Last month, the accounting manager of a manufacturing firm asked a question that keeps coming up in conversations across Turkish industry: ‘Should we run our software on our own server, or access it over the internet?’ The question sounds simple, but it conceals three interconnected decisions: security, growth capacity, and real cost. Companies that evaluate these separately tend to reach the wrong conclusion, because optimising one while ignoring the other two is a reliable path to regret.
Cloud computing is the broad term for a model in which software and the infrastructure that stores data are delivered as a service over the internet. Instead of purchasing and managing its own server, a company pays a monthly or annual fee to a provider that handles all of that. As ADSL connections have spread across Turkey, this model has moved from the agenda of large enterprises into the daily consideration of mid-sized businesses. But ‘runs over the internet’ does not automatically mean simpler or cheaper, and treating it that way is where many decisions go wrong.
Security is the most debated dimension of this model. Company data sits not on a server in the firm’s own building but in the provider’s data centre. This creates a legitimate concern among many managers: ‘Our customer list, pricing tables, and financial records are in someone else’s hands?’ The answer is partly correct and partly misleading. A reputable provider typically applies physical security controls, access management, and data backup procedures that go well beyond what most small businesses could arrange on their own. However, if contract terms, data location, and liability in the event of a service outage are not examined carefully, those advantages remain theoretical. Security evaluation is as much a legal and operational matter as a technical one.
Scalability is where this model makes its strongest argument. When a company grows, adding a new user or a new branch does not require purchasing additional hardware and scheduling an installation; the provider adjusts capacity within days of being notified. Equally, when business volume contracts, the company is not left paying for unused capacity. In the traditional server model, a firm typically buys hardware sized to a three-to-five-year growth forecast, and if that forecast proves optimistic, it has paid for capacity it never used. For businesses in sectors where growth is hard to predict or where demand fluctuates seasonally, this flexibility becomes a genuine competitive advantage.
Cost calculation is considerably more complex than it first appears. At first glance the cloud model looks attractive: no server purchase, no maintenance expense, no additional payment for licence updates. But when monthly subscription fees are extended over five or ten years, the cumulative total can exceed the lifetime cost of an owned installation. Internet connection quality and continuity also enter the cost equation; when the connection goes down, access to the system stops, which means a backup line or alternative connection may be a necessary additional expense. A genuine cost comparison must cover not just the software licence versus the subscription fee but also hardware, maintenance, IT personnel, connectivity infrastructure, and the potential cost of downtime.
A simple decision matrix helps evaluate all three dimensions together. On the horizontal axis, place security requirement — low, medium, or high. On the vertical axis, place expected growth rate — stable, moderate, or fast. Companies with high security requirements and stable growth tend to find the traditional server model more appropriate; companies with moderate security requirements and fast growth tend to benefit from the cloud model. Cost is then calculated according to the model that emerges from the intersection of those two axes. The matrix is not a perfect decision tool, but it makes the conversation concrete and helps managers place their intuitive preferences inside a structured framework.
For SMB managers, the most critical decision criterion comes down to two questions: how the company is likely to grow over the next three years, and how sensitive the relevant data will remain during that growth. If growth is uncertain and there is no technical staff available to manage an IT infrastructure, the cloud model deserves serious consideration. Before signing any contract, however, the provider’s data centre location, backup frequency, compensation terms in the event of outages, and data access rights must be confirmed in writing. The cloud decision is not a one-dimensional cost calculation; the companies that extract the most value from this model are the ones that understand the balance between security, flexibility, and real total cost.
This article was originally written in Turkish by Gökhan MERCANOĞLU on January 26, 2009 and has been automatically translated into English and other languages using machine translation.