This week, a piece I wrote on federal compliance rules was published in Government Computer News. The article is about the challenge we have at WebEx navigating the maze of federal compliance rules, which are not presently conducive to SAAS or on-demand software. We are working with government security officials to raise awareness to this problem in hopes that more efficient procedures will be put into place.
For our part, WebEx, has adopted a comprehensive security and compliance strategy, as the article mentions. Last year, we asked the U.S. National Data Security Agency to conduct an independent risk assessment audit of our infrastructure. When the risk assessment is complete, WebEx systems will be certified and accredited to meet all standards, regulations and controls set forth by the federal government for information technology infrastructure – in accordance with the National Information Assurance Certification and Accreditation Process (NIACAP). We are seeking certification and accreditation voluntarily to not only improve our already vigorous security but to assure federal customers of our commitment to this important aspect of our service.
The challenge is that today, the federal policy for private companies offering on-demand software-as-a-service solutions is ambiguous. NIACAP compliance is not required for on-demand service providers and to obtain it is expensive and slow-going. Yet, we have found that government security managers look suspiciously at any company who lacks it, especially on-demand providers who are relatively new to the marketplace. As difficult as NIACAP compliance is to obtain, not having it means not being competitive in the federal market. Current federal policy favors, by default, large integrators who are being forced to build new products under dedicated government infrastructure that compete with or replicate commercial off-the-shelf products.
At WebEx we hope to help change this paradigm, by offering the federal government a cost-effective, scalable means to obtain the latest technology, without sinking more money into infrastructure, personnel, training and development.
And while policy is important, I believe gaining acceptance in the federal sector will also require a culture change. Software-as-a-service (SaaS) was designed to host on-demand applications on a dedicated infrastructure, outside the enterprise, thereby maximizing resources and eliminating the costly overhead required to develop and maintain on-premise systems. What the government loses in physical control and oversight, it gains in less time spent maintaining, managing, repairing, and trouble-shooting a system.
Some of America’s most successful corporations, such as Boeing, Johnson and Johnson, Texas Instruments and Coca-Cola trust on-demand service providers. Our hope at WebEx is the federal government soon will, as well.
Gary Griffiths, President, Products and Operations, WebEx