percent of Dell’s revenues but it is growing much faster. While Dell’s revenues, including revenues from various acquisitions, have essentially remained stagnant over the last five years, SonicWALL has grown by almost 30% during the same period. Its net profitability is 2-3 times higher than Dell. By selling SonicWALL’s products to its current customer base, both directly, through Dell Services and through Dell’s PartnerDirect members, this profitability will increase further as selling through Dell will help reduce SonicWALL’s sales and marketing expenses (which account for 35-40% of its total revenues)

Dell has acquired several companies in recent years that had developed products primarily for SMB customers. After acquiring them, Dell has not only increased their sales to SMBs but, in many cases, also sold those products to branches of its large customers. If Dell follows the same strategy for SonicWALL’s offerings, its latest acquisition will be a win-win situation for Dell, SonicWALL, their customers and Dell’s investors.
Anil Miglani