Thoughts on British ICT, energy & environment, cloud computing and security from Memset's MD

For several years now, we’ve been running all our business systems over the ‘net (including instant messaging, email, document management, project management & collaboration) by using open source software. Both Nick & I are huge fans of open source, so I thought I’d share why and how we use it within Memset.
As of 2008, 85 percent of businesses were using open source software, according to Gartner. That percentage has probably increased since then as more and more businesses find that they consistently get great value – and the desired ROI – from open source software.
We turned to open source for a number of reasons:
Perhaps the biggest objection to open source I hear is, “But what if the solution I’m using stops being supported by the open source community?”. First off, you have this problem with commercial software; what if the supplier fails, or in the case of one like Microsoft what happens when they change version and stop supporting yours.
That is not the real answer though; one of the real beauties of open source software is that it is designed to be, well, open. All the solutions we use (see below) are based on open database architectures (often MySQL) with lots of documentation, so that even in the worst case scenario of the package no longer being supported, all of our business information is available in an open, accessible format, requiring only a little DBA time to extract. Try doing the same with a proprietary software’s internal data base!
Also, because the solutions are self-hosted (ie. you’re getting the software from someone other than the person providing the hosting) you are in total control of your own data. We do not use Google Docs, for example, mainly because I don’t want all my company information to be stored on a random server somewhere in the world with no guarantees of security.
We use a mixture of in-house developed system and open source solutions such as Trac (project management & Wiki) and Sugar CRM to deliver an interlinking suite of information management tools which are available to everyone in the company.
Customer information is stored in a master central database, and by using rapid software development platforms like Django we have been able to quickly and cheaply add all the features and tools we need with our own internal development team.
However, the key element in the context of information management is probably our Wiki; it contains all procedural information and the distilled wisdom of the people in the company. You get complete version control and logging for free with the software, and those built-in auditing features helped make getting our ISO9001 accreditation a breeze.
Trac is invaluable for sharing information between teams, keeping track of changes to documents and projects, listing outstanding issues, assigning jobs and creating visibility of each others’ workflow. Being able to have an organised central location where everyone can go is great. It is certainly a lot better then trying to pass around .doc files from one person to the other, or constantly uploading and downloading .doc files to and from Sharepoint and having to worry about out of date versions. And, as its Web-based, you can access your data online from any computer, anywhere, secured and encrypted over HTTPS.
Sugar OS is an open source CRM application bringing a feature-rich set of business processes that enhance marketing effectiveness, drive sales performance, improve customer satisfaction and provide executive insight into business performance.
At Memset we use SugarCRM to improve productivity and sales effectiveness through the sales lead management functionality.
RT is an open source issue tracking and workflow platform. We use this software for all our customer technical support. It allows us to keep track of and assign assign tickets and to monitor who is working on which tasks, what’s already been done and when the tasks were completed.
Openfire, is an open source XMPP/Jabber server for instant messaging. Sure, you could use MSN, but we prefer not to have Microsoft listening in on our corporate communcations. We self-host and fully encrypt our internal instant messaging chat.
These are just a small selection of the open source solutions we have implemented at Memset. Also, despite us having a lot of technical know-how, you really do not need to be an expert to use these open source systems.
Even if you do not have the very basic systems administration skills in-house there are plenty of companies like Memset who will happily host and manage these services for you, while still giving you full control and data-ownership. With more and more companies looking to Cloud-based business management services like these, open source really is coming of age, even for the most security-conscious companies; Memset is fully ISO27001 certified and can ensure that your business-critical data remains 100% under your control, within UK borders.
Open source should be considered as a viable option for your business as it provides better value for money, lower costs, increased productivity and improved security.
Page optimized by WP Minify WordPress Plugin
Interested in your comment "We do not use Google Docs, for example, mainly because I don’t want all my company information to be stored on a random server somewhere in the world with no guarantees of security." Here at the University of Sheffield we have just implemented Google Apps, primarily for mail and calendar, but including docs, and we looked at the date security and privacy issued in some detail. We concluded that they were really no different from the issues that we have when we store data in-house. Google have published their privacy policy here:
http://www.google.com/intl/en/privacy/
and a white paper on security here
http://static.googleusercontent.com/external_content/untrusted_dlcp/www.google.com/en-GB//a/help/intl/en/admins/pdf/ds_gsa_apps_whitepaper_0207.pdf
as well as a white paper on deploying google apps in HE which was very helpful (but is not publicly accessible as far as I am aware)
Google are subscribers to the Safe Harbour agreement and our investigations into the terms of the Patriot Act concluded it would make no difference whether or not any data the US Government wished to have sight of was held in Google or not.
Additionally, google claim that the data storage model used by Google distributes data across different servers, creating a more secure and resilient environment.
Admittedly we haven't reached the stage where we would allow our core business systems - student, finance etc - to be stored in the Cloud but we would look at it seriously should a pressing business need demand it.