Cost cutting vs cost optimisation

Issue 5 2023 Information Security

While South Africa has fended off the threat of recession after recording a slight growth in the first quarter of 2023, the global tech industry is still being cautious as it prepares to weather a storm.

Tech companies are looking at optimising their costs across the board, with one such area topping the list of CIOs being controlling cloud expenditure. The cloud’s recent fortunes have also been closely tied to the pandemic, with the market for cloud services more than doubling in just three years since 2020. So, if the pandemic bubble is truly over, is the cloud going to burst with it? Not necessarily, as cutting cloud costs doesn’t always have to mean cutting back on the cloud altogether.


Michael Cade.

Great expectations

It might seem obvious, but at times it’s worth reminding ourselves that optimising costs was one of the main reasons for adopting cloud strategies to begin with. And it’s not simply a case of too much of a good thing – despite research indicating that 61% of South African organisations spent more on cloud solutions in 2021 than 2020, with the public cloud services market expected to increase at a compound annual growth rate of 24,5% through to 2025.

So, despite the cloud promising cheaper pastures, in reality, many CIOs are still waiting for the initial investment to pay off. How has this happened?

When leveraged correctly, the cloud can greatly reduce costs, but it’s important to remember that cloud providers aren’t in the business of saving you money. If you’re ordering from your favourite pizza chain, and adding extra topping after extra topping, they aren’t going to stop you and ask, “Are you sure you need all that?”

The cloud’s value is that you pay for what you need, but therein lies the issue – its flexibility is a double-edged sword. This has caught out many a CIO to the point where ‘bill shock’, a term once reserved for utilities, has become synonymous with cloud computing. Bills can scale out of hand, not just because it’s easier than ever to build out new environments, but because IT teams can often be focused on looking forward to what they will need next, and not always looking back to what they don’t need anymore.

Enter FinOps

This is why we’ve seen the rise of Financial Operations (FinOps) in recent years. Operations teams have historically never had to worry about day-to-day costs, but the rise of the cloud has brought with it opex-dominated budgets. Looking at IT operations through a financial lens is vital to controlling these rising costs, particularly on an enterprise scale.

The options for beginning to optimise cloud costs are broad, and choosing the right strategy for your environment is often the first hurdle. Re-platforming or repatriating to a new cloud or back to the good-old physical server are both viable options. However, they both present a big initial lift, while often not necessarily fixing the issue at the source, not to mention having to navigate around vendor lock-in.

Rather than trying to pull away, many opt to dive even deeper into the cloud and re-architect with cloud-native models and services to try and offload costs. This might include better managing of VM instances, implementing intelligent tiering for storage costs or implementing containers and Kubernetes. The latter needs to be set up correctly, however, or it can wind up being just as much of a drain on budgets. If the cloud’s flexibility is a double-edged sword, Kubernetes is an even bigger blade, offering more upside but more financial risks if mismanaged.

This is a good example of how key a consideration personnel and skills are, when optimising cloud spend. The cloud skills gap is an ongoing issue for the industry and a large factor in why we’re in this position to begin with. The pandemic essentially forced many businesses (and their IT teams) to launch into the cloud without enough time to prepare and now many are (quite literally) still paying the price. Since then, while the gap might be closing slowly, many teams lack the expertise to undertake the large scale re-architecting that may be required to optimise costs. Businesses need to look at outside expertise where needed, or alternatives such as dedicated cost saving modules, or automated cloud cost optimisation solutions.

The missing piece

Finally, it’s crucial that during this cloud optimisation, decision making, security and data protection aren’t neglected. With cyber threats like ransomware becoming increasingly ubiquitous, businesses need to ensure that they are staying as resilient to these threats as possible, or short term savings could lead to long term pain. According to the 2023 Veeam Ransomware Trends Report

(https://www.veeam.com/ransomware-trends-report-2023), 85% of organisations suffered at least one cyberattack in a twelve-month period; an increase from 76% experienced in the previous year, so now is definitely not the time to cut back on protection in the cloud.

It’s important this stays top-of-mind, for example, when looking at storage costs for cloud-hosted backups, or changing storage tiers for existing workloads. Essentially, decisions for each workload in the environment need to be made considering these three factors – operations, finances and data protection. This may mean that while businesses aim to push overall cloud spending down, data protection as a fraction of this may continue to increase. Indeed, most organisations around the world expect to increase their data protection budget in 2023 by 6,5% (5,8% in Middle East and Africa) according to the Veeam Data Protection Trends Report 2023, which is notably higher than overall spending plans in other areas of IT.

Even during a boom, you’d argue that businesses need to get wasted cloud expenditure under control, but against the backdrop of economic uncertainty and a technology sector that’s licking its wounds, it’s more important than ever. While strictly speaking, the best time to act was early on, when workloads were first moved to the cloud, the next best option is now. After all, you know what they say about the best time to plant a tree.

For more information, contact Veeam, +27 10 822 1120, www.veeam.com


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

What is your ‘real’ security posture?
BlueVision Editor's Choice Information Security Infrastructure AI & Data Analytics
Many businesses operate under the illusion that their security controls, policies, and incident response plans will hold firm when tested by cybercriminals, but does this mean you are really safe?

Read more...
What is your ‘real’ security posture? (Part 2)
BlueVision Editor's Choice Information Security Infrastructure
In the second part of this series of articles from BlueVision, we explore the human element: social engineering and insider threats and how red teaming can expose and remedy them.

Read more...
From the editor's desk: The beginning of the end
Technews Publishing News & Events
            As we come to the final issue of SMART Security Solutions, we can look back on a tough year: long decision-making cycles, squeezed budgets and the expectation of miracles on a shoestring. SMART Security ...

Read more...
AI and automation are rewriting the cloud security playbook
Technews Publishing AI & Data Analytics
Old-school security relied on rules-based systems that flagged only what was already known. AI flips the script: it analyses massive volumes of data in real-time, spotting anomalies that humans or static rules would miss.

Read more...
Onsite AI avoids cloud challenges
SMART Security Solutions Technews Publishing Editor's Choice Infrastructure AI & Data Analytics
Most AI programs today depend on constant cloud connections, which can be a liability for companies operating in secure or high-risk environments. That reliance exposes sensitive data to external networks, but also creates a single point of failure if connectivity drops.

Read more...
Sophos announces evolution of its security operations portfolio
Information Security
Sophos has announced significant enhancements to its security operations portfolio via Sophos XDR and Sophos MDR offerings, marking an important milestone in its integration journey following the acquisition of Secureworks in February 2025.

Read more...
Cybersecurity operations done right
LanDynamix SMART Security Solutions Technews Publishing Information Security
For smaller companies, the costs associated with acquiring the necessary skills and tools can be very high. So, how can these organisations establish and maintain their security profile amid constant attacks and evolving technology?

Read more...
AI security with AI Cloud Protect
Information Security
AI Cloud Protect is now available for on-premises enterprise deployments to secure AI model development, agentic AI applications, and inference workloads with zero impact on performance.

Read more...
Kaspersky finds security flaws that threaten vehicle safety.
News & Events Information Security Transport (Industry)
At its Security Analyst Summit 2025, Kaspersky presented the results of a security audit that exposed a significant security flaw enabling unauthorised access to all connected vehicles of one automotive manufacturer.

Read more...
The overlooked risks of everyday connectivity
Information Security
That free Wi-Fi you are using could end up costing you a lot more money than your hotspot data if it has been compromised, says Richard Frost, head of technology solutions and consulting at Armata Cyber Security.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.