1. Place image here INFORMATION MANAGEMENT Cloud Computing and Enterprise Information Management March 2010 Jim Cuff VP Strategy, Iron Mountain Digital

2. 2 Agenda The Enterprise Cloud (& who it’s for) The Cloud as a reality TV show Iron Mountain Business Overview Meeting your obligations in the cloud

3. 3 Global Leader in Information Management Services $3B of revenues –Records Management –Data Protection & Recovery –Digital Archiving –Information Destruction Reduce the costs and risks of information protection & storage – since 1951 –Broad portfolio of services –Global service footprint

4. 4 Cloud Computing: The Promised Land

5. 5 Not All Clouds are the Same Cloud 1.0 Cloud 2.0 The Iron Mountain Enterprise Cloud Security, Accessibility, Privacy, Retention, Recoverability, Destruction, eDiscovery Experience, Expertise, Trusted Vendor

6. 6 2008 Do you know where your cloud is?

7. 7 THE CLOUD: REAL WORLD EXAMPLES

8. 8 Selected Cloud Deployments Global Company, Fortune 500 Problem: Large global/mobile population (over 80K seats) with multiple locations, need for eDiscovery on PST files Solution: Connected Large state agency Problem: Looking to maximize data backup compliance as it relates to legal evidence Solution: Virtual Files Store Large financial investment firm Problem: Reduce complexity and risk Solution: Stratify Legal Discovery Service

9. 9 Examples: “Non Cloud” -Financial Services Firm: Exchange Hosting “in the cloud”; email archive “on premise” -Large Aerospace Company: Several large sites, investing in internal IT capabilities, want internal control over PC data -Health Information Services Company: Looking to offer their own cloud services. May move from the cloud, to their own cloud

10. 10 MEETING YOUR OBLIGATIONS IN THE CLOUD – EXPANDING THE CHECKLIST

11. 11 Discovery – Your Obligations are the Same (but operations are out of your direct control) -The requirement to produce relevant information does not change based on your technology choice -Is discovery even a service option? -Who will know? -Other questions: - Will returned data meet evidentiary requirements - Staff, resources, & capability to meet your needs (even if it is an uplift to your current SLA) -Is your cloud solution still “massively scalable” & “self – provisioning”

12. 12 HOLD – How hard is it to do? -Is there some method to effectively implement a hold? -Strategies: - Hold ALL - Migrate potentially responsive information out of the system -Other Questions: - Can a “continuous hold” be placed? - What is the process to remove a hold? - Can more than one hold be placed at a time?

13. 13 Retention and Destruction -Is there a process for “orderly destruction”? - Retention schedule support - Applying record classes to items - Destruction workflow - Audit records / proof of process? -Potential work-arounds: - If a single record type is involved in a solution, the “cloud” may not need to learn RM (just deletion) - Move declared records out of the system and treat the system as an operational system

14. 14 Other Topics to consider -Audit obligations need to be supported (and scale internal to your organization) -Your data profile – do you know what you have? -Cloud consolidation & shake out -Are there cloud providers for your cloud provider?

15. 15 Cloud: Use the right tool for the job Thanks - Jim Cuff jim.cuff@ironmountain.comjim.cuff@ironmountain.com