Skip to contentRed Hat

Navigation

AI
  • Our approach

    • News and insights
    • Technical blog
    • Research
    • Live AI events
    • Explore AI at Red Hat
  • Our portfolio

    • Red Hat AI
    • Red Hat Enterprise Linux AI
    • Red Hat OpenShift AI
    • Red Hat AI Inference Server New
  • Engage & learn

    • AI learning hub
    • AI partners
    • Services for AI
Hybrid cloud
  • Platform solutions

    • Artificial intelligence

      Build, deploy, and monitor AI models and apps.

    • Linux standardization

      Get consistency across operating environments.

    • Application development

      Simplify the way you build, deploy, and manage apps.

    • Automation

      Scale automation and unite tech, teams, and environments.

    • Explore solutions
  • Use cases

    • Virtualization

      Modernize operations for virtualized and containerized workloads.

    • Digital sovereignty

      Control and protect critical infrastructure.

    • Security

      Code, build, deploy, and monitor security-focused software.

    • Edge computing

      Deploy workloads closer to the source with edge technology.

  • Solutions by industry

    • Automotive
    • Financial services
    • Healthcare
    • Industrial sector
    • Media and entertainment
    • Public sector
    • Telecommunications

Discover cloud technologies

Learn how to use our cloud products and solutions at your own pace in the Red Hat® Hybrid Cloud Console.

Products
  • Platforms

    • Red Hat AI

      Develop and deploy AI solutions across the hybrid cloud.

    • Red Hat Enterprise Linux

      Support hybrid cloud innovation on a flexible operating system.

      New version
    • Red Hat OpenShift

      Build, modernize, and deploy apps at scale.

    • Red Hat Ansible Automation Platform

      Implement enterprise-wide automation.

  • Featured

    • Red Hat OpenShift Virtualization Engine
    • Red Hat OpenShift Service on AWS
    • Microsoft Azure Red Hat OpenShift
    • See all products
  • Try & buy

    • Start a trial
    • Buy online
    • Integrate with major cloud providers
  • Services & support

    • Consulting
    • Product support
    • Services for AI
    • Technical Account Management
    • Explore services
Training
  • Training & certification

    • Courses and exams
    • Certifications
    • Red Hat Academy
    • Learning community
    • Learning subscription
    • Explore training
  • Featured

    • Red Hat Certified System Administrator exam
    • Red Hat System Administration I
    • Red Hat Learning Subscription trial (No cost)
    • Red Hat Certified Engineer exam
    • Red Hat Certified OpenShift Administrator exam
  • Services

    • Consulting
    • Partner training
    • Product support
    • Services for AI
    • Technical Account Management
Learn
  • Build your skills

    • Documentation
    • Hands-on labs
    • Hybrid cloud learning hub
    • Interactive learning experiences
    • Training and certification
  • More ways to learn

    • Blog
    • Events and webinars
    • Podcasts and video series
    • Red Hat TV
    • Resource library

For developers

Discover resources and tools to help you build, deliver, and manage cloud-native applications and services.

Partners
  • For customers

    • Our partners
    • Red Hat Ecosystem Catalog
    • Find a partner
  • For partners

    • Partner Connect
    • Become a partner
    • Training
    • Support
    • Access the partner portal

Build solutions powered by trusted partners

Find solutions from our collaborative community of experts and technologies in the Red Hat® Ecosystem Catalog.

Search

I'd like to:

  • Start a trial
  • Manage subscriptions
  • See Red Hat jobs
  • Explore tech topics
  • Contact sales
  • Contact customer service

Help me find:

  • Documentation
  • Developer resources
  • Skills assessments
  • Architecture center
  • Security updates
  • Support cases

I want to learn more about:

  • AI
  • Application modernization
  • Automation
  • Cloud-native applications
  • Linux
  • Virtualization
ConsoleDocsSupportNew For you

Recommended

We'll recommend resources you may like as you browse. Try these suggestions for now.

  • Product trial center
  • Courses and exams
  • All products
  • Tech topics
  • Resource library
Log in

Sign in or create an account to get more from Red Hat

  • World-class support
  • Training resources
  • Product trials
  • Console access

A subscription may be required for some services.

Log in or register
Contact us
  • Home
  • Resources
  • Key considerations when choosing cloud services in financial services

Key considerations when choosing cloud services in financial services

January 27, 2023•
Resource type: Overview
Download PDF

Hybrid cloud is essential for achieving business priorities and regulatory compliance

Across industries, hybrid cloud adoption is growing. In fact, 81% of financial services firms say that the cloud is the most essential technology for achieving business priorities, and 74% have adopted a cloud-first approach for new application development.1 Cloud-native technologies like Kubernetes and containers play key roles in hybrid cloud environments. They support efficient, agile ways for developing, deploying, and consuming business applications and services across on-site, cloud, and edge infrastructure. They can also help financial services firms more easily address regulatory requirements, shifting customer preferences, and new competition.

Even so, building and maintaining a hybrid cloud infrastructure and container application platform in-house can be challenging and time-consuming. You must reassess how you perform common IT operations and manage ongoing security and compliance tasks, as well as develop your staff’s skills and expertise. You also need to consider how both existing and proposed regulatory requirements will apply to your new environment to ensure compliance. Finally, because financial services firms use an average of three public clouds in addition to privately operated infrastructure,1 you must understand how to connect and operate all of your environments consistently. 

Adopting one or more managed cloud services can help you overcome this complexity and achieve your goals more quickly. Deploying a consistent hybrid cloud application platform — like Red Hat® OpenShift® — across your infrastructure can further simplify your operations while increasing security, easing compliance, and improving application portability. Red Hat works with key cloud provider partners to deliver fully managed Red Hat OpenShift cloud services to help you accelerate your journey to the cloud.

Why choose cloud services for your financial services workloads?

Managed cloud services can simplify deployment, streamline operations, and speed time to value compared to in-house solutions. A third party builds, manages, and operates cloud infrastructure for you, providing your teams with access to the application platform and allowing them to focus on business priorities. 

Icon-Red_Hat-Cloud_Migration-A-Black-RGB

Cloud services can help financial services firms achieve their digital innovation goals more quickly and effectively.

This overview discusses seven key areas of consideration when moving to the cloud and selecting a cloud service:

  • Service policies, procedures, and plans
  • Operations management
  • Security and compliance
  • Identity and access management
  • Incident management
  • Disaster recovery
  • Change management

Key considerations for choosing cloud services in highly regulated industries

While cloud services can deliver many benefits, they do require changes to the way your organization approaches operations, security, and compliance. At the core of these changes is the shared responsibility model. A shared responsibility model dictates which tasks and actions your cloud service provider addresses, and which your own organization must address. It’s important to understand that while using cloud services transfers many tasks to your service provider, in the eyes of regulators, your organization still remains responsible for all risks associated with the cloud service.

Security and compliance are typically the key concerns in shared responsibility models, but these models often extend to broader IT controls and operations. For example, your cloud service provider may be tasked with ensuring cloud infrastructure is configured according to security best practices while you may be tasked with managing your data and its protections. And some controls, like patching, may be shared — your cloud service provider must patch the underlying infrastructure while you must patch the operating systems and applications running in your cloud service.

The following sections review the operational impact of adopting cloud services for financial services in several key areas. These considerations are critically important when selecting a cloud service provider that suits your organization’s needs.

Achieve more for less

Read this brief to learn how Red Hat OpenShift cloud services can help you save time and money.

Service policies, procedures, and plans

Your organization operates according to approved policies, procedures, and plans to ensure that everything runs as expected over time, and that incidents are dealt with in a predetermined manner. Your cloud service provider will handle many of these elements. It’s important to understand your cloud service provider’s policies, procedures, and plans for all operations that they cover — including operations management, security and compliance, identity and access management, incident management, disaster recovery, and change management.

When choosing a cloud services provider, look for:

  • Detailed documentation of responsibilities, actions, and roles.
  • Regular reviews, assessments, and approvals of all necessary documentation.
  • Documentation coverage for all operations within the cloud service offering.

You should also be sure that your cloud service provider’s policies, procedures, and plans align with your organization’s needs.

Our take: Red Hat OpenShift cloud services provide documented, regularly-reviewed policies, procedures, and plans to help you understand the scope of the service offering and how tasks and incidents are handled. 

Operations management

Your cloud service provider will manage day-to-day operations for your cloud infrastructure according to detailed service level agreements (SLAs). Ensuring that these SLAs meet your organization’s requirements is key. It’s also important to understand how your cloud service provider manages their own service providers, as the associated operational risk will impact your organization.

Look for:

  • Detailed documentation about your cloud service provider’s governance model as it applies to third-party services included within the cloud service. Ensure that related operational risks are managed in a consistent and effective manner that aligns with your own governance model.
  • Real-time monitoring of the performance and availability of the constituent services that make up the cloud service. Monitoring and logging should be a key part of ensuring that SLAs are met. Log data should be protected and made available to your organization and designated regulators as requested for auditing and investigation purposes.
  • Detailed documentation about performance and capacity planning. Roles and responsibilities — and how they relate to your cloud provider’s shared responsibility model — should be specified in detail.

Our take: Red Hat OpenShift cloud services provide documented operational management plans and processes to establish policies, expectations, and roles for day-to-day operations. Formal vendor management policies and review processes address risks related to third-party vendors. Automation is broadly employed for installation, scaling, and on-demand changes while real-time monitoring and logging track events.

Security and compliance

Look for and evaluate the following security and compliance information from cloud service providers:

  • Detailed documentation of the shared responsibility model that defines which organization is responsible for each task and clearly delineates responsibility and expectations for shared tasks like network security and vulnerability management.
  • Regular, structured reassessment and adaptation of security and compliance controls, including any operated by third parties.
  • Certification to all industry and government standards that apply to your organization.
  • Client audit capabilities, including the ability to grant access to key information for client and regulators to support supervisory needs.

Our take: Red Hat OpenShift cloud services are certified to key standards — including Payment Card Industry Data Security Standard (PCI DSS), System and Organization Controls (SOC) 2, and International Organization for Standardization (ISO) 27001 — to help protect against threats.

Identity and access management

Identity and access management (IAM) is a critical part of any operational framework. Much as your organization maintains IAM systems within your own datacenter, your cloud service provider will operate an IAM system for your cloud infrastructure. This IAM system and related processes must align with your organization’s requirements as well as all relevant regulations. In addition, zero trust architectures can provide increased protection for your cloud environment and should be considered both for your cloud service and your overall organization.

When considering cloud services, look for:

  • Detailed role-based access controls (RBAC) for your cloud service.
  • Use of least privilege and segregation of duties principles for all roles.
  • Monitoring to ensure ongoing compliance with access controls and requirements.
  • Periodic assessment and recertification of elevated and privileged access.
  • Logging of actions for all privileged accounts for traceability in investigations.
  • Integration with your existing IAM systems.

Our take: Red Hat OpenShift cloud services employ identity and access management best practices — including least privileges, RBAC, multifactor authentication (MFA), and real-time monitoring and logging — throughout the cloud stack.

Incident management

Even with the best-laid plans and controls, security, data protection, and availability incidents will occur. Your cloud service provider will be the first responder to incidents concerning your cloud service, but you may also need to take investigative action after the initial response. It’s important to understand how your cloud service provider approaches and handles incidents.

Look for:

  • A detailed triage approach and incident classification scheme.
  • Monitoring and logging capabilities, with access to logs and information for roles within your organization as needed to investigate incidents.
  • Timely, tested communications with your organization, regulators, and other authorized parties regarding potential incidents. 
  • Incident documentation to support forensic investigations and evidence gathering.
  • Regular incident management process and response plan testing and reassessment.

Our take: Red Hat OpenShift cloud services provide documented incident response plans and processes to describe how events are handled and communicated. Real-time monitoring and logging capabilities identify and track incidents and notify appropriate parties.

Disaster recovery

Financial services institutions offer critical services that must be available at all times—large-scale and extended outages are unacceptable. Even so, failures and incidents can occur — well-documented, tested, and validated disaster recovery plans are essential and often required to comply with industry regulations. When adopting a cloud service, you’ll need to adapt your disaster recovery plans accordingly — understanding how your cloud service provider handles resiliency and recovery is critical.

Look for the following when evaluating a cloud service provider:

  • Detailed resiliency and disaster recovery plans for all service components, client data, and third-party components.
  • Regular, structured plan reassessment, testing, validation, and adaptation.
  • Specifications for measuring constituent service availability and recovery time and how each impacts overall service availability.

Cloud service providers often handle service resiliency through staff co-location and geographically isolated cloud regions. It’s important to understand where applications, data, and services may be moved or located during a disaster recovery situation to ensure you comply with data residency requirements.

Our take: Red Hat OpenShift cloud services provide documented disaster recovery plans and processes to describe how incidents are handled and communicated.

Change management

Modern IT environments are dynamic, and changes — whether due to updates, emerging regulatory issues, organizational shifts, or other events — are inevitable. As a result, every organization needs clear, traceable change management processes. When adopting a cloud service, your service provider will perform many changes — like updates, bug fixes, and security patching — for your organization. It’s critical to understand your cloud service provider’s change management process and ensure that it complies with your own policies and industry standards.

Look for robust change management practices when selecting a cloud service provider, including:

  • Detailed change management documentation, including processes for both standard changes like planned updates and emergency changes like zero day vulnerabilities.
  • Formal change testing and validation systems to ensure changes do not negatively impact operations.
  • Regular scanning, triage, and remediation of infrastructure for misconfigurations, security vulnerabilities, and compliance.
  • Clear explanations of key stakeholders and how they are engaged for different types of changes.

Our take: Red Hat OpenShift cloud services provide documented change management procedures. A team assesses each change for potential impacts before moving forward and communicates information as appropriate. Changes are analyzed, tested, and deployed using an Agile methodology.

Why choose Red Hat OpenShift cloud services?

Optimized to improve developer productivity and promote innovation, Red Hat OpenShift is an enterprise-ready Kubernetes container platform with full-stack automated operations for managing hybrid cloud, multicloud, and edge deployments. Red Hat OpenShift cloud services are an ideal solution for financial services firms that want to move rapidly to the cloud while focusing on their core competencies. Red Hat works with key cloud provider partners to deliver fully managed container environment services that simplify deployment and operations while saving costs over in-house construction. With flexible pricing models, these services help you reduce support costs, increase operational efficiency, and free your staff to innovate.

Multiple Red Hat OpenShift cloud services are available, so you can choose the option that best fits your organization’s needs:

  • Red Hat OpenShift Dedicated, running on AWS or Google Cloud
  • Red Hat OpenShift Service on AWS
  • Microsoft Azure Red Hat OpenShift
  • Red Hat OpenShift on IBM Cloud

Each service offers more than just access to managed software and technologies. They provide complete, full-stack environments with all necessary services, simple self-service options, and expert 24x7 support via stringent SLAs.

Learn more

Hybrid cloud environments are essential for success in today’s highly competitive financial services market. Managed cloud services can help your organization adopt hybrid and multicloud environments rapidly and efficiently. Red Hat OpenShift cloud services simplify deployment and operations while saving costs and giving you a consistent application platform across on-site, cloud, and edge infrastructure. Learn more at redhat.com/fsi.

  1. Frost & Sullivan. “Optimizing Your Cloud Strategy to Meet Business Goals,” December 2022.

  2. Forrester Consulting study, commissioned by Red Hat. “The Total Economic Impact™ of Red Hat OpenShift Cloud Services,” January 2022. Results are for a composite organization representative of interviewed customers.

Key features

  • Expert 24x7 support with at least 99.95% availability
  • Proactive monitoring and preventative remediation action
  • Always-on user portals with defined response times
  • Access to a global team of expert engineering and support staff

Proven business benefits

Red Hat OpenShift cloud services delivers proven business benefits:

  • Shorten development cycles by up to 70%.2
  • Recapture 20% of developer time from infrastructure maintenance work.2
  • Improve operational efficiency by 50%.2
  • Increase developer satisfaction and retention.2
  • Increase security, reliability, and business continuity.2

Read the analyst study to learn more.

Tags:Hybrid cloud, Cloud services, Automation and management, Managed cloud

Red Hat logoLinkedInYouTubeFacebookX

Products & portfolios

  • Red Hat AI
  • Red Hat Enterprise Linux
  • Red Hat OpenShift
  • Red Hat Ansible Automation Platform
  • Cloud services
  • See all products

Tools

  • Training and certification
  • My account
  • Customer support
  • Developer resources
  • Find a partner
  • Red Hat Ecosystem Catalog
  • Documentation

Try, buy, & sell

  • Product trial center
  • Red Hat Store
  • Buy online (Japan)
  • Console

Communicate

  • Contact sales
  • Contact customer service
  • Contact training
  • Social

About Red Hat

Red Hat is an open hybrid cloud technology leader, delivering a consistent, comprehensive foundation for transformative IT and artificial intelligence (AI) applications in the enterprise. As a trusted adviser to the Fortune 500, Red Hat offers cloud, developer, Linux, automation, and application platform technologies, as well as award-winning services.

  • Our company
  • How we work
  • Customer success stories
  • Analyst relations
  • Newsroom
  • Open source commitments
  • Our social impact
  • Jobs

Select a language

  • 简体中文
  • English
  • Français
  • Deutsch
  • Italiano
  • 日本語
  • 한국어
  • Português
  • Español

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2025 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility