http:// stepping into the cloud risks, rewards, realities terry gray, phd assoc vp, technology...

27
http://www.bripblap.com/uploads/cloudbridge.jpg Stepping into the Cloud Risks, Rewards, Realities Terry Gray, PhD Assoc VP, Technology Strate UW Technology Erik Lundberg Director, CS Laboratory Computer Science & Engineer 14 October 2009

Post on 21-Dec-2015

215 views

Category:

Documents


0 download

TRANSCRIPT

http://www.bripblap.com/uploads/cloudbridge.jpg

Stepping into the Cloud

Risks,Rewards,Realities

Terry Gray, PhDAssoc VP, Technology StrategyUW Technology

Erik LundbergDirector, CS LaboratoryComputer Science & Engineering

14 October 2009

http://blog.host1plus.com/wp-content/uploads/2009/08/Cloud-computing013-300x300.jpg

Agenda Background

UW Strategy

Risks

• Compliance

What's Inside that Cloud?What's Inside that Cloud?the Internet + Serversthe Internet + Servers

From Wikipedia article on Cloud Computing

Cloud Computing = IT stuff running in someone else's data center

Kinds of Cloud ServicesKinds of Cloud Services

• Infrastructure as a Service e.g. Amazon EC2, S3

• Platform as a Service e.g. Google AppEngine

• Software as a Service (SaaS) e.g. Hotmail 1994

Varying degrees of shared vs. dedicated, e.g. “Cloud vs. Hosted”

Cloud Computing IngredientsCloud Computing Ingredients

– Old “service bureau” paradigm cf. ADP, 1949

– Revenue from ads + subscriptions

– Data mining for personalizing the ads

– Modern technology (web, Internet, datacenter)

– Low cost via high-scale, more self-support

– Disintermediation (self-service)

Natural EvolutionNatural EvolutionWho ya gonna call (for commodity IT)?Who ya gonna call (for commodity IT)?

Individual

Departmental

Central

Cloud

Goodbye “IT priesthood”... Hello “Consumer Computing”

In the beginning...

http://www.library.drexel.edu/blogs/librarylog/dollars.gif

Cloud CurrencyCloud Currencyusers are the users are the inventoryinventory

http://www.cksinfo.com/clipart/people/bodyparts/eyes/eyeballs.png

http://thomaslarock.com/wp-content/uploads/2009/06/datamining.jpg

So... So... Cloud Cloud Computing:Computing:

Hot or Not?Hot or Not?

Nick Carr

Richard Stallman

Larry Ellison

Bill Gates

Eric Schmidt

It must be Hot if ...It must be Hot if ...

http://www.virtualizationconference.com/node/597208

http://gemsres.com/section/156/Cloud-Computing-307x100.jpg

http://res.sys-con.com/story/dec08/770227/CloudComputingBook_MichaelMiller.JPG

http://img.brajeshwar.com/cloud-computing-vote.jpg

UW meets the CloudUW meets the Cloud

Cloud Apps @ UWCloud Apps @ UW

64K UW users

60% of students ALREADY forward their UW email!60% of students ALREADY forward their UW email!

PremisesPremises

• Cloud computing is a big deal

• UW should encourage use of cloud services, consistent with compliance obligations

• Compliance risk is reduced via partner contracts

• A dual-vendor strategy is appropriate for UW

• Including faculty, staff and studentsmaximizes collaboration potential

Cloud Partnership MotivationsCloud Partnership Motivations

• This is where our community is (or will be)!

• Enhance the cloud services

• Improve regulatory compliance

• Eventual reallocation of IT resources

IT Goal: info access & collaboration, any time, place, device → Cloud computing supports this goal

http://blogs.msdn.com/blogfiles/stevecla01/WindowsLiveWriter/MicrosoftGoogleandCloudWars_ACE7/03cloud_xlarge1_thumb.jpg

A Tale of Two Clouds A Tale of Two Clouds (for SaaS)(for SaaS)

-One size does not fit all-One size does not fit all -We want both partners to succeed-We want both partners to succeed

ProgressProgress

• MS and Google pilots successfully completed

• Campus launch to students and alums on 9/28/09

• CSE launch ...

• Planning for 2010 phase-out of student UA svcs (Per STF Committee funding decision)

LessonsLessons• Free services are not free

– Moving targets, startup problems, service culture– Cloud Conundrum: Integration adds value & cost

• Collaboration Barriers– Multiple account madness– Interoperability

• Pushback– Students: “Where's the beef” (vs. existing options)– Faculty: privacy, security, data ownership/mining

• Help desk load: OK so far (no forced migrations yet)

2010 Plans2010 Plans

• Cloud Service Enhancement– SSO for Outlook Live– Microsoft BPOS (Dedicated version!)– Group management features– Improved calendar interoperability

• On-Premise Service Retirement– Student UA services (at least email)– Central Exchange/Sharepoint services

• Progress gated by– Service maturity– Migration and support costs

Impact on UA ServicesImpact on UA Services

• Student Tech Fee Committee decision– UA services for students have been de-funded– Thus, they will migrate to cloud soon...

• Email– No new student Deskmail accounts as of Jan 2010– Migrate existing student accounts later in 2010– Students may continue to use consumer accts

or MS and Google partner accts

• Web publishing, etc– Roadmap will be developed during Fall quarter

RisksRisks

• User Concerns– Service maturity– Privacy– Interoperability

• Institution Concerns– Operational risk– Financial risk– Compliance risk

Service MaturityService Maturity

http://mrgadget.co.za/catalog/images/Moving_Target.jpg

Total Information AwarenessTotal Information Awareness

http://www.loc.gov/exhibits/bobhope/images/vcvg20.jpg

Interoperability Interoperability example: the calendaring problemexample: the calendaring problem

Outlook/ExchangeUser IT

Staff

GoogleCalendar

User

Institutional RisksInstitutional Risks

• Operational (service or business failures)• Individuals have biggest stake here for now

• Financial (surprise support or integration costs)• High-touch support model could kill future savings

• Compliance (failure → liability cost)• Primarily unauthorized disclosure of sens. Info• Limited forensics ability → notification cost• Ability to respond to legal requests for data

NB: 1) these kinds of business risks are uninsured 2) departments assume $$ liability for failure to comply w/UW policies 3) data guidelines need to cover all cases, not just cloud computing

Risk MitigationRisk Mitigationcompared with status-quocompared with status-quo

Contract terms added

Data security guidelines to define appropriate use

Partner contracts provide for UW account control

Inability to comply with FERPA

Disclosure of confidential data

Inability to respond to eDiscovery request

Cloud use is soaring despite concerns

The cloud enables more collaboration

So we need to enable the cloud...

Questions

http://www.geo.me/images/cloud.jpg?1249871890