What to look for in a cloud computing vendor


Broadly defined, cloud computing involves accessing a remotely hosted application and having information "pushed" to you on-demand. It's not a new concept; if you use web-based email, for example, you're probably tapping into the cloud.

Within the healthcare community, providers are turning to the cloud to remotely host their applications and data. Their reasons for doing so are generally to save money and/or to help ensure that data is secure and available.

You might ask: Why outsource applications and data when I can maintain these things in-house with my own IT staff?  Keeping up IT infrastructure is expensive, and making sure technology is secure can be a daunting task.

On the other hand, cloud computing providers maintain world-class computing resources with robust network connectivity and security.  They generally have highly secure data center facilities to help ensure the security, availability and integrity of the applications and data that they host for customers.

Healthcare providers can take advantage of the cloud computing provider’s resources at relatively little cost.

Nonetheless, not all cloud computing providers are the same. Here are five factors to consider when selecting a vendor of cloud computing services.

1. Time in the marketplace. Some cloud computing providers have been around for over a decade, while others have been around for only a few years.

2. Availability of resources. You should ensure that the cloud computing provider’s network resources and servers are highly available (e.g., 99.9 percent). Usually, cloud computing providers guarantee network and server availability in their service level agreements.

3. Security. Some cloud computing providers may be more secure than others. See if you can obtain a copy of the cloud computing provider’s security policies and most recent audit report (e.g., SSAE16).  (There are many other business and technical considerations as well. These are but a few.)

You should also keep in mind the security of your own computer systems. Some cloud computing providers also offer remote infrastructure management services for managing endpoint security.

4. Network connectivity to the cloud. Make sure  network connectivity is reliable and robust enough (e.g., sufficient bandwidth) to access the applications and information that are remotely hosted by the cloud computing provider. This may mean that you may need to upgrade your network capabilities before going to the cloud.

5. Written contract or agreement. Finally, the cloud computing provider should be vetted not only for its technological capabilities, but also, in terms of what the provider is willing to commit to by way of a written agreement.  To that end, you may wish to consult with your IT staff and attorney.

Lee Kim, Esq., is an attorney with Tucker Arensberg, PC, in Pittsburgh. This article originally appeared on the HIMSS Blog.