The Saas Trap: Considerations needed before moving to software-as-a-service

The Saas Trap: Considerations needed before moving to software-as-a-service

By Paul Berger

March/April Edition, 2008: The software-as-a-service market is showing phenomenal growth. If something’s big, does that mean it’s a model end-users should adopt? Paul K. Berger from Happen Business Says organisations should see all sides of the equation before jumping on the bandwagon.

Adoption of the software-as-a-service (SaaS) sales model is accelerating at a phenomenal rate in the region, changing the way vendors do business and the way organisations use software.

SaaS has been one of the IT industry’s hottest buzzwords over the past couple of years, and for many good reasons. The ease of use, rapid deployment, limited upfront investment in capital and staffing, plus a reduction in software management responsibility all make SaaS a desirable alternative to on-site solutions.

Simply, SaaS is a term that is used to describe a software application delivery model which sees a software vendor host applications over the Internet and deliver those applications to the customer for a recurring license fee.

According to Springboard Research the noise around SaaS is more than hype. The market shows significant growth in awareness and adoption of SaaS across the region, with the market increasing 92.5 percent in 2006 to reach a market size of US$154 million this year.

Meanwhile the APAC region is expected to reach US$1.16 billion by 2010, with a compound annual growth rate of 66 percent, ultimately comprising 15 percent of the enterprise software application market.

The success so far of vendorsoffering customer relationship management (CRM), collaboration, and management software has shown the power of the on-demand softwaredelivery model. However, many organisations are not aware that thereare pitfalls in what looks to be the answer to all their software problems.

Issues around control, integration, security and limited application are some of the very real downsides that need to be considered before a company turns to this increasingly popular software buying model.

Control, or the lack thereof, of organisational data is arguably the biggest downside to the SaaS model.

Previously an organisation had total control over data as it was all stored on-site in its file servers. Under the Saas model, the level of risk rises as your data is transferred from your own premises to those of third parties and their applications.

If a potential SaaS user neglects to fully investigate a SaaS provider and determine what they will do to protect sensitive customer, sales and other data, then there is increased risk of that data getting into the wrong hands and all that implies.

There are also questions of internal control over who has say over what applications get installed and used. Because it is so easy to obtain such SaaS-based software (often all you need is a credit card and an Internet connection), businesses need to determine who has the authority to buy/download and use what software - is it the IT manager, or your IT fix-it guy or the MD?

Thought also needs to be given to the end of a relationship with a SaaS provider; that is, once the relationship is over, can the organisation still use the SaaS provider’s software to access their database to read its own data?

Many SaaS providers will provide access to the data once the hosted solution is turned off, but not the software to read that data. This effectively makes those files useless.

There’s also the question of application failure. Can an application delivered by a hosted service provider be resurrected faster if it falls over compared to one run by your in-house IT staff or IT partner?

With an in-house application, you at least gain the benefit of knowingwho and how many people are working to fix it, whether it is truly a priority to them, and what the current status is in terms of repair operations. This way, the problem can at least be managed and worked around.

The organisation needs to ask two questions: “Which one is more likely to go down?”, and “Which one will be faster bringing things back up?”

Having full ownership and control over your data allows you to embark upon software integration projects that would otherwise be impossible.

An example could be in integrating accounting and workflow software into an e-commerce website, thereby enabling the site owner to view real-time stock pricing, product availability and order tracking. This integration example would be a lot more difficult if all parties had to go through SaaS software partners to get all the required data.

We mentioned before that because SaaS is so easy to initially deploy, individuals in businesses have begun procuring SaaS applications themselves—leaving the IT manager or partner out in the cold.

This is also an issue when it comes to security and IT management. Again, as these applications reside with a third party, and are typically being initiated and implemented by non-IT professionals these applications invade existing business processes, creating more work for the IT guys and creating possible security issues.

Just because an application is Web-based or hosted offsite, it doesn’t mean that it doesn’t have to adhere to a company’s security, privacy, and internet use policy requirements. There is also the question of data backups. With SaaS, data backup is typically offloaded to the SaaS provider, but many organisations feel much more comfortable being in total control of their own data.

Organisations have to look to IT to ensure that SaaS usage in their environment(s) is consistent with the policies and controls they’ve developed for traditional on-premise applications.

Larger, more complex applications such as accounting and enterprise resource planning (ERP) currently do not lend themselves to being delivered over the web. They require very detailed implementation and integration with a business’ other systems, applications and processes.

Market researchers Gartner argue the on-demand model is not suitable for complex business uses like logistics support and order handling, and forlarger companies requiring business process support.

SaaS should be avoided when dealing with transactional-intensive applications such as in a warehouse management system; when data is exceptionally sensitive, and when on-demand service providers don’t have the functionality or provide the level of integration required.

SaaS has its benefits, but an organisation needs to bear in mindthat SaaS lends itself to businessfunctions like sales and HR for a reason. A SaaS advantage is using the SaaS providers’ hardware, however with cost of hardware becoming a negligible part of the overall investment in a business system, this advantage becomes much less attractive.

When analyst firms like IDC and Gartner are putting them as the top dog in the data warehouse business, it’s easy to believe that Oracle hold the market leading position by a fair margin. This strong position has been helped along with a focus on clustering, and its ability to not be slowed down by the wait for technology.

“Enterprises run into the problem of what to do when they have the biggest and best server, if that maxes out then where do you turn?” says Peter Thomas, senior director of technology solutions at Oracle.

This leads up to clustering data,which is looked upon with hungry anticipation thanks to the ability to build flexibility, which is exactly how Amazon.com started to view the technology when they ran into data issues. Thomas explains that the online retailer ran into data warehousing issues with their “Also Bought” system where shoppers could see what other merchandise people who bought one item were also clicking onto their credit cards.

According to Thomas, the Seattle based company ran into a technology cap where they were running the data off the best available servers and were keen to find an alternative to waiting, “Amazon moved from huge Unix servers to small, clustered Intel servers running Linux,” he says.

“One of the problems Amazon ran into was Linux Volume Manager not being able to give the performance they needed so they switched to Auto Storage Manager which gave them double the Input/Output capacity.”

Another benefit that came from this process was increased auditing capabilities, which allow administrators to see who accessed what data, when it was and from what IP address. This is becoming of particular importance for organisations with a presence in the United States (US), Thomas explains that should you touch any part of the US shore as part of your business you need to be considering the Sarbanes Oxley style requirements for data leakage reporting.

Oracle has been showcasing the flash new features of their 11g database but not everyone has made the switch. While there is reluctance from some quarters to get on board with the new version, Thomas explains that the feedback has been positive from all those who have.

Comment on this story.

Business Solution: