Skip to main content

Cloud technology for small business

Short answer

Cloud computing delivers on-demand IT resources over the internet. For a small business requiring high accuracy and security, adopt SaaS for key applications and a virtual private cloud for sensitive data, ensuring ACID compliance, encryption, multi-factor authentication, and PCI-DSS certified provider.

What do you mean by cloud computing? Illustrate what type of cloud technologies would you recommend for a small business firm with high level of accuracy and security required for business transactions?

Cloud computing

Cloud computing is the on-demand delivery of computing services (servers, storage, databases, software) over the Internet, on a pay-as-you-go basis, without the user owning the infrastructure. Services are provided as IaaS, PaaS or SaaS, deployed as public, private, hybrid or community clouds.

Recommendation for a small business needing accuracy and security

Assumption: a small trading firm (10 to 20 staff) handling sales, accounting and online payments, with limited IT staff and budget.

  • Service model: SaaS for accounting, billing, inventory and CRM (for example a reputable cloud accounting package). It needs no server management, is updated by the provider, and has low upfront cost.
  • Deployment model: a hybrid approach, mostly a trusted public cloud with a private/virtual private section.
    • Core transaction data and customer records are stored in a virtual private cloud or a dedicated private area with strong isolation.
    • Non-sensitive services (website, e-mail, collaboration) run on the public cloud.
    • A fully private cloud would be too costly for a small firm.
  • Optionally IaaS/PaaS for a custom order system, using managed databases.

Features to look for (accuracy and security)

  1. Data accuracy and integrity: ACID-compliant relational database, validation, audit trail, regular backups and point-in-time recovery.
  2. Encryption of data at rest and in transit (TLS), and key management.
  3. Access control: multi-factor authentication, role-based access.
  4. Compliance: PCI-DSS for card payments, ISO 27001 certified provider.
  5. High availability: SLA of 99.9% or more, replication across zones and disaster recovery.
  6. Monitoring and logs for fraud detection.
  7. Data location and portability to avoid lock-in.
  8. Support and local presence, and clear exit terms.

This gives the firm security and reliability comparable to a large company, without owning a data centre.

✓ Answer checked by Claude Opus 5.5 (high effort)

All Information System chapter 8 questions →