Lower Costs, Enhance Security with Cloud-Based Asset Integrity Management (AIM)

The first thing to consider when vetting an AIM software for this purpose is security. There is a history of hesitance in the industry around the idea of the cloud. Early concerns about data security when the technology first emerged have left people with the impression that it is a less safe or less secure means of hosting asset data. With the right software, this simply isn’t a concern.

First, leverage a software that uses Transport Layer Security (TLS) 1.2, the current industry standard for secure connections. This ensures that the inherent security of your data is as robust and on par with (in some cases, better than) what you can expect from a local infrastructure.

Next, ensure that the AIM software provider has built-in security controls in place, so you don’t have to invest extra time and effort in protecting your data. There should be fewer vulnerabilities to third-party access, no risks of physical access and better overall resiliency to threats. Additionally, the technology behind the cloud should be current and evolving automatically – unlike the manual process of updating and maintaining an array of local hardware.

Perhaps as important as the software itself is the company that supplies it. After all, they will be your partner on this journey. Consider a provider that utilizes a reputable cloud source with intermediate security levels. Don’t be afraid to ask questions about the cloud providers they use, why they were selected, etc. and ensure that you are confident in the answers they provide.

Ensure that the software encompasses all of the standard AIM functionality to get the most of your asset data (e.g. risk based inspection (RBI) methodology, integrity operating windows, corrosion control documents, inspection scheduling, etc.). A good cloud-based AIM software should satisfy all these requirements:

• Cloud-based hosting capabilities as well as the ability to host on-premise (this provides you with flexibility of choice if/when your needs evolve).
• Multiple secure providers for cloud hosting.
• The option of either a virtual or dedicated physical server. Ideally, look for a software that provides options for both so you have flexibility to tailor it according to your needs.
• The ability to support Transport Layer Security (TLS) 1.2, the current industry standard for secure connections which provides defense against exploits like BEAST, POODLE and DROWN. This is the surest way to ensure that your data is protected and secure.
• Robust database with secure SSL encryption. This can be on-premises or in the cloud. Ideally, this should be an industry-standard database such as Oracle that professional DBAs can be hired to manage, audit and secure if on-site, rather than a proprietary system created by the AIM software developers.
• The option to configure private or public cloud access.
• Dedicated firewalls for the server to sit behind.
• Data backup, retention and recovery options that are consistent with your company’s needs.
• Additional offsite backups for added security.
• User-friendly, intuitive format for easy and quick access to key asset information.
• A designated security feature designed to control access to data, establish a hierarchy of user access designations and automate security countermeasures within the software. This feature should be fully customizable, allowing the operators to adjust security functions, user levels, etc. according to their unique needs and goals.
• The ability to manage all asset types from a single database. This will eliminate information silos and give you constant visualization into the full status of your operations.
• Mobile application with integration. The latest technology to emerge is the ability to conduct inspection work digitally and sync results back instantly via the Cloud on mobile tablet directly from the field. This further accelerates your access to key asset data for decision making and predictive maintenance.

When assessing any software for this purpose, don’t forget to equally assess the company behind it. Look for a trusted, reputable AIM provider that delivers professional consultation services, implementation support, rigorous training and continuing IT support moving forward – removing those burdens from your shoulders and ensuring the success of the investment long-term.