moving into the cloud - national league of citiesa hybrid cloud includes a variety of public and...

MOVINGINTOTHECLOUDRyanDraughn

2

https://www.youtube.com/watch?v=1UXHCf9b998

LossofInvestment LossofDatahttps://www.youtube.com/watch?v=8lLI79fREJ4

GentleReminder:RiskofOnsiteDataduringDisasters

CommonPremiseBasedITEnvironment

§  Expensivehardwarewithtypical3-4yearrefreshcycles.

§  Reoccurringsoftwarelicensefees.

§  InsufficientquantityofITstaff;Skillsoftennotspecialized.

§  Lacksadequatebackups&security.

§  Slowrestoralofcriticalbusinessprocessesafteradisaster.

§  Environmental(HVAC)costsandmayneedtoadheretocompliancy/regulatoryrequirements.

Expensivein4meandresourcestoinstallandmaintain!

3

“Cloud Computing - Hosted Desktop - SaaS – IaaS”

WAN/LAN

Reliable&SecureDataCenter

CloudCompu4ngbringsTransforma4onalChange

WhatintheworldisCloudComputing?

“CloudComputingDefinition”

Cloudcompu4ngisatypeofInternet-basedcompu4ngthatprovidessharedcomputerprocessingresourcesanddatatocomputersand

otherdevicesondemand.

Cloudcomputingandstoragesolutionsprovideusersandenterpriseswithvariouscapabilitiestostoreandprocesstheirdatainthird-partydatacentersthatmaybelocatedfarfromtheuser–rangingindistancefromacrossacityto

acrosstheworld.

Source-CloudComputing.(2016).InWikipedia.RetrievedOctober13,2016,fromhttp://en.wikipedia.org/wiki/cloud_computing

Source-CloudComputing.(2016).InWikipedia.RetrievedOctober13,2016,fromhttp://en.wikipedia.org/wiki/cloud_computing

LeadingCloudProviders•  Providemassiveeconomiesofscaletodrivedowndatastoragecosts.

•  ManyhavedevelopedPRIVATEcloudofferingsthat:•  Enabledatatonotbeco-mingledwithotherorganizations.•  Meetsindividualcustomerdemandsforretrievalpractices.•  Adherestospecializedcomplianceorregulatorydemands(PII,HIPAA,PCI)

•  EnsurestorageinsideofcontinentalUS.•  Allowforspecializedserviceproviderstodevelopsoftwareplatformsbuiltontheirdatastoragefoundation.

TypesofCloudsPrivateCloudsPublicCloudsHybridClouds

PublicCloudsApubliccloudisoneinwhichtheservicesandinfrastructureareprovidedoff-siteovertheInternet.Thesecloudsofferthegreatestlevelofefficiencyinsharedresources;however,theyarealsomorevulnerablethanprivateclouds.

Ex.Gmail,Dropbox,SaaSApplications

Source:http://www.dummies.com/programming/networking/comparing-public-private-and-hybrid-cloud-computing-options/

PrivateCloudsAprivatecloudisoneinwhichtheservicesandinfrastructurearemaintainedonaprivatenetwork.Thesecloudsofferthegreatestlevelofsecurityandcontrol,buttheyrequirethecompanytostillpurchaseandmaintainallthesoftwareandinfrastructure,whichreducesthecostsavings.

Goodwhendataprivacyandsecurityarecrucial.


HybridCloudsAhybridcloudincludesavarietyofpublicandprivateoptionswithmultipleproviders.Byspreadingthingsoutoverahybridcloud,youkeepeachaspectatyourbusinessinthemostefficientenvironmentpossible.Thedownsideisthatyouhavetokeeptrackofmultipledifferentsecurityplatformsandensurethatallaspectsofyourbusinesscancommunicatewitheachother.

YourcompanywantstouseaSaaSapplicationbutisconcernedaboutsecurity.YourSaaSvendorcancreateaprivatecloudjustforyourcompanyinsidetheirfirewall.


ExamplesofCloudServices

§  WebSiteHos4ng§  Email§  PhoneSystems§  HostedDesktop

DeliveryModels§ PremiseBased

§ Youbuytheservers§ Youbuythedesktops§ Youbuyallofthenetworkequipment§ Youbuyandmaintainallthelicenses

§ Youpaysomeonetomaintainandsupportit§ Youassumealltheriskofownership.

DeliveryModels§ CloudorHosted

§ Vendorprovidestheservers&hardware.§ Vendorsupportssoftwareplatform.§ Vendormaintainsenvironment24x7X365.§ Vendorassumesriskofownership.§ Littletonoup-frontcapitalcost.§ Scaleup/downmuchmorequickly(inmanycasesmonthly)

16

Statistics

https://www.microsoft.com/en-us/cloud-platform/hybrid-cloud

17

Statistics

"Growthofpubliccloudissupportedbythefactthatorganizationsaresaving14percentoftheirbudgetsasanoutcomeofpubliccloudadoption,accordingtoGartner's2015cloudadoptionsurvey,"saidSidNag,researchdirectoratGartner.

WhyShouldYOUCare? § Forsome,itcan

§  Bemorecosteffective§  Provideamorescalablesolution§  RequireALOTlessup-frontcapital§  Beeasiertodeploy§  Offermorefunctionality§  ProvideamuchmorecosteffectiveDRsolution

18

MovingIntoTheCloudImplementationConsiderations

WhyismovingtoCloudComputingchallenging?

•  MIS-Information:BusinessmanagersnotgettingGOODinformation•  Marketingmaterialsaregimmickyandmisleading.•  Businessmanagersrecognizebenefitbutdon’tunderstandallthedynamics.

•  MostITprofessionalsseecloudservicesasextremelythreateningtotheirjobandvaluetheycontributetotheorganization.

•  Cloudserviceprovidersaresellingservices;theyaren'tonesyoushouldgeteducatedfrom

•  Securityconcernsorparanoia?

•  Organizationmaynotbereadytohandletheflexibilitythatcloudcomputingprovides.Willpersonnelpoliciesneedtochange?

ChangeinCultureandChangeinBusinessProcedures

•  ChangefromCAPEXmodeltoOPEXfinancialmodel•  ITinfrastructurenolongerpurchasedascapitalexpensesanddepreciatedoveritslifecycle.

•  Instead,ITinfrastructurepaidasopera4ngexpenselikeau4lity.

•  ShiKofsome“controls”and“administra4on”ofITequipment•  Outsourcedvs.dedicatedITstafftoperformthesedu4es

•  Tradi4onalITdu4esshiKfromPC/networktechnicianstoservicemanagers.Orsaiddifferently,ITwillshiKfrombeingthe“mechanics”tothe“processimprovers”or“serviceinnovators”.

ThingsYouNeedtoKnow

•  YourITisMoreComplexThanYouThink.

•  Mostorganizationsdonothaveafullandrobustinventoryofdata.

•  Someapplicationsandprocessesaretemperamentalinhostedenvironments(Scanning,Printing,etc.).

•  Cloudwillbeblamedforeverything.Staycommitted.

•  Planforcultureimpact.Enhancedaccessibilityisimmediate.

•  Transitioncostsarehardtopredict.

NCLMStatusCloudExperience

Background/StatusatNCLM

•  MovedtoPrivateCloudOfferinginDecember’12.•  U4lizeprivatecloudofferingfromVC3,Inc.•  PrecededbySA-LiteManagedServicescontractinJanuary’12.•  Virtualizedstaff’sdesktopenvironment(approx.80seats)•  HostedExchange,An4-SPAM,AV,File/PrintServices.•  Movedapplica4onserversrunninginsuranceclaimssystem(iVOS),Policymgmt.(Navrisk),documentmgmt.(Laserfiche),Finance(Navision),Associa4onMgmt.System(CRM).

Background/StatusatNCLM(Cont.)

•  MovedSharePoint(IntranetandInternet)•  NCLM.organdotherwebsites

•  Outsourcehelpdeskoperations(24x7x365)•  Minimalserver/networkhardwareexistsonsite•  Changeto64-bitarchitecture•  Dualmonitorsforallthinclientstaff(around80%oforganization)•  Staffembracedchange

28

FinancialComponent–FormerBudget-2012

AnnualSoKwareCostHighlights

• MicrosoftEnterpriseAgreement•  SQLServer,Office,Exchange,SharePoint,CALs

•  SymantecAnti-Virus• MailFoundryAnti-Spam•  Networkmonitoringtools•  Ticketingsystemsoftware•  Total:$33,818/annual

29

AnnualDatacenterCostHighlights

•  StorageAreaNetwork(SAN)•  VMWARELicenses•  ESXServerEnvironment•  ServerLicenses•  SonicwallNSAandSSLVPNTotal–$43,600/year

Doesn’tincludeHVACcostsandRISKofownership

FinancialComponent–FormerBudget-2012

StandardApplications• MicrosoftOfficeStandardEdition

• Word,Excel,PowerPoint,Outlook,OneNote…

• MicrosoftExchangeEmail

30

Since2012,equivalentITcostoutlayconsistently$131,000/yr.

Roughly$40,000insavingsfactoringincostsofuserhardware.

Storage•  Individualandsharedstorageforallusers

Providerhandles..

Backups

• Nightlybackups

• 30daysofNightlyBackupsretention

• Monthlyandannualarchives

31

Security•  SPAMfiltering•  End-pointAnti-Virusfordevices

Andprovides..

•  24x7ServiceDesk

•  ServerandNetwork•  Administration•  PatchManagement

•  RemoteandOnsiteSupport

•  Softwareapplicationsupport

•  Patchmanagementforsupportedsoftware

•  UserSatisfactiontracking

32

Hardware

•  Thinclient,keyboard,mouseandmonitor;All-in-oneunit

ReportsandDocuments•  ITDocumentation•  ITPerformanceReport•  BestPracticesandPoliciesLibrary

•  Changeinculture:Adoptingprocessesfromoutsidefirm•  Ticketingsystem,storagequotas,billedforusage,etc.

•  Stafflostindividualpreferences•  WindowsSearch/Desktopfeatures

•  OversightofIToperationschanged•  ManagingdynamicsbetweenITsupportstaff•  Re-organizationofITStaff•  Lossofin-housetechnicalskillsovertime

•  ITunderamicroscope–Cloudcommitment•  Printing•  Scanning•  Soundvolume•  Newprocedures/change

TheChallengesfaced..

MoreChallenges..

•  Hadtoabandon/re-workcontractsorrelationshipswithexistingpartners.

•  Cloudprovidercontractnegotiationsweredicey.

•  ITstaffmorale–stayingcommitted.

•  Equipmentorproviderloyaltychanged.

•  Devotedtimetotraining;paidhugebenefits.

•  Staffwideconversationtosetexpectations.

•  Staffdidnoteverythingtheyheard.(buthadtosayitanyway)

•  Benefitsfaroutweighedthedisadvantages.

BraveNewWorld–TheBenefits!•  OrganizationseesITinnewpositivelight-Empowermentvs.Servicebased

•  Focusonenhancements/projectsinsteadofputtingoutfires•  CIO-OrganizationalleaderversusITleader

•  Lessservers–goodexercisetocondenseVMsthatwereneeded

•  DisasterRecovery/COOPplanmoreflexibleandeasiertoimplement

•  Enhancesstaff’scapabilities–Remoteworkenvironment,changingwork/lifebalance,generationalworkforceembraces

•  LesspressureonBYOD

•  Simplifiedbudgeting

•  Monthlycostperemployee•  Eliminationofhardwarecapitalinvestment

•  Monitoringofappsbyteamofengineers

•  ExampleofClaimsappimprovement•  Proactivemonitoring•  Patches/updatesonOURschedule

Costs•  ROIcalculations-factorinITstafftime

•  Managedservicesproducedsubstantialsavings:Approximately25-25%•  Privatecloudservicemovemorecostlyinyear1:Approximately5%higher

•  SoftwarelicenseshadtobeconvertedtoTLPorrequiredproversions•  Estimatednet–neutralsavingsinyeartwoandbeyond•  HardtocalculateefficienciesgainedinITNOTmanaginghardwarebutofferingprocessandbusinessimprovements

•  Hardtocalculateoverallstaffproductivitygainbyofferingmoreflexibleworkoptions,lessdowntime,fasterapplicationresponsetime,newapplicationaccessoptions.

ContractGuidelines

OwnershipofDataAlldataprovidedbyClientCompanytoServiceProviderpursuanttotheAgreementisandshallremainthesolepropertyofClientCompanyandClientCompanyreservesallright,4tleandinterest(includingallintellectualpropertyandproprietaryrights)inandtosuchdata.

ContractGuidelines–Cont.

AccesstoDataAtitssolediscre4on,ClientCompanyretainstherighttoaccessandretrievedataprovidedbyClientCompanythatisstoredonServiceProvider’sinfrastructure.ThisincludesphysicalaccesstodataaswellastherighttorequestdataberetrievedbyClientCompany.TheClientCompanywillgiveServiceProvideradvancedno4fica4onof15daysfordataaccessorretrieval.


DataDisclosuretoThirdPar4esServiceProviderwillnotreceive,transmitorotherwisedeliveranydataprovidedbyClientCompanyoutsideofthecon4nentalUnitedStates,norwillServiceProvidertransmitorotherwisedeliveranysuchdatatoanythirdparty(exceptforClientCompany’semployees)withoutClientCompany’spriorwrifenconsent.


Disposi4onofDataUponAgreementTermina4on

Upontermina4onoftheAgreement,ServiceProvidershall,attheop4onoftheClientCompany,eitherreturnallthedataprovidedbyClientCompanyandanycopiesthereoftotheClientCompany,ordestroyallthedataprovidedbyClientCompanyandanycopiesthereofandcer4fytoClientCompanythatithasdoneso.ServiceProvidershallperformitsobliga4onsunderthisparagraphinaccordancewiththeselectedop4onofClientCompanywithinthirty(30)daysaKerServiceProviderisno4fiedoftheop4onselected.IfClientCompanyelectsthatdataprovidedbyitbereturned,thenServiceProvidershallmakeavailabletoClientCompanyforacompleteandsecure(i.e.encryptedandappropriatelyauthen4cated)downloadfileofClientCompany’sdatainitsna4veformat.TheClientCompanymayop4onallyrequestthatdatabephysicallyreturnedonharddrivesorotherphysicalmedia.ServiceProviderwarrantsthatuponrequestofClientCompany,itwillsubmititsdataprocessingfacili4esforanauditofthemeasurersdescribedherein.


DataBreaches

ServiceProvidershallreport,eitherorallyorinwri4ng,toClientCompanyanyuseordisclosureofdataprovidedbyClientCompanynotauthorizedbytheAgreementorinwri4ngbytheClientCompany,includinganyreasonablebeliefthatanunauthorizedindividualhasaccessedsuchdata.ServiceProvidershallmakethereporttoClientCompanyimmediatelyupondiscoveryoftheunauthorizeddisclosure,butinnoeventmorethantwo(2)businessdaysaKerServiceProviderreasonablybelievestherehasbeenanunauthorizeduseordisclosure.ServiceProvider’sreportshalliden4fy:(I)thenatureoftheunauthorizeduseordisclosure,(ii)theClientCompany’sdatausedordisclosed,(iii)whomadetheunauthorizeduseorreceivedtheunauthorizeddisclosure,(iv)whatServiceProviderhasdoneorshalldotomi4gateanydetrimentaleffectoftheunauthorizeduseordisclosure,and(v)whatcorrec4veac4onServiceProviderhastakenorshalltaketopreventfuturesimilarunauthorizeduseordisclosure.ServiceProvidershallprovidesuchdocumenta4on,includingawrifenreport,asreasonablyrequestedbyClientCustomer.


DataStorageLoca4onServiceProvideragreestoreceive,storeandprocessalldataprovidedbyClientCompanyonlyinthecon4nentalUnitedStates.


Deposi4oninLi4ga4onServiceProvideragreestobedeposedinli4ga4oncaseswheredataadministra4onprocessesarerequired.Anycostsincurredbyserviceproviderin4meorresourcesistheresponsibilityoftheserviceprovider.

HowtoProtectYourself

ChangeinRoles/Responsibili4es

“Fororganiza4onsengagedinwholesalecloudmigra4ons,rolesandresponsibili4eswillrequiresignificantchanges—movingfromspecializedroles,suchasserverornetworkmanagers,tobroaderrolesforintegratedservicemanagers.”

“Theseservicemanagerswillbewellpositionedtostewardbusinessrisksbecausetheirperspectiveismorecomprehensivethanthatofspecializedmanagers,forexample,whenmakingjudgmentsonwhentouseprivate-orpublic-cloudresources.”

SinglePointsofVulnerability?

“Asattractiveascloudenvironmentscanbe,theyalsocomewithnewtypesofrisks.Executivesareaskingwhetherexternalproviderscanprotectsensitivedataandalsoensurecompliancewithregulationsaboutwherecertaindatacanbestoredandwhocanaccessthedata.CIOsarealsoaskingwhetherbuildingprivatecloudscreatesasinglepointofvulnerabilitybyaggregatingmanydifferenttypesofsensitivedataontoasingleplatform.”“Blanketrefusalstomakeuseofprivate-orpublic-cloudcapabilitiesleavetoomuchvalueonthetablefromsavingsandimprovedflexibility.”

ARisk-ManagementApproachtoExploi4ngtheCloud

“Inmanylargeins4tu4ons,informa4onsecuritytradi4onallyhasbeenacontrolfunc4onthatusedpolicieslimi4ngwhatITmanagersandenduserscoulddoinordertoreducethelikelihoodofdataloss,privacybreaches,ornoncompliancewithregula4ons.WebelievethatITorganiza4onsmustnowadoptabusiness-focusedrisk-managementapproachthatengagesbusinessleadersinmakingtrade-offsbetweentheeconomicgainsthatcloudsolu4onspromiseandtheriskstheyentail.”

Landscapein2016HybridClouds&Industrytrends

BusinessusageofSaaS,HostedandCloudSolu4onsbecomingcommonplace

• GoogleDocs

• Office365

• Azure/Onedrive

• AmazonWebServices

HybridCloudsleadingtheway

• Former“publiccloud”providersofferingrobustsolutionsforspecificindustriesconcernedwithprivacyandsecurity.• Ex.MicrosoftAzureGovernmentCloud

MajorVendorswillcontinuetopushcustomerstotheirSaaSofferings

ClaimsandPolicyManagementApplicationVendorsarenoexception

BeyondtheCloudManyindustryexpertsarepredictingmachinelearning,serverlessenvironments,andafocusondatawillbethe“future”ofcloud

computingoverthenextseveralyears.

EricSchmidt,CEOofGooglestates,“theamountofinnovationwewillseeinthenextfiveyearswillexceedalltheinnovationwe’veseeninallprioryears.Schmidtwentontomakeafewmorepredictions:

Theplatformisnottheend,itisthebottom.Machinelearningisontopandwillbethetechnologythatwilldrivethetransformation.

NoOpswillbecomemainstream.Serverlessarchitectureswillbethenextwaveofcomputing.

http://www.forbes.com/sites/mikekavis/2016/03/25/google-provides-a-glimpse-into-the-future-of-cloud-computing/#5b2753f5529f

Questions?