Professional Documents
Culture Documents
ECM Toolkit
Table of Contents
Topic Background
Training Videos
Featured Article
The Cloud: Powering, Social, Local, Mobile An AIIM 2012 Session . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36
Supporting Articles
Presentations
Cloud Enterprise Content Management -
How proper planning can ensure you dont miss the next wave in
Services and Platform Delivery . . . . . . . . . . . . . . . . . . . . . . . . . . . .44
Webinars
Managing Content in the Cloud - Capturing, Sharing, Governing . .33
Keeping ECM in Sync: Cloud, Mobile, and On-Premise . . . . . . . . . .33
How to Balance Content Management with Cloud and Mobile . . . .34
Your Journey into Cloud: Optimize your Mission Critical Systems . .34
Page 2
ECM Toolkit
Cloud computing came of age; like many things, through the advancement of several differing technologies
cloud computing is really evolutionary in nature and not, as you might think, revolutionary. In a nutshell, cloud
computing allows you to rent, as in a monthly fee, software that you normally would have paid licenses to
own and this software would have been established on your own servers in your own building. This old
method is called on-premise software.
Cloud-based software does not require any on-premise resources from you to operate all you need is an
Internet connection and a device that connects to the Internet such as a laptop, tablet, smartphone or a, ugh,
desktop computer. The cloud vendor hosts its application on its servers and this includes everything you would
need to run the application including processing time and memory.
A cloud-based vendor will have built the document management application that allows you to store your
documents in its cloud structure and depending on the sophistication of the vendor and the product, the
application will do all or most of what you do with you own on-premise applications. This includes things like
having security at the document and folder level, check-in/out, version control, and others.
The technology behind the curtains is not that wild, or not wild at all. First, and perhaps most important, is the
Internet. Less than ten years ago the Internet was not fast enough (it actually was but we didnt have fast
connections to our small offices and homes) to deliver the applications that we have today at the speeds we
not only are used to but demand. Doing a cloud computing application on a dial-up or the early telephone line
DSL service would not be fast enough and would simply not work for us. With the advent of faster transmission
technologies and especially cable, the Internet became fast enough to support cloud-based applications.
The second most important technology is the idea of virtualization of processing servers and memory. Think of
it this way, you waste 90% of your laptop resources when you are working. Your typical laptop has enough
compute capacity to actually run two or three of you simultaneously. So virtualization actually divides the
server into several virtual servers allowing different users to use their virtual server as if it was the only one
running. Thus, one server can host, depending on it size, many virtual programs and applications and the
technology easily allows the vendor to plug-in additional processing power when it is needed so that the user
never realizes that processing power was doubled or tripled overnight.
Virtualized memory is similar in that all available memory is essentially put into a pool and the virtualized
servers are allocated memory from the pool. What is really cool is that when memory is needed, the vendor just
plugs in more memory to the pool and it is instantly made available as needed.
This virtualization is what allows us to request and get double or triple the compute requirements that we
needed only the day before. For example, in normal day-to-day operations you run, lets say, 10,000 units of
work through your application but on the second and last Friday of every month you run 50,000 units of work
through your application. This means that day in and day out you require the compute capacity to run 50,000
units of work even though you only need it 2 times a month.what a waste.
Page 3
ECM Toolkit
If you were running this application in a cloud-based application, you would only pay for the amount of
compute capacity that you used so 28 days of the month you would be paying for 10,000 units of work and
only 2 days would be billed at 50,000 units of work.
Cloud-computing offers many advantages but chief among them are:
It is highly scalable and can dynamically grow as the work grows. All the user needs to do is say, I
need this much more and the increased capacity is given instantly (and billed at the month
end).
User provisioned. This means that the user who signs up for the service can setup the service and
operate it almost instantly. Once the contract is signed, you are given a shell site and you can
begin to set it up with directories, folders, files, invite users, and basically use everything available
to you from that site. Fully operational and working document libraries with users can be operating
in one hour from the start.
Pay for What You Use or, metered service. In the old days of on-premise software, you typically
bought user license packs of, for example, 50 (whether you had 50 people or not). In a cloud-based
application you only pay for the number of people that use the service so when the project starts
and there are only 10 people- you only pay for 10 people. If in the next months the project ramps
up and you add another 10 people, you pay when you add them. BTW, this also applies to storage.
If you only need 10 gigs of storage to get the project started, you only pay for 10 gigs and can later
increase it to 15 or 20 gigs as needed.
Page 4
ECM Toolkit
Expert Advice
Cloud computing is the ability to deliver computing resources as
a service and these resources are made available over the
Internet. A basic and well know example is Googles Gmail, in
which Google owns all of the resources (hardware and software
and storage of the emails) needed to deliver email to a user and
the user does not own any software or hardware and either pays
a fee for the service or may get it free. Cloud computing today
encompasses all types of applications from simple online data
storage to running highly specialized data processing
applications.
As defined by the National Institute of Standards and
Technology (NIST)1, cloud computing is a model for enabling
convenient, on-demand network access to a shared pool of
configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly
provisioned and released with minimal management effort or service provider interaction. This cloud model
promotes availability and is composed of essential characteristics, deployment models, and various service
models.
This article takes a more narrow view of cloud computing and focuses on those aspects of cloud computing that
relate to the delivery of content and records management services for public agencies, private companies, and
individual users. Cloud-based collaboration is a subset of cloud computing and only exists within a cloud
computing framework. More specifically, this paper will primarily focus on, as it relates to cloud-based
technologies, applications, and services:
Document Imaging/Capture
Electronic Document Management/Collaboration
Records Management
Workflow
Think of cloud information management (CIM) as a subset of the greater cloud computing technology applications.
A point to keep in mind as you read this article is that the basic document management technologies listed above
are essentially the same document management technologies that are available as purchased systems or onpremise systems that you purchase. For the most part (highly qualified!), the cloud-based collaboration
applications available today provide the same functionality that we are accustomed to: document check-in/out,
version control, metadata/key work indexing, search, modifiable security (file, folder), records management, etc.
The difference is that you no longer buy on-premise software licenses (either by users, servers, or transactions),
you dont purchase and own application and storage servers, and associated computer room peripherals because
you are effectively renting the application from the vendor as a service. You dont even need a computer room, just
a fast Ethernet connection and you can have a completely functioning office in the cloud!
National Institute of Standards and Technology, The NIST Definition of Cloud Computing, document
posted October 2009, http://csrc.nist.gov/groups/SNS/cloud-computing/.
Page 5
ECM Toolkit
Page 6
ECM Toolkit
Yes, 4%
Minor
incidents,
26%
No
incidents,
70%
Document Imaging/Capture
This is the ability to scan paper documents and have them stored in a cloud application. The cloud application
may also include processing such as optical character recognition (OCR), converting the document to a PDF, or
making the scanned document available for workflow processing for example. There are a number of vendors
that have developed scanning applications to a cloud provider and this allows you to scan directly to the cloud
application that you have established. Even if you dont have a direct connection established, it is still possible
to move or copy scanned documents to a cloud environment but all processing has to be done prior to
moving the file to that cloud storage area.
Processing of document images may include the following:
Image clean-up and clarity/readability verification
Convert image from TIFF to PDF or other format
OCR image and convert for full text search
Index image with established indexing terms
One consideration to be aware of is that document images (TIFF, PDF, JPEG, etc.) are larger files than Office
documents such as a MS Word, Excel, and PowerPoint files. Prior to committing to scanning to a cloud storage
application, ensure that you understand the pricing model that is offered. If it is based on the amount of storage
you use, ensure that you anticipate the amount of storage versus the costs. Also, consider whether the documents
you are storing have a short or long-term lifecycle and that you have a procedure (such as records management) that
tells you when a document can be deleted from the system. Otherwise, you may be facing large storage costs for
documents that are no longer viable for your business purposes.
As with your own on-premise systems, finding or searching for document images requires the image to either be
indexed with appropriate metadata or converted to text for full text searching via optical character recognition
(OCR). If kept only as an image, such as a TIFF file, the only way to find or search for this file is by using the
indexing or metadata attached to the file, such as File Name, Author, Scan Date, Vendor Number, and other
metadata that has been entered for this file. If the image has been OCRed and converted to a PDF file, then
contents within the file can be searched and the file retrieved.
One note of caution is that an on-premise document imaging system typically uses a separate database to store the
indexing information and this indexing information is not embedding in or part of the TIFF image itself. For
example, if you are trying to index an image with vendor name, vendor ID #, vendor contract #, etc., this
information is not stored in the image header and is therefore not transferred with the image to the cloud repository.
If this type of functionality is needed, consult with the intended CIM provider to determine if this is possible.
Page 7
ECM Toolkit
Ensure that you select a scanning/capture product that includes indexing software so that you can apply
metadata to the file when it is scanned to or moved to the CIM system. This will allow you to search for the
document and be able to find the single document you are trying to retrieve.
In the AIIM report on Content in the Cloud:
10% are scanning to the cloud, either via email, through an in-house server (7%) or via an
outsource (6%).
This shows us that due to the limitations of the typical CIM system, as reviewed above, scanning to the cloud
is still not a viable use of the cloud. This will remain limited until CIM vendors develop a method to allow
indexing of documents with multiple metadata fields and allowing for a robust search. Also, CIM systems
should provide some method for applying retention schedules to allow documents to be deleted in a timely
fashion.
In the meantime, many service bureaus (companies dedicated to scanning documents for you and providing the
scanned documents and indexing information to you) also provide cloud-based applications that allow you to
access your scanned documents in their cloud-based application. There are both nation-wide companies and
local (to your area) companies that can provide this service.
Page 8
ECM Toolkit
Functional applications with document storage. This type of application offers specific applications
such as human resources (HR), enterprise resource planning (ERP), project management (PM),
customer relationship management (CRM), and others. This type of application is built to provide
the necessary functional requirements for the application, such as CRM, and may also provide the
ability to create and/or upload documents into a storage area typically related to a client account.
However, these systems typically do not provide any document management capabilities no
version control, no check in/out, no records management, etc. They may provide simple workflows
for the documents once they are associated with a clients file.
Business & Social networking applications with document storage. This type of application offers the
ability to provide business and social networking through establishing an individual home page,
ability to tag or invite other users to your home page, the ability to establish communities of users,
form discussion groups, instant messaging, etc. This types of applications may also offer the ability
to store and share documents with other users but typically do not include any document or records
management capabilities.
CIM systems may also include:
Libraries/folders/files
Upload single or multiple files to the directory (mass migration still limited)
Upload files via email (which allows you to email a file directly to a directory/sub-directory)
Security at the directory/folder/file/document level for view or edit permissions
Real-time collaboration (simultaneous editing of a single file)
Commenting area for documents (comments viewable on the CIM system, not the document)
Calendaring function for group projects
Workflow (from simple tasks to complex workflows)
Blogs
Wikis
Whiteboard(s)
Discussion boards
IM or mico-blogging
Project management
Connecting to third-party apps (other cloud-based applications such as ERP, CRM, PM)
User profiles (Facebook-like personal areas)
Each CIM application may host a variety of functionality that allows it to work with all of the different mobile
devices including laptops, tablets, smartphones, and whether the devices are Apple, Android, Microsoft, or
others.
Typically, the user/owner will be responsible for managing the site design, permission/security, content, and all
other aspects of the site operation. If an invited user needs assistance or has a problem, he or she will be
directed to the site owner. As part of your planning process, you may want to involve your IT department so
that they become the help center for the site and questions/problems can be directed to the IT department.
Page 9
ECM Toolkit
Page 10
ECM Toolkit
Workflow
Workflow is the automation of business processes, in
whole or in part, where documents, information, or tasks
are passed from one participant to another for action,
according to a set of rules. A business process is a
logically related set of workflows, work steps, and tasks
that provide a product, service, or result to internal users
or customers. A simple example may be the routing of an
electronic vacation request form automatically to both a
manager and the HR department for approval. Your HR
department may approve the request based on your
available vacation days but your manager may not approve
the request due to an upcoming project. Your denied
request is returned to you via email and the denied
request is also sent to HR simultaneously. Workflow
controls the steps needed for approval and non-approval
and electronically routs the documents accordingly.
Most CIM systems do not have complex workflow capabilities that are available in established ECM systems
and this may be a consideration when defining the requirements for a CIM system. Depending on the CIM
system, workflow capabilities may be:
No workflow capability. Any routing of a document is done by email.
Limited task oriented workflow for such tasks as a simple approval process.
Full workflow capabilities that are similar in functionality to existing workflow capabilities in an onpremise ECM system.
Workflow is useful for many reasons and its use can greatly enhance a project or a process. For example, an
accounts payable (AP) process has (for most companies) a highly structured process that is standardized and
repeatable. When workflow is applied to the process, it become much more efficient and it becomes auditable
how many AP invoices are processed per day, time and resource savings can be gained, late or missing
invoices can be tracked, and many other benefits are available.
Because workflow can be an important productivity tool, the need for it should be assessed as part of the CIM
requirements that are developed and documented.
Page 11
ECM Toolkit
Source
Document
Repository
Staging &
Verification
Target
Document
Repository
Page 12
ECM Toolkit
Migration may pose records management and/or legal issues that should be considered. In some cases, simply
copying files from the owners repository to the CIM system may cause the metadata associated with the file to
change such as the owner/creator, date created, etc. From a legal point of view this is not acceptable (because the
files metadata has changed) and the migration method should be tested and reviewed with legal prior to a
migration plan is committed to and used.
And finally, there should be some method to audit the migration so that it can be verified that if 100 files were
moved, 100 files were accepted by the CIM. For various reasons, the CIM system may not accept certain file types
or sizes and these files will not be moved but there may not be an error message from the CIM stating that the
following files were not moved.
One last note, as part of your due diligence, how documents are migrated within the CIM (i.e., from one project or
department to another) should be reviewed with the vendor. But more importantly, how are documents migrated
from the CIM to a new CIM or back to your own repository services. It is entirely possible that at some point in the
life of your CIM system that you will either want to move to a new CIM that offers inexpensive archival storage or to
return the documents stored in the CIM to your company. This includes not only the documents but their metadata
values and other structural elements such as the directory/subdirectory structure.
Page 13
ECM Toolkit
Page 14
SUPPORTING ARTICLES:
n 8 things you need to know about cloud content
management
n Cloud Content Management
Page 15
ECM Toolkit
One of the more interesting developments in the content management space in the past few years as the industry
mainstreams is the development of a wide variety of models for delivery of content management functionality. In
addition to the traditional in-house software solutions, the market now includes a host of SaaS, open source, and
cloud solutions.
Todays guest blogger comes from the cloud part of the content management continuum.Aaron Levie is the CEO and
co-founder of Box.net, which he launched in 2005 with the goal of helping people to access, collaborate, and share
all their content online. Based in Palo Alto, Box.net has since grown into a leading Cloud Content Management
solution for almost 4 million users and companies ranging from small businesses to Fortune 100 companies. At Box,
Aaron focuses on product and platform strategy, incorporating the best of traditional content management with the
most effective elements of social business software.
Page 16
ECM Toolkit
4. It addresses the realities of security.
Firewalls can be cumbersome, but theres a reason for their existence. The security of business content is immensely
important to any organization, and locking content down within a system is meant to keep it from getting into the
wrong hands. But if workers need to share externally and their given software is too restrictive, web-based tools are
only a few clicks away. Ironically, the restrictions that IT put into place to create a more secure environment are
actually pushing frustrated employees to use external platforms beyond ITs visibility. With CCM, its generally true
that employees have more freedom, but theyre also far more likely to use a platform thats flexible, intuitive, and
integrated with other business applications, meaning theyll stay within ITs oversight.
6. It adds value to your current ECM solution and opens opportunities for the ECM
ecosystem.
While CCM can fulfill the content management and collaboration needs of small to medium-sized businesses,
functions like e-discovery, records management, archiving are outside of CCMs domain. Many large companies have
spent significant resources deploying ECM solutions to handle highly structured processes, and when integrated with
these systems, CCM provides a highly usable and flexible platform for users, with robust analytics for IT
administrators, and easy connection to other web-based and on-site platforms through an open API. This new category
of content management opens up immense possibilities for the content management ecosystem, and were already
seeing the emergence of consultants who specialize in bringing cloud technologies to their clients
Page 17
ECM Toolkit
Cloud Content Management (CCM) is such a new subject that at the time I wrote this post there is not a Wikipedia
entry for CCM. I originally heard the term from Larry Hawes of Dow Brook Advisory Service. Larry was hired by Box
(formerly box.net) in 2010 when he was with Gilbane Group. Box was championing the term in order to differentiate
traditional ECM from Content Management, File Sharing and Collaboration in the cloud.
As the workforce demographic continues to shift from Baby Boomers to GenX / Y / Millennials and beyond the mobility
of the modern knowledge worker demands that they can access corporate IT Assets on their personal devices. These
users are efficient and masters of multi-tasking. They use technologies that many CIOs have never heard of. They
should and will expect that the services, apps and information tools they use to perform their jobs are as easy to use
as in their personal lives.
I believe the distinction between ECM and CCM should continue as a way to differentiate between two very different
models and modes of working. Legacy ECM software is licensed per seat, by concurrent users or CPU count(s) with
associated software maintenance. These solutions are robust and highly scalable but they are also expensive,
complicated and proprietary. Some may differ with me on using the term proprietary and point to the fact that they
support multiple OS, SQL Database(s), INSO viewing or provide APIs for third party software integration. But lets
keep it real, unless its Open Source its proprietary. Another key issue customers face is can you easily migrate or
convert your content from one ECM platform to another or in some cases even afford upgrading to the latest version. I
predict this will also become an interesting challenge for CCM providers as some customers decide to move from one
to another. Legacy ECM works very well and has solved real business challenges for thousands of organizations
worldwide, its just different from CCM.
The cloud computing model by its nature is mobile, accessible and open to rapid integration. CCM is currently
focused more on collaboration, mobility and ease of use. As you look around some providers have been offering ASP
or hosted solutions for several years. They are similar to ECM and are really just cloud washed versions of their thick
client ancestors. There are a handful of companies that do offer true cloud based alternatives that are highly secure in
either multi-tenant or private cloud based options. The newer companies that have not come from a traditional
background are focused on more open and simple use cases. That is not to say they arent secure, scalable and
integrated. In fact in many cases they are easier to integrate because of their web services architecture. Also many of
the mobile apps offer content encryption features in the business and enterprise editions.
Cloud solutions are easier to use than ECM platforms that are often complicated and require many hours of
specialized training. On the other hand CCM services are not as feature bloated (rich) as ECM and so they lack some
of the compliance certifications needed for use in highly regulated environments. But that is also where they have an
advantage. People like to use CCM because it looks and acts like social software. I predict that as we see the
products mature these gaps will be filled by both the manufacturers themselves and the emerging partner ecosystems
or cloud brokers.
Page 18
ECM Toolkit
Are you looking into cloud information management (CIM) systems and getting confused? Are social networking sites
also document management sites? Is storing files in a cloud storage application collaboration or is it just a smart FTP
site? What are the functional differences between cloud collaboration sites?
In order to define cloud-based service applications in terms of how they appear to be cloud collaboration applications,
the following five types of applications are reviewed:
Page 19
ECM Toolkit
3. Complex document management.
This type of application offers all of the functions listed above and may also include the applications for
content creation these sites may include a word processor, spreadsheet creation, presentation creation,
records management capabilities, a calendar function, an email function, more complex workflows, and other
application functions that one would expect in a fully realized document management system. Once a user is
logged into the site, everything needed for document creation and management is included and the user
operates in a complete environment.
This type of site may also offer the ability to customize the site via scripts/programming in addition to integration with
other applications via an API. But, because these sites are more complex, they are not as simple to operate as the
first two types of sites.
IT is (typically) needed to set up and operate this type of site.
Page 20
ECM Toolkit
Have you heard the statement I dont have to care about retention anymore; I am going to store my data in the
cloud? I have. Statements like this one make me think of the blue sky filling up with so much data that it blocks
out the sun, clouds turn dark; the weight of the sky becomes oppressive. My shoulders curve to bear the weight of
the data on my back, and the burden weighs me down.
Oh wait! I was just exaggerating; but only a little. If companies relinquish their responsibilities to a cloud vendor,
they are making decisions to ignore what could be impossible, if not impractical to defend or support. I have heard
that statement more than one time in my career. I have heard it in the last year. When I hear it I do roll my eyes.
For someone to say that they are going to ignore retention requirements because all they have to do is store their data
in the cloud, they are choosing to diminish managing information to a single issue. If storage and retention were the
only aspects of managing information, then the staffing levels of most IT and RIM departments are way too big.
Managing information is more than just storage.
Managing information, your information, and my information has many components. First of all ownership!
Organizations own their information. Being concerned about all components of my information is the beginning of
realizing that just storing it in the cloud and hoping for the best is risky business. Information is needed to do
business and defend the organization in times of litigation. The courts dont let you get away with not managing all
the components. Their perspective is if you have it, you must think it is important, so it must be accessible and
available. But if my information is just being stored by another party, can we always get to it? What are my rights?
What if I dont want to keep paying for information that should be deleted its retention is passed. Not controlling
retention means you relinquish your ability to control costs, and increases risk.
Managing information means having the right rules for what is an appropriate record. Not everything that is created
by employees in an organization can be classified as pertaining the organizations business. Are you giving up these
rights also just to not pay for employee costs? Uncontrolled and unmanaged, just storing data in the cloud adds up.
Maybe not as fast, but you will need labor to determine what is relevant in litigation. Whether you should have saved
it at all or for this long will also impact costs. Leaving the decision about how long to store data in the cloud to
others, is very safely assuming you are willing to leave the costs of managing your information to someone else as
well. I refuse to give up that right. And there are those other aspects of information that need to be considered too.
Managing information includes defining what is a record, the sensitivity of information, protecting information,
information use, retention, classification, and those are just on the information side. These are management issues
that may or may not be valued at the same level by services in the cloud.
Page 21
ECM Toolkit
As consumer technologies take over the world, you cant help but notice the interesting paradigm shift that comes
with it. Im not talking about the shift in technology, but how we perceive technology. Like all consumerized
technologies, users start adopting the technology before they think about how they will adopt it. Whereas with
enterprise technology, you think about how you use it first. Cloud storage is one of these new technologies and at the
forefront of an ECMers mind. How is Cloud storage changing end-user habits?
The ease of adopting Cloud storage is frightening, as the chances of poor adoption are very high. But In some ways
the approach of adopt first, think later, is benefiting end-users understanding of content management. Cloud based
storage changes the way a user thinks about content in general, the structure of the content.
Thinking about content in a different way:
Users identify the difference between just storing content to how its used
Users experience the benefit of content and infrastructure agility
Users turn the magnifying glass on the content
The purpose of Cloud storage systems is to actively interact with the content, not just for a backup. If you are using
Cloud storage as a glorified FTP or archive, NO! Stop doing that. Why would you waste the space and the cost of a
system that was not designed for long term retention? If you are an individual, go out and buy a consumer grade SAN
instead and open it up the web. If you are a company, just shame on you. Its likely Cloud storage allows you to
eliminate an external drive or two, but its purpose is substantially more than file storage. For end-users in the past
they usually were not confronted with the difference between active content and stagnant long term content, but now
they have an opportunity to consider it. Suddenly users are understanding meta-data, versioning, and basic document
security.
Thinking more about structure:
Users are forced to consider organization
Users are forced to consider file size and type more
Free or Pay, Cloud Storage systems pose a storage limit of 2GB, 50GB, 100GB and so on. This limit can be
frustrating when you are close to it, but its also very good. Users have to consider what they put into these limited
sized buckets. The tension between the limit and a drive to maximize it creates positive thought processes. The idea
of efficiency is activated and has users thinking about file size, types of files, priority of files, what to keep, what to
dump, and the organization of the content.
Page 22
ECM Toolkit
Thinking more about scanning, if youre doing it:
Users see more consequences of bad scanning
Users must consider two stage scanning
And now for a specific business use case: document scanning. Organizations that scan and have Cloud storage
consider how they can start scanning to the Cloud. There is no easy or straightforward answer to this, as with all
things document capture, but that is where they opportunity lies. Organizations who are blindly scanning documents
today (there are many) to an on premise file share, are forced to take a step back to consider how to do it right in
Cloud storage. Some of the considerations become:
Scan in the right format before final storage
TIFF Group 4 Image Only
PDF full-text searchable
Leverage Compression, but be careful
Consider two stage scanning based on priority of document ( for example full page OCR or DataCapture )
Single stage, scan directly to cloud
Double stage, scan locally, then upload to cloud
We all know about the direct benefits of Cloud storage. If you are on this blog you probably understand ALL the risks
as well. What Ive been noticing is there is a residual benefit, almost psychological benefit, helping to educate endusers on content actualization.
Page 23
ECM Toolkit
Business users are demanding tools that allow them to work with content from anywhere, at anytime and with anyone.
Extending on-premise ECM systems to users outside the firewall and on mobile devices, however, is flat out hard and
expensive. Its fraught with technical and business challenges such as access to browser interfaces and cloud
architecture, not to mention licensing considerations for external users. As a result, IT departments have been slow to
formally extend on-premise ECM functionality such as file sharing, collaboration and workflow to the Cloud.
In response, business users have moved in droves to whatever content cloud service they could find that seems to
address their needs. In a study earlier this year by CryptZone, a SharePoint security vendor, 45% of business users
admitted to taking customer-sensitive content out of SharePoint to do their jobs to put on consumer file sharing
systems and thumb drives to just to work at home and share with those on their projects. Unfortunately, by relying on
consumer-class file sharing services, users introduce serious vulnerabilities into the corporate computing environment.
In fact Gartner predicts that by 2014, a worm exploiting cloud-based personal file synchronization services will cause
massive, costly enterprise data loss and service disruption. {Gartner Predicts 2012: Enterprises Must Balance
Opportunity and Risk in Cloud and Mobile Security}
An AIIM 2012 Industry Watch survey (http://tinyurl.com/9mpma6n) indicated that only 19% of IT department actively
prevent content from being downloaded in an ad hoc way while only 5% of these departments offer an official cloud
alternative. Additionally, only 11% of respondents have a policy governing the use of business-class systems. That a
lot of rogue content access!
Page 24
ECM Toolkit
reporting and workflow needs? Can content access and entitlements be set on a document level or is folder-level as
granular as the system will allow? Can you set expiration and retention schedules? Does the system allow you to make
copies and/or move content, or not? Can content be classified as a record in the event of ediscovery? Again, for
business-class systems, the answer is yes.
Third, business-grade rights management. How can corporate IP or intelligence be safeguarded while at the same time
accessed by those who need it to be effective at their jobs? Can those with permissions share content with 3rd
parties, and, if so, can entitlements be enabled/restricted (i.e. view/edit/delete/etc.) as policy dictates? Can documentlevel access permissions be granted or is a library or folder the most granular? Can content be downloaded? If so, is
native format okay or is an un-editable PDF available? Can printing, email, faxing or forwarding be enabled or
restricted? Can rights be automatically set by the system or is manual intervention required? Once again, yes, is the
answer for business-class systems.
Using content cloud services is inevitable whether it is a corporate initiative or through the creativeness of business
users. Selection of business-class tools provides the foundations to ensure that your content is managed to corporate
policies and procedures. Why take a risk with consumer-class services?
Page 25
Page 26
ECM Toolkit
Key Findings
IT in the Cloud
41% of respondents consider cloud will become the de-facto deployment for general IT applications in
their organization within 3 years. 46% consider that document and content management applications will
be cloud by choice within 3 years.
The strongest advocates for a move to cloud applications are business users and consultants. IT and
Records management staff are mostly against it. Heads of IT and LOB managers are split, but on the whole
in favor. Finance and C-level are split but on the whole against
Page 27
ECM Toolkit
26% are currently using cloud file-sharing services, 20% are creating social media and web content in the
cloud and 15% are using a SaaS sales & marketing application. 38% are not using any cloud applications.
Only 4% have ever had incidents of data loss, security intrusion or long-term unavailability from cloud or
SaaS applications. Of those, only 2.5% reported actually losing data. 70% have been completely troublefree.
37% do not see data in the cloud as any more vulnerable than on-premise, including 10% who feel it is
safer. This rises to 47% and 17% respectively of smaller organizations.
13% have a strategy committing them to cloud or outsource for all future applications. 45% will chose
between cloud and on-premise per application, and depending on experience. 36% have no plans. Only
6% have a policy not to deploy applications in the cloud.
The strongest driver given for a move to IT in the cloud is reduced head count in the IT Dept. (45%), along
with a lower skills requirement (20%). Cloud is also considered by many (34%) to be cheaper than
expanding in-house data centers, and there is a preference (30%) for opex over capex.
The biggest inhibitor given for a move to IT in the cloud is security (61%), followed by the need to
demonstrate compliance, and custody (53%). Integration with back-office applications is given as number
three (31%).
Cloud File-Sharing
30% are seeing increasing use of unofficial cloud content management and file shares. Only 5% have an
official cloud-based option. 19% prevent access to non-approved sites.
The need to share content with project groups outside the firewall is given as the most likely reason users
and managers are by-passing on-premise content management. Convenience and simplicity are next,
followed by better mobile access.
45% have policies to avoid the use of consumer cloud-based file shares, although for 12% they are not
enforced. 37% have no policy. 17% encourage use if it benefits the project, but only 11% specify that a
business-grade system should be used.
Content Management in the Cloud
42% of responding organizations have strategic plans to use some form of 3rd party cloud content
management. 15% have specific policies against cloud content, and 42% have no plans.
Of those organizations with a defined cloud strategy, 20% are moving their document and content
management systems completely to the cloud, including 4% for records archive only and 6% for active
documents only. 38% are choosing a hybrid of linked cloud and on-premise. 8% are already outsourcing
all of their documents and records management to a 3rd party. The remaining 34% are content to create
new content silos in the cloud and on-premise.
Overall, 12% would prefer to use a branded/public provider for cloud storage, with 35% preferring a local
outsource or a specific local data center, and 20% happy to go with a SaaS ECM provider or use their
existing on-premise ECM supplier. Smaller businesses are much more likely to use a branded provider
(23%) compared to the largest organizations (6%). 28% are happier with a private cloud, although 21%
would be prepared to outsource their servers.
When choosing cloud or outsourced services for document and content storage, security (75%) and cost
(51%) are the overriding considerations. Ease-of-use vies with continuity and service levels (25% each),
followed by integration with back-end systems (19%), and then locale of the data centers (18%).
Due to the variety of national rules and regulations, the locale of the data centre is Extremely important
for 40% of respondents and Important for a further 25%. This rises to 45% for the largest organizations
and 46% for those outside North America.
Page 28
ECM Toolkit
14% of organizations are moving quickly towards Office 365, with 34% expecting to adopt it in the next 3
years rising to 41% of the smaller organizations. 12% are more likely to migrate their Office/SharePoint
applications to their own private cloud. 35% are staying with their on-premise arrangement.18% have no
interest in SharePoint.
Cloud Collaboration
68% are looking to use cloud collaboration within the business and between remote sites. 64% would also
like to do so with customers - of which only 15% are doing so already.
File sharing is the most-important aspect of cloud collaboration, but 58% consider folder and document
permissions to be an essential feature. Most would also like approval workflows, capture, and annotate
functions.
Cloud Capture and Archive
Most cloud users (63%) are uploading files one-by-one, although 28% are synchronized to an on-premise
repository. 26% are archiving content or emails to the cloud. Around 10% are scanning to the cloud, either
via email or through an in-house server (7%) or via an outsource (6%).
Cloud Governance
50% of cloud users are attempting to manually replicate security and records policies for on-premise
systems with the cloud, with a further 40% admitting that their cloud governance is somewhat ad hoc.
Only 10% are synchronizing rights between on-premise and cloud systems.
63% see cloud file-share sites as the new wild west. A net of 50% agree that cloud does not yet tick
enough of the security and reliability boxes.
Overall Experiences
A net of 60% agree that apps and app stores are changing IT deployment and by-passing IT (net 44%). A
net of 41% feel that the true costs of cloud deployment over the long term are being ignored
Overall, a net of 32% of respondents see IT staffing across the profession falling because of cloud,
particularly for server and infrastructure specialists (net 61% agree) and storage & archiving (net 18%
agree). A net of 38% feel that the demand for security expertise will grow.
The most useful application reported by those already using cloud content is for sharing content amongst
specific projects and project teams, particularly those outside the firewall. The second benefit is that cloud
sets them free from the limitations of in-house infrastructure, is simpler, and allows fast deployment and
the chance to experiment.
In this report, we look at the issues, experiences and decision-making around general
cloud computing, content storage in the cloud, cloud collaboration and cloud governance.
Download the free 28-page report to inform your decision-process.
Access Report
Page 29
ECM Toolkit
Introduction
The underlying principles of records management (RM) were set out in the days when all records were physical, and
were mostly generated and stored on paper. Most organizations still follow those principles in the day-to-day practice
of managing paper records. After a very slow start, most organizations are also now aware that they need to implement
management policies and systems for electronic records. Most RM system deployments have followed the same
principles as were applied to traditional paper records regarding declaration, classification, retention and disposition.
Indeed, in many companies, electronic record management (ERM) systems serve a dual purpose of managing both
physical documents and electronic records.
One of the major benefits of managing and accessing records electronically is that they can be made widely available
to the workforce at any geographical location, as a searchable repository for shared knowledge, compliance and
litigation support. Ideally, this would take place through a single search and access portal, and, again ideally, the
records would be stored under a common classification system, with a single security model and with universal
retention policies.
To achieve this degree of enterprise-wide conformity presents a tough challenge even within relatively stable corporate
environments, but in recent years it has become a somewhat daunting aspiration due to the sheer volume of potential
records being generated. This comes on top of the rapid increase in media types that need to be considered as
records, as well as the accumulation of separate document repositories within email, messaging, ERP, CRM,
collaboration and line of business systems. Further disruption from on-going mergers and acquisitions simply adds to
the challenges.
In this report we compare the adoption and success of traditional approaches, the strategies being considered to cope
with current and future challenges, and the trend of investments in records management solutions.
Key Findings
The volume of paper records is finally decreasing. Paper records are decreasing in 41% of organizations, compared to
31% where it is still increasing. This is the first time AIIM has measured a net decrease across all sizes of
organization.
Access to records across the enterprise is still poor: 28% of respondents consider the accessibility of
records to employees across their business to be poor or very poor. Only 4% consider it to be excellent
for example, being able to search an enterprise records system for records from many sources.
The goal of an enterprise-wide ERM system is still popular but is proving hard to achieve: A single
enterprise records management model underlying all content systems is the goal for 58% of respondents.
Only 9% have achieved this, although a further 12% have RM integration across organizational units or
subsidiaries. 28% have no RM systems.
Page 30
ECM Toolkit
Support is needed at the highest level: Lack of commitment at board-level or C-level is given as the biggest
reason for non-adoption of ERM systems, and the difficulty of securing agreement across departments is
also frequently cited.
Key policies are not in place: Only 16% of organizations have a documented and effective information
management strategy. A further 15% have such a policy but it is largely unreferenced. Less than half of
even the largest organizations have a risk management plan that includes records management.
Reduced storage cost joins compliance as the biggest driver: Statutory and industry compliance combine to
be the strongest drivers, ahead of reduced storage costs. Sharing and exploiting knowledge comes next.
Legal costs could be reduced by a quarter. Most respondents feel that audit costs, legal costs, court costs,
fines and damages could be reduced by 25% with best practice records management.
Poor records practice can severely harm your reputation: 28% have had their records management and
security practices criticized or exposed by an auditor in the last three years. 6% have been criticized by a
regulator, 5% by lawyers and 4% (1 in 25) in the press.
Dealing with emails and agreeing taxonomies are still front of mind: Managing emails as records and
agreeing corporate classification systems are the biggest current issues. Social, mobile and cloud are the
least pressing.
Search and automated classification are taking some of the heavy-lifting: Many organizations (37%) are
focusing on search to improve e-discovery and knowledge-sharing. Others (28%) are making increasing use
of automated classification.
Resources for RM are being increased: A net 36% of organizations are planning increased RM budgets
(50% increasing, 14% reducing) and a net 20% are adding dedicated staff resource.
Spending on system software is set for biggest increase: Spending intentions for dedicated RM systems,
RM modules for ECM, e-discovery tools, and email management are high, whereas spend on outsourcing
for both physical and electronic records is set to fall.
Download this free 27-page report to see how your records management strategies match
up with the best or the worst and how to move forward.
Access Report
Page 31
WEBINARS:
n Managing Content in the Cloud
Capturing, Sharing, Governing
n Keeping ECM in Sync: Cloud, Mobile,
and On-Premise
Page 32
ECM Toolkit
Webinars
Managing Content in the Cloud
Capturing, Sharing, Governing
As computing heads for the clouds, what are the potential benefits for collaboration and information sharing, and
what particular issues should information practitioners be aware of as regards security, governance, and lifetime
storage? Content may be originated in the cloud, it may be captured to the cloud, or it may be placed in the cloud for
sharing and collaboration. It may also need to be connected and available to both on-premises business processes or
other cloud applications.
AIIM is about to publish its latest research on Managing Content in the Cloud; this webinar will report on the trends
and the compelling story our survey respondents have to tell. Join AIIM CIO, Laurence Hart, as he interprets and
reports on these findings. Some areas hes likely to address are:
Strategy for on- and off-premises content storage and content management
Pros and cons of bypassing on-premises content management
Extending your governance structures to cloud applications
Capturing and synchronizing content to the cloud, and replicating content back to on-premise
Mobile aspect to cloud strategies
This webinar is pre-approved for one AIIM Certified Information Professional (CIP) Certification Maintenance credit.
Access Today
Access Today
Page 33
ECM Toolkit
Access Today
Access Today
Page 34
VIDEOS:
n CIP Could Computing Module
Page 35
ECM Toolkit
Videos
CIP Could Computing Module
Watch Now
Watch Now
Page 36
Page 37
Success Story
Pharmaceutical SStartup
Pharmaceutical
tartup SSpans
pans the
G
Globe
lobe with Cloud V
Vault
ault
M-Files
M-F
iles
l CloudV
CloudVault
Cl
dVault
aul
ault
l on W
Windows
indows Azure
Azure deliv
delivers
ers
the speed and contr
control
ol for office-less
office-less operations
Overrall, our experience
Overall,
exp
with
M-Files
M-F
Files has been quite good.
The system is fast,
fa and the
searching
searching and retrieving
retr
features
are
arre great.
grreat.
eat. The way
w you
y can
sort
sort documents into
i different
classes and groups
groups of classes with
metadata is fantastic.
f
-Blaine
-B
laine Ah Y
Yuk-W
Yuk-Winters
u
P
Project
roject M
Manager,
a
Lypanosys
Lypano
Blaine Ah YYuk-Winters
uk-Winters describes LLypanos
Lypanosys
yypanosys as a virtual ccompany.
ompany.
sstartup,
tartup, where
where three
three directors
directors oversee
oversee the development
development and approval
approval of a new
new
de
dermatology
rmatology product.
product.
It
s virtual
virtual
Its
D
D
acr
oss the US, Asia, and Australasia.
Australasia.
across
>
>
in
vented for.
forr. And so ffar,
arr, the ccompany
ompany has be
en able tto
o mak
e the cloud w
ork: all
invented
been
make
work:
of the ccompanys
ompanys docume
nts rreside
eside on a hos
ted se
rver and ccan
an be easily shar
ed
documents
hosted
server
shared
>
>
t
t
,
,
K
K
dD&s
dD&s
M-Files Inc.
5050 Quorum
Quorum Drive
Drive
Suite
Su
ite 600
Dallas, TX 75254
Phone:
Phone: 972-516-4210
972-516-42
Fax:
Fax: 972-516-4211
972-516-4211
M-Files Corporation
Hatanpn
Hatanpn valtatie
valtatie 26
33100
33100 TTampere
ampere Fin
Finland
Phone:
Phone: +358 3 3138
313 7500
Fax:
Fax: +358 3 3138
3138 7
7550
K,
K,
transit
was
locate
down
actually in an airport in tr
ansit iin
n Asia and w
as able tto
o quickly loc
ate and pull do
wn
,t
,t
^,
^,
dd
zt
zt
&
&
VDOHV#POHVFRP
VDOHV#POHVFRP
ZZZPOHVFRP
ZZZPOHVFRP
t
t
/
/
t
t
E\0)LOHV,QFM-Files
E\0)LOHV,QF
is
a registered
registered trademar
trademark of M-Files
Corporation.
Co
rporation. All other
other trademarks are
property
property of
of their respective
respe
owners.
dd
d
d
document.
documen
t. The
The ssystem
ystem w
wasnt
asnt an
anything
ything tha
thatt w
wee w
would
ould w
want
ant tto
o eemploy
mploy ffor
or
D&s
D&s
F
For
For do
downloading,
wnloadi M-Files
Cloud Vault
Vault is rreally quite
fast. W
Were
ere find
finding it quite
satisfactor
satisfactory
ry in that
th rrespect.
-Blaine
-Blaine Ah Y
Yuk-Winters
Yuk-W
u
P
Project
roject M
Manager,
a
Lypanosys
Lypano
dD&
dD&
D&
D&
tDK
tDK
W
W
D&^Y>
D&^Y>
KD&s
KD&s
t
t
Dtt
Dtt
D&s
D&s
theyre
theyre in Auckland or Ankara.
Ankara.
<K
<
K
d
d
Z
Z
does on gr
ground-based
ound-based se
servers.
rvers.
D&
D&
vversion
ersion history.
history.
D&
D&
&
&
d
d
dd
M-Files Inc.
5050 Quorum
Quorum Drive
Drive
Suite
Suite 600
Dallas, TX 75254
Phone:
Phone: 972-516-4210
972-516-42
Fax:
Fax: 972-516-4211
972-516-4211
M-Files Corporation
Hatanpn
Hatanpn valtatie
valtatie 26
33100
Finland
33100 TTampere
ampere Fin
Phone:
Phone: +358 3 3138
313 7500
Fax:
Fax: +358 3 3138
3138 7
7550
VDOHV#POHVFRP
VDOHV#POHVFRP
ZZZPOHVFRP
ZZZPOHVFRP
E\0)LOHV,QFM-Files
E\0)LOHV,QF
is
a registered
registered trademar
trademark of M-Files
Corporation.
Co
rporation. All other
other trademarks are
property
owners.
property of
of their respective
respe
&
&
consultants
consultants and advisor
advisorss tto
o login in
into
to the ccompanys
ompanys ssystem
ystem and access a sele
select
ct se
sett
t
t
&
&
D&s
D&sD
D&sD
D&
D&
s
s
D
D
&&D&s
D&s
About
out Lypanos
y
ys
>>
>
>
>zW
>zW
&Q
&Q
The ability to sh
share files with
consultants overseas
overse has proved
very
verry handy.
handyy.. They can pull files
whenever
whenever they want
w
at any
time they want.
w
-Blaine
-Blaine Ah Y
Yuk-Winters
Yuk-W
u
P
Project
roject M
Manager,
a
Lypanosys
Lypano
M-Files Inc.
5050 Quorum
Quorum Drive
Drive
Su
Suite
ite 600
Dallas, TX 75254
Phone:
Phone: 972-516-4210
972-516-42
Fax:
Fax: 972-516-4211
972-516-4211
M-Files Corporation
Hatanpn
Hatanpn valtatie
valtatie 26
33100
33100 TTampere
ampere Fin
Finland
Phone:
Phone: +358 3 3138
313 7500
Fax:
Fax: +358 3 3138
3138 7
7550
VDOHV#POHVFRP
VDOHV#POHVFRP
ZZZPOHVFRP
ZZZPOHVFRP
E\0)LOHV,QFM-Files
E\0)LOHV,QF
is
a registered
registered trademar
trademark of M-Files
Corporation.
Co
rporation. All other
other trademarks are
property
property of
of their respective
respe
owners.
Page 43
ECM Toolkit
Access Today
Cl d C
CloudComputingandRecords
ti
dR
d
Management Howproperplanningcan
Management
ensureyoudontmissthenextwaveinIT
d t i th
t
i IT
ServicesandPlatformDelivery:
George Broadbent
Director, Entium Technology Partners
Jamie Brown
Director, Colt Telecom
Access Today
Page 44