Connect with us

Tech

Why SLA gaps should not hinder cloud innovation | Computer Weekly

Published

on

Why SLA gaps should not hinder cloud innovation | Computer Weekly


As cloud adoption accelerates, organisations rely on Service Level Agreements (SLAs) to define expectations around availability, security, and performance, to access and process data or service use. Yet SLAs often lag behind innovation. For CTOs and CISOs, this misalignment is a strategic risk and they need to work out how to innovate securely when infrastructure guarantees do not reflect the complexity or criticality of modern digital services.

Rather than viewing SLA gaps as blockers, technology leaders should treat them as indicators of where governance, architecture and measurement must evolve. By taking steps to align SLAs with business objectives and complementing them with Experience Level Agreements (XLAs), Key Risk Indicators (KRIs), and Objectives and Key Results (OKRs), organisations can take control and innovate efficiently.

Innovation is advancing faster than SLA maturity

Modern cloud architectures increasingly rely on container orchestration and serverless computing. Technologies like robotic process automation, generative AI, and edge computing are reshaping service delivery. Yet SLA provisions from major cloud providers (e,g, AWS, Azure, Google Cloud) typically offer 99.9% to 99.99% availability, while actual performance varies depending on configuration and dependencies.

To bridge this gap, organisations can use XLAs to measure service quality and user experience. OKRs should align with XLAs to track business goals, while SLAs and KRIs support delivery and risk management. This model then links technical output to business impact and enables leaders to assess whether innovation is translating into measurable outcomes.

Evolving governance to close SLA gaps and curb shadow IT

Public cloud spending is projected to reach $723 billion this year (Gartner). However, SLA limitations can drive unauthorised use, especially in fast-moving domains like generative AI (MIT). Recent incidents involving ChatGPT, xAI (Grok) and GitHub repositories that were accessed through Microsoft Copilot show how sensitive internal data, submitted by staff seeking efficiency, was indexed by public search engines even after repositories were made private.

While cloud platform risk can be managed by restricting users to approved systems this does not eliminate the emergence of shadow IT and staff may still bypass official channels, exposing private data.  Management requires policy, training, and awareness, supported by clear governance and technical controls.

That underlines the need for continuous oversight and proactive governance and monitoring which moves from static compliance to dynamic enablement. This requires the alignment of technical controls with business goals, educating teams on acceptable use, and embedding KRIs into decision-making. Taken together these measures can help prevent shadow IT and maintain operational integrity.

Security and governance: Foundational enablers of cloud innovation

Cloud providers operate under shared responsibility models where infrastructure security is managed by the provider, while data, configuration, and access controls remain the customer’s responsibility.

This reinforces the need for layered security across the stack: hypervisor, application, access, monitoring, and operations. Security as Code, zero-trust architectures, and cloud-native tools such as AWS Security Hub and Google Cloud Security Command Center enable organisations to enhance security. These are also critical for compliance with regulations like the Digital Operational Resilience Act (DORA) and the EU Artificial Intelligence Act.

Governance frameworks such as the NIST Risk Management Framework and COBIT can help link IT with strategy. When integrated with OKRs, XLAs, SLAs, and KRIs, these frameworks can enable a structured approach to managing innovation responsibly.

Architectural strategies to address SLA limitations

Hybrid and multi-cloud strategies increase flexibility, allowing businesses to adjust SLAs through design choices such as microsegmentation, restricted access, and dedicated tenancy. Self-hosting open-source tools like Apache Spark can reduce reliance on commercial providers but need internal skills and governance to manage them. In addition, generative AI platforms may require hybrid configurations to meet data sovereignty requirements. This means that architectural decisions should reflect business needs and risk tolerance, not an idealised pursuit of perfect security.

Strategic withdrawal when SLA gaps are too significant

In some cases, SLA limitations, especially around compliance or sovereignty may require a shift to private cloud or self-hosted solutions. Offerings like AWS Outposts transfer some operational responsibility to the organisation, enabling greater control but requiring enhanced governance and technical capability.

That requires leaders to understand when strategic withdrawal from unmanageable risks can preserve resilience and readiness. Monitoring SLA exposure can then ensure agility and preparedness to allow organisations to re-engage when conditions improve or risks are mitigated.

Conclusion

SLA gaps are therefore not barriers to innovation but indicators of where leadership must act. CTOs and CISOs need to focus not just on meeting technical guarantees but ensuring cloud adoption supports measurable business outcomes.

They can do this by aligning OKRs with XLAs, and underpinning them with SLAs and KRIs, to build governance that is resilient and responsive. In highly regulated yet innovation-reliant economies, technology leaders must balance ambition with accountability. That can mean stepping back when risks are too great, and whether through hybrid cloud, compensating controls, or strategic vendor selection, remaining focused on enabling innovation securely and sustainably.

Ashley Barker, digital strategy and operations expert and Irfan Ahmed, cybersecurity expert, PA Consulting



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

Why Everyone Is Suddenly in a ‘Very Chinese Time’ in Their Lives

Published

on

Why Everyone Is Suddenly in a ‘Very Chinese Time’ in Their Lives


In case you didn’t get the memo, everyone is feeling very Chinese these days. Across social media, people are proclaiming that “You met me at a very Chinese time of my life,” while performing stereotypically Chinese-coded activities like eating dim sum or wearing the viral Adidas Chinese jacket. The trend blew up so much in recent weeks that celebrities like comedian Jimmy O Yang and influencer Hasan Piker even got in on it. It has now evolved into variations like “Chinamaxxing” (acting increasingly more Chinese) and “u will turn Chinese tomorrow” (a kind of affirmation or blessing).

It’s hard to quantify a zeitgeist, but here at WIRED, chronically online people like us have been noticing a distinct vibe shift when it comes to China over the past year. Despite all of the tariffs, export controls, and anti-China rhetoric, many people in the United States, especially younger generations, have fallen in love with Chinese technology, Chinese brands, Chinese cities, and are overall consuming more Chinese-made products than ever before. In a sense the only logical thing left to do was to literally become Chinese.

“It has occurred to me that a lot of you guys have not come to terms with your newfound Chinese identity,” the influencer Chao Ban joked in a TikTok video that has racked up over 340,000 likes. “Let me just ask you this: Aren’t you scrolling on this Chinese app, probably on a Chinese made phone, wearing clothes that are made in China, collecting dolls that are from China?”

Everything Is China

As is often the case with Western narratives about China, these memes are not really meant to paint an accurate picture of life in the country. Instead, they function as a projection of “all of the undesirable aspects of American life—or the decay of the American dream,” says Tianyu Fang, a PhD researcher at Harvard who studies science and technology in China.

At a moment when America’s infrastructure is crumbling and once-unthinkable forms of state violence are being normalized, China is starting to look pretty good in contrast. “When people say it’s the Chinese century, part of that is this ironic defeat,” says Fang.

As the Trump administration remade the US government in its own image and smashed long-standing democratic norms, people started yearning for an alternative role model, and they found a pretty good one in China. With its awe-inspiring skylines and abundant high-speed trains, the country serves as a symbol of the earnest and urgent desire among many Americans for something completely different from their own realities.

Critics frequently point to China’s massive clean energy investments to highlight America’s climate policy failures, or they point to its urban infrastructure development to shame the US housing shortage. These narratives tend to emphasize China’s strengths while sidelining the uglier facets of its development—but that selectivity is the point. China is being used less as a real place than as an abstraction, a way of exposing America’s own shortcomings. As writer Minh Tran observed in a recent Substack post, “In the twilight of the American empire, our Orientalism is not a patronizing one, but an aspirational one.”

Part of why China is on everyone’s mind is that it’s become totally unavoidable. No matter where you live in the world, you are likely going to be surrounded by things made in China. Here at WIRED, we’ve been documenting that exhaustively: Your phone or laptop or robot vacuum is made in China; your favorite AI slop joke is made in China; Labubu, the world’s most coveted toy, is made in China; the solar panels powering the Global South are made in China; the world’s best-selling EV brand, which officially overtook Tesla last year, is made in China. Even the most-talked about open-source AI model is from China. All of these examples are why this newsletter is called Made in China.





Source link

Continue Reading

Tech

VTL Group boosts output by 10% with Coats Digital’s GSDCost solution

Published

on

VTL Group boosts output by 10% with Coats Digital’s GSDCost solution



Coats Digital is delighted to announce that VTL Group, one of the largest vertically integrated textile manufacturers in the Mediterranean region, has adopted Coats Digital’s GSDCost solution to standardise production methods, increase productivity, and improve pricing accuracy across its Tunisian operations. The initiative is already showing a significant impact, with VTL reducing standard minute values (SMVs) by 15–20% and increasing line output by 10% across its three, key sewing facilities.

With over 5,000 employees and 3,000 sewing machines across 90 sewing lines, VTL Group specialises in jersey knits and denim, producing up to 20 million garments per year for world-renowned brands such as Lacoste, Adidas, G-Star, Hugo Boss, Replay and Paul & Shark. The company operates six garment production units, along with dedicated facilities for screen printing, knitting, dyeing and textile finishing. This extensive vertical integration gives VTL complete control over quality, lead-times and cost-efficiency, which is vital for meeting the stringent demands of its global customer base.

VTL Group has adopted Coats Digital’s GSDCost to standardise production, boost productivity, and improve pricing accuracy across its Tunisian operations.
The solution cut SMVs by 15–20 per cent, raised line output by 10 per cent, and enhanced planning, cost accuracy, and customer confidence, enabling competitive pricing, lean operations, and stronger relationships with global fashion brands.

Prior to implementing GSDCost, VTL calculated capacity and product pricing using data from internal time catalogues stored in Excel. This approach led to inconsistent and inaccurate cost estimations, causing both lost contracts due to inflated production times and reduced margins from underestimations. In some cases, delays caused by misaligned time predictions resulted in increased transportation costs and operational inefficiencies that impacted customer satisfaction.

Hichem Kordoghli, Plant Manager, VTL Group, said: “Before GSDCost, we struggled with inconsistent operating times that directly impacted our competitiveness. We lost orders when our timings were too high and missed profits when they were too low. GSDCost has transformed the way we approach planning, enabling us to quote confidently with accurate, reliable data. We’ve already seen up to 20% reductions in SMVs, a 10% rise in output, and improved customer confidence. It’s a game-changer for our sales and production teams.”

Since adopting GSDCost across 50 sewing lines, VTL Group has been able to establish a reliable baseline for production planning and line efficiency monitoring. This has led to a more streamlined approach to managing load plans and forecasting. Importantly, GSDCost has given the business the flexibility to align pricing more effectively with actual production realities, contributing to greater customer satisfaction and improved profit margins.

Although it’s too early to determine the exact financial impact, VTL Group has already realised improvements in pricing flexibility and competitiveness thanks to shorter product times and better planning. These gains are seen as instrumental in enabling the company to pursue more strategic orders, reduce wasted effort and overtime, and maintain the high expectations of leading global fashion brands.

Hichem Kordoghli, Plant Manager, VTL Group, added: “GSDCost has empowered our teams with reliable data that has translated directly into real operational benefits. We are seeing more consistent line performance, enhanced planning precision, and greater confidence across departments. These improvements are helping us build stronger relationships with our brand partners, while setting the foundation for sustainable productivity gains in the future.”

The company now plans to expand usage across an additional 30 lines in 2025, supported by a second phase of GSD Practitioner Bootcamp training to strengthen in-house expertise and embed best practices throughout the production environment. A further 10 lines are expected to follow in 2026 as part of VTL’s phased rollout strategy.

Liz Bamford, Customer Success Manager, Coats Digital, commented: “We are proud to support VTL Group in their digital transformation journey. The impressive improvements in planning accuracy, quoting precision, and cross-functional alignment are a testament to their commitment to innovation and excellence. GSDCost is helping VTL set a new benchmark for operational transparency and performance in the region, empowering their teams with the tools needed for long-term success.”

GSDCost, Coats Digital’s method analysis and pre-determined times solution, is widely acknowledged as the de-facto international standard across the sewn products industry. It supports a more collaborative, transparent, and sustainable supply chain in which brands and manufacturers establish and optimise ‘International Standard Time Benchmarks’ using standard motion codes and predetermined times. This shared framework supports accurate cost prediction, fact-based negotiation, and a more efficient garment manufacturing process, while concurrently delivering on CSR commitments.

Key Benefits and ROI for VTL Group

  • 15–20% reduction in SMVs across 50 production lines
  • 10% productivity increase across key sewing facilities
  • More competitive pricing for strategic sales opportunities
  • Improved cost accuracy and quotation flexibility
  • Standardised time benchmarks for future factory expansion
  • Enhanced planning accuracy and load plan management
  • Greater alignment with lean and sustainable manufacturing goals
  • Increased brand confidence and satisfaction among premium customers
Note: The headline, insights, and image of this press release may have been refined by the Fibre2Fashion staff; the rest of the content remains unchanged.

Fibre2Fashion News Desk (HU)



Source link

Continue Reading

Tech

NSA urges continuous checks to achieve zero trust | Computer Weekly

Published

on

NSA urges continuous checks to achieve zero trust | Computer Weekly


The US National Security Agency (NSA) has published its latest guidance on zero trust to secure US federal government IT networks and systems. This is the first of two guidance documents coming out of the NSA, providing “practical and actionable” recommendations that can be applied as best practice to secure corporate IT environments both in the public and private sectors.

In the Zero trust primer document, the NSA defines a “zero-trust mindset”, which means assuming IT environment traffic, users, devices and infrastructure may be compromised. To achieve this, the guidance urges IT security teams to establish a rigorous authentication and authorisation process for all access requests.

In the context of securing the integrity of government IT systems, it said that such a strategy enhances the security posture of networks by rigorously validating every access request, which prevents unauthorised changes, reduces risk of malicious code insertion, and ensures the integrity of software and supply chains

The main takeaway from the NSA regarding zero trust is to never trust users or devices that request network connectivity or access to internal resources. The NSA guidance calls for verification without exception, where dynamic authentication and explicit approval is used across all activities on the network, adhering to the principle of least privilege.

Specifically, the NSA’s latest guidance suggests that IT security teams should assume they are working in an IT environment where there is a breach, which means operating and defending resources under the assumption that an adversary already has a presence in the environment.

The NSA said IT security teams should plan for deny-by-default and heavily scrutinise all users, devices, data flows and requests. This means that IT security teams need to log, inspect and monitor all configuration changes, resource accesses and environment traffic for suspicious activity continuously.

The guidance also recommends explicit verification. This implies that access to all resources is consistently verified, using both dynamic and static mechanisms, which is used to derive what the NSA calls “confidence levels for contextual access decisions”.

Commenting on the guidelines, zero-trust expert Brian Soby, CTO and co-founder of AppOmni, said: “Across the guidance, the emphasis is on continuous logging, inspection and monitoring of resource access and configuration change, plus comprehensive visibility across layers.

“Read plainly, the NSA is suggesting that many programs are built around coarse checkpoints and limited signals, while the real risk lives inside enterprise applications, especially SaaS, where sensitive data and business workflows reside.”

Soby’s understanding of the new guidelines is that effective zero trust requires a thorough understanding of what users can and cannot do, instead of simply relying on their ability to authenticate through network directory services and the authorisation that successful authentication gives them.

“Many security programs still substitute directory groups and simplistic roles for true entitlement materiality, even though effective access in modern SaaS is shaped by application-native permissions, sharing rules, delegated administration, conditional controls and third-party OAuth grants.”

He noted that the NSA’s emphasis on monitoring resource access and configuration change implies that relying on coarse identity abstractions leaves IT security teams blind to the actions and permission shifts that create exposure and enable misuse.

“This gap also lines up uncomfortably well with the breaches and campaigns we are seeing now,” he added.

As an example, Soby said that recent intrusions tied to groups tracked as UNC6040 and UNC6395 have highlighted how attackers can bypass traditional, frontdoor-centred controls by abusing SaaS identities and integrations, including compromised OAuth tokens and third-party application access, to reach and extract data from SaaS environments.

“In that light, the NSA’s guidance supports a sharper conclusion: identity security programs that cannot truly understand user activities, behaviours and the materiality of entitlements inside applications do not match the principles of zero trust,” said Soby. “These often become more performative than effective, leaving security operations centre teams stuck with generic signals like logins when the meaningful attacker activity is happening inside the app.”



Source link

Continue Reading

Trending