Connect with us

Tech

Why SLA gaps should not hinder cloud innovation | Computer Weekly

Published

on

Why SLA gaps should not hinder cloud innovation | Computer Weekly


As cloud adoption accelerates, organisations rely on Service Level Agreements (SLAs) to define expectations around availability, security, and performance, to access and process data or service use. Yet SLAs often lag behind innovation. For CTOs and CISOs, this misalignment is a strategic risk and they need to work out how to innovate securely when infrastructure guarantees do not reflect the complexity or criticality of modern digital services.

Rather than viewing SLA gaps as blockers, technology leaders should treat them as indicators of where governance, architecture and measurement must evolve. By taking steps to align SLAs with business objectives and complementing them with Experience Level Agreements (XLAs), Key Risk Indicators (KRIs), and Objectives and Key Results (OKRs), organisations can take control and innovate efficiently.

Innovation is advancing faster than SLA maturity

Modern cloud architectures increasingly rely on container orchestration and serverless computing. Technologies like robotic process automation, generative AI, and edge computing are reshaping service delivery. Yet SLA provisions from major cloud providers (e,g, AWS, Azure, Google Cloud) typically offer 99.9% to 99.99% availability, while actual performance varies depending on configuration and dependencies.

To bridge this gap, organisations can use XLAs to measure service quality and user experience. OKRs should align with XLAs to track business goals, while SLAs and KRIs support delivery and risk management. This model then links technical output to business impact and enables leaders to assess whether innovation is translating into measurable outcomes.

Evolving governance to close SLA gaps and curb shadow IT

Public cloud spending is projected to reach $723 billion this year (Gartner). However, SLA limitations can drive unauthorised use, especially in fast-moving domains like generative AI (MIT). Recent incidents involving ChatGPT, xAI (Grok) and GitHub repositories that were accessed through Microsoft Copilot show how sensitive internal data, submitted by staff seeking efficiency, was indexed by public search engines even after repositories were made private.

While cloud platform risk can be managed by restricting users to approved systems this does not eliminate the emergence of shadow IT and staff may still bypass official channels, exposing private data.  Management requires policy, training, and awareness, supported by clear governance and technical controls.

That underlines the need for continuous oversight and proactive governance and monitoring which moves from static compliance to dynamic enablement. This requires the alignment of technical controls with business goals, educating teams on acceptable use, and embedding KRIs into decision-making. Taken together these measures can help prevent shadow IT and maintain operational integrity.

Security and governance: Foundational enablers of cloud innovation

Cloud providers operate under shared responsibility models where infrastructure security is managed by the provider, while data, configuration, and access controls remain the customer’s responsibility.

This reinforces the need for layered security across the stack: hypervisor, application, access, monitoring, and operations. Security as Code, zero-trust architectures, and cloud-native tools such as AWS Security Hub and Google Cloud Security Command Center enable organisations to enhance security. These are also critical for compliance with regulations like the Digital Operational Resilience Act (DORA) and the EU Artificial Intelligence Act.

Governance frameworks such as the NIST Risk Management Framework and COBIT can help link IT with strategy. When integrated with OKRs, XLAs, SLAs, and KRIs, these frameworks can enable a structured approach to managing innovation responsibly.

Architectural strategies to address SLA limitations

Hybrid and multi-cloud strategies increase flexibility, allowing businesses to adjust SLAs through design choices such as microsegmentation, restricted access, and dedicated tenancy. Self-hosting open-source tools like Apache Spark can reduce reliance on commercial providers but need internal skills and governance to manage them. In addition, generative AI platforms may require hybrid configurations to meet data sovereignty requirements. This means that architectural decisions should reflect business needs and risk tolerance, not an idealised pursuit of perfect security.

Strategic withdrawal when SLA gaps are too significant

In some cases, SLA limitations, especially around compliance or sovereignty may require a shift to private cloud or self-hosted solutions. Offerings like AWS Outposts transfer some operational responsibility to the organisation, enabling greater control but requiring enhanced governance and technical capability.

That requires leaders to understand when strategic withdrawal from unmanageable risks can preserve resilience and readiness. Monitoring SLA exposure can then ensure agility and preparedness to allow organisations to re-engage when conditions improve or risks are mitigated.

Conclusion

SLA gaps are therefore not barriers to innovation but indicators of where leadership must act. CTOs and CISOs need to focus not just on meeting technical guarantees but ensuring cloud adoption supports measurable business outcomes.

They can do this by aligning OKRs with XLAs, and underpinning them with SLAs and KRIs, to build governance that is resilient and responsive. In highly regulated yet innovation-reliant economies, technology leaders must balance ambition with accountability. That can mean stepping back when risks are too great, and whether through hybrid cloud, compensating controls, or strategic vendor selection, remaining focused on enabling innovation securely and sustainably.

Ashley Barker, digital strategy and operations expert and Irfan Ahmed, cybersecurity expert, PA Consulting



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

The $1 Million Aston Martin Valhalla Makes You Drive Better Than You Thought Possible

Published

on

The  Million Aston Martin Valhalla Makes You Drive Better Than You Thought Possible


Yes, it’s a supercar, but it’s also sold very much as a track and road car, one that accommodates a passenger, all of which means road trips and weekend-away stays are very much possible. Well, they would be if there were anywhere at all to store luggage. Lamborghini managed to find some luggage space in its Revuelto design, so there’s no excuse here, really.

The design department otherwise has had a field day. Top-mounted exhausts, dihedral doors, and even an F1-style roof snorkel to accompany that air-braking rear wing deliver an exterior that is nothing short of arresting. Somehow, none of this looks garish or out of place on the Valhalla in person. Everything has a purpose, and nothing seems to scream as flexing or showing off. There’s a cohesion to the Valhalla aesthetic that others might not manage.

Inside, it is much more comfortable than you would imagine. The one-piece carbon-fiber seats look like they are going to be tricky, but on my two-hour road drive, they were supportive and, yes, comfortable. Visibility is surprisingly good, but a camera system is required for the rear view mirror because there’s no rear window. The rest of the interior is minimal, but the steering wheel is excellent (which, as Jony Ive will tell you, is no mean feat) and neatly signals some motorsport cool.

Photograph: Jeremy White

The one gripe for the interior is the dash and center screens, which are clear and responsive, and offer up the usual smartphone mirroring options, but they aren’t luxurious. We’re seeing a lot more effort these days with screen design from Ferrari’s new Luce as well as BMW in the iX3 and i3, but here, Aston has decidedly functional, off-the-shelf-looking displays. If I were parting with a million dollars, I might want more consideration here.

Odin’s Beard

On the road and track is where the Valhalla excels. Impressive doesn’t come close, and, despite the delays, the patience shown by Aston has clearly paid dividends. The ride is superb, as well as being ridiculously quick. The chassis is exceptionally agile, making the car feel alert and light. There are enormous reserves of grip to match the formidable braking and acceleration, and as a result, this is a car that flatters you; it effortlessly seduces you into driving much harder and better than you think you can, all while giving you levels of confidence you wouldn’t think possible.

I’ve driven the Lamborghini Revuelto, and yes, it’s exciting, but also there’s a part of you that is wary—the part that knows that if you don’t keep your wits about you 100 percent of the time, things will go bad very quickly. The Valhalla offers up all of that fun and excitement, but almost none of the trepidation. It is gratifying and intuitive to drive. Anyone can fully enjoy this car, not merely those used to track days. Some will say the engine note is not as full-throated as might be expected in such a car, but others will be having so much fun they won’t care. Nor should they.



Source link

Continue Reading

Tech

AI Has Flooded All the Weather Apps

Published

on

AI Has Flooded All the Weather Apps


You may have noticed a drop of AI in your weather app lately. As companies race to infuse artificial intelligence into every product, the wave has come for the humble weather app.

The Weather Company, operator of the Weather Channel, today released a revamped version of its Storm Radar app, featuring an AI-powered Weather Assistant that lets users customize how they view forecasts and weather maps, toggling between layers like radar, temperature, and weather conditions like wind and lightning.

It can also sync with other apps, like your calendar, to send text notifications and weather summaries that tie info about the upcoming weather into your daily plans. You can stick a voice on it to talk like an old-timey radio weatherman, if you’re into that. Like most weather apps, it gets the data comes from the National Oceanic and Atmospheric Administration (NOAA) and the National Weather Service (NWS).

The app costs $4 per month. It is available on iOS only for now, but the company says an Android version is coming eventually.

“We wanted to build an experience that would be a weather level-up for anybody, really, from a casual observer to a seasoned storm chaser,” says Joe Koval, a senior meteorologist at the Weather Company. “If you’re looking for advice on when the weather will be good to walk your dog tomorrow, you no longer have to look at a bunch of different disparate weather data elements and try to figure out the answer to that question yourself.”

You can find the weather on your phone already, of course. Android and iOS devices typically place the weather prominently beside the time. Google and Apple have both fused their weather apps into their smartphones directly. AI features have since been infused, offering insights and summaries about the day to come.

But there are third-party weather apps galore, like Storm Radar, Carrot Weather, Rain Viewer, and Acme Weather—an app from the former Dark Sky app creators. New weather apps like Rainbow Weather aim to be AI-first. Weather services are also being integrated directly into AI chatbots, like Accuweather, which recently launched an app directly in OpenAI’s ChatGPT.

“Everyone has their idea of what they want in a weather app, what data they’re interested in, how they’re interested in it being presented,” says Adam Grossman, a founder of the DarkSky app. “How do you build a single weather app that works for everybody?”

DarkSky, one of the most popular iOS weather apps, was bought by Apple in 2020 and merged into its Apple Weather service. Grossman eventually left Apple to start Acme Weather, with the goal of making a weather prediction service that better telegraphs the uncertainty of forecasting.

“No matter how good your forecast is, you’re going to be wrong,” Grossman says. “That’s something that weather apps traditionally haven’t done a great job of doing. Our approach is trying to figure out how to add those pieces of context back in.”

Repositories of weather information usually come from government sources, like NOAA or other global weather services that collect data from weather satellites, radar, weather balloons, and on-the-ground instruments. All that data is fed into weather prediction models that simulate the physics of the atmosphere. Those predictions are often generated by resource-intensive supercomputers, but machine learning models have trimmed that processing down, making predictions quicker. (Though sometimes less accurate, which can be accounted for by comparing multiple models.)

Weather apps like Storm Radar and Acme Weather translate that bounty of information by corroborating and compiling the models, then helping to create high-resolution maps and a visual representation of the data, an area where AI can also be particularly useful.



Source link

Continue Reading

Tech

This App Makes Even the Sketchiest PDF or Word Doc Safe to Open

Published

on

This App Makes Even the Sketchiest PDF or Word Doc Safe to Open


Word documents, and even PDF files, aren’t necessarily safe. These normally innocuous files can be injected with malicious “poison” code or simple scripts of code that can be a serious security risk.

You probably already know it’s dangerous to open files from sources you can’t necessarily trust. If you’re an activist or journalist—or anyone who occasionally depends on anonymous tips to do their jobs—you might run into a situation where potentially useful information is inside a Microsoft Word document or PDF file that you can’t exactly vouch for. Wouldn’t it be nice if you could open those files and read them without exposing your device to potential security risks?

Dangerzone is a free and open source tool built for this purpose. Originally built by journalist and security engineer Micah Lee, this application opens files in a sandbox environment with no internet access, then converts the file to an image-based PDF with no scripting enabled. The resulting PDF has any malicious code stripped out and should be safe to open—at least, as safe as anything can be.

“You can think of it like printing a document and then rescanning it to remove anything sketchy, except all done in software,” explains the about page, which includes a lot of fascinating details about how the application works.

To get started, download and install Dangerzone. There are downloads for Windows, macOS, and various Linux systems. The first time you run it there will be a brief setup, after which you can simply drag files to the window.

Photograph: Justin Pot

The application can open and convert PDF, Word, Excel, PowerPoint, Open Office, EPUB, and image files. You can drag and drop multiple documents at once, if you’d like.

After adding documents you will be asked a few questions: where you’d like the resulting files to end up, whether they should open after the conversion is done, and whether you’d like to use optical character recognition (OCR) in order to make the document searchable. You can also move the original, potentially unsafe documents into a subfolder named “unsafe,” helping ensure you don’t confuse them with the newly made safe ones.

Image may contain Text

Photograph: Justin Pot



Source link

Continue Reading

Trending