The cloud is NOT the answer

Lately, I have been perusing other continuity planning blogs and have found an overwhelming number that are arguing that the cloud is equivalent to an all encompassing business continuity and crisis planning strategy. Though many of these bloggers are blogging as a means of promoting their product, not all are.

I am hear to counteract these blogs which, in my mind, are not only incorrect, but seem to be misleading readers on purpose.

You see, any experienced continuity planner can tell you that there is more to business continuity than where critical systems and data are stored. Going to a CFO or CEO  and explaining to them that you have found the holy grail of business continuity planning and that said holy grail is the cloud, will likely lead to a quick trip out the door.

Yes, I can certainly see and appreciate the merits of moving IT systems to the cloud (continuity of systems and apps, availability of data, ability to access systems and data remotely in some cases), but doing so will not in itself prepare your organization for a crisis.

What these blogs touting cloud computing fail to recognize is that there are other components of business continuity planning outside of disaster recovery. Where will the cloud get you when your crisis is a PR / communications crisis? How will it address a loss of building situation, when your building houses a call centre or a trade centre? What does it do to mitigate or prepare you for a pandemic?

As I have stated, the cloud certainly has a place in the day-to-day discussions of continuity planners, but it is receiving far too much credit and much too little skepticism.

Relying on the cloud as your continuity strategy is far too simplistic of an approach to take and will only leave your organization exposed to the many risks facing it on a daily basis. Be diligent and thorough when seeking new continuity strategies for your organization, and do not be afraid to challenge your peers when it comes to something like cloud computing - business continuity planning is a complex field and any pundit suggesting that there be a catch-all continuity strategy is misinformed or seeking to misinform.

What do you think? Do you agree or disagree?

Thanks,
The Contingency Blogger