Shaping Your Own Cloud CBA Cloud Panel Speakers: Mike Dillon & Charlie Blanchard

The National Institute of Standards and Technology (NIST) defines Cloud Computing as … “A model for enabling convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction.” on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction.” 1 What is Cloud Computing?

Cloud Computing: Different ─ and inevitable On-demand serviceOn-demand service Broad network accessBroad network access Resource poolingResource pooling Rapid elasticityRapid elasticity Measured servicesMeasured services 5 essential characteristics of Cloud Computing

Cloud Computing: Different ─ and inevitable What makes Cloud Computing different? While traditional IT architectures are built on siloes … Applications, data, and storage Applications, data, and storage devices don’t interact IT resources are wasted IT resources are wasted (e.g., one workload per server) Management is a complex Management is a complex hassle that often leads to risky administrative lapses

Cloud Computing: Different ─ and inevitable What makes Cloud Computing different? … Cloud computing infrastructures are built on a new kind of IT architecture (that you can rent rather than build!) Begins with virtualization (e.g., Begins with virtualization (e.g., many more workloads per server) Based on virtualized architectures Based on virtualized architectures that integrate server, network, and storage access resources into a physically-distributed but centrally-managed system

Cloud Computing: Different ─ and inevitable Cloud Computing’s top 5 motivators?

Cloud Computing: Different ─ and inevitable What drives Cloud Computing adoption?

Cloud Computing: Different ─ and inevitable Why Cloud Computing Is inevitable Billions of mobile devices by 2015 Billions of mobile devices by 2015 (2.5 billion users with 10 billion devices 2 ) create immense demand … create immense demand (8X storage capacity, 16X network capacity, 20+X compute capacity of ) that cost-intensive traditional … that cost-intensive traditional IT data centers cannot meet →The cost-effective alternative: Virtualization-based Cloud Computing

Cloud Computing benefits Welcome to the brave new world of hybrid IT “IT organizations that do not match the request for IT as a service run the risk of internal customers bypassing the IT organization and consuming IT services from the external cloud, thereby placing the company at greater risk.” — Chris Howard, managing vice president, Gartner 3

Cloud Computing benefits IT performance goes up while IT costs go down Apps hosted on centralized virtual servers in a data centerApps hosted on centralized virtual servers in a data center -End-users no longer need their own copies of apps -One flexible version of an app is distributed to all end-users -Services are easily scalable, more secure, more reliable Apps provided on demand quickly andApps provided on demand quickly and automatically wherever they’re needed -IT resources optimized -IT more responsive and flexible -Little new implementation/deployment risk Standardized platform enables more cost-effective networkingStandardized platform enables more cost-effective networking of end-user departments and partners, regardless of location

Cloud Computing benefits New cost efficiencies abound CapEx becomes OpExCapEx becomes OpEx Cloud performance guaranteesCloud performance guarantees make OpEx predictable Cost savings fromCost savings from pooling/sharing IT resources You pay only for what you useYou pay only for what you use Lower TCOLower TCO Faster ROI and time-to-valueFaster ROI and time-to-value

Cloud Computing benefits Security improves (yes, really) Data and apps in a Cloud data center are easier to protect (as compared to traditional IT infrastructures)Data and apps in a Cloud data center are easier to protect (as compared to traditional IT infrastructures) Cloud enables automatic, universalCloud enables automatic, universal security policy enforcement No data is stored on end-user devices,No data is stored on end-user devices, so if a device fails or is lost or stolen, data remains safe and secure Reliable Cloud providers invest inReliable Cloud providers invest in and maintain leading-edge security technologies and capabilities, and employ experienced security experts Data and apps in a Cloud data center are easier to protect (as compared to traditional IT infrastructures)Data and apps in a Cloud data center are easier to protect (as compared to traditional IT infrastructures) Cloud enables automatic, universalCloud enables automatic, universal security policy enforcement No data is stored on end-user devices,No data is stored on end-user devices, so if a device fails or is lost or stolen, data remains safe and secure Reliable Cloud providers invest inReliable Cloud providers invest in and maintain leading-edge security technologies and capabilities, and employ experienced security experts

Cloud Computing benefits Compliance gets easier Traditional IT data siloes make enforcing compliance policy tough to impossible because data is scattered all over the placeTraditional IT data siloes make enforcing compliance policy tough to impossible because data is scattered all over the place By contrast, a well-built CloudBy contrast, a well-built Cloud environment acts as a centralized, 24/7 application and data repository So a well-built Cloud can be usedSo a well-built Cloud can be used to enforce compliance policy and make auditing easier and more efficient

Cloud Computing benefits End-users and LOB managers can work smarter By 2015, more U.S. Internet users will access the Internet through mobile devices than through PCs or other wireline devices 4 Employee mobility increasesEmployee mobility increases Collaboration is more creative and effectiveCollaboration is more creative and effective Improved employee-customer interactionImproved employee-customer interaction Untethered employees mean …Untethered employees mean … → Reduced office space costs → Less employee time wasted commuting → Employees accomplish more on the road → Small businesses can compete effectively with much larger corporations → Productivity increases — because all this happens with little or no capital investment

What’s inhibiting the shift to Cloud Computing?

What’s inhibiting the shift to Cloud Computing?

But wait! What kind of Cloud is right for you?

How Cloud Computing gets deployed Public CloudPublic Cloud …Cast-in-concrete, one-size fits-all …Low cost — but lack of control Private CloudPrivate Cloud …In-house on-demand, resource-pooling data centers customized to the needs of the corporation it serves Shape-Your-Own CloudShape-Your-Own Cloud …Combining the best of public and private Clouds

What a Shape-Your-Own Cloud provides Modest cost —use only theModest cost —use only the resources you need when you need them Rapid, elastic resource provisioningRapid, elastic resource provisioning via sophisticated infrastructure Ability to customize the precise capabilities you need — including ways to work with existing systems and appsAbility to customize the precise capabilities you need — including ways to work with existing systems and apps Power over your Cloud deployment optionsPower over your Cloud deployment options

Altering the economics of innovation “Cloud-based flexibility, agility, and scalability are becoming the new differentiators. Economic advantage may no longer be limited to those who can invest capital to innovate at high volume or cost. Cloud computing alters the economics of innovation and growth, and restructures customer relationship economics, allowing far deeper relationships with customers at much lower cost.” —Chris Weitz, Director of Technology Strategy and Architecture for Deloitte Consulting LLP's U.S. Technology practice and the global leader of Deloitte LLP's Cloud Computing practice 9 One Shape-Your-Own Cloud client … One Shape-Your-Own Cloud client 10 … Cut overall IT spendCut overall IT spend by 66% Reduced maintenance by 99%Reduced maintenance by 99% Year-over-year CapEx savings of $200,000Year-over-year CapEx savings of $200,000 IT staff now focuses “where it should” —IT staff now focuses “where it should” — on supporting end-users The importance of customizing your Cloud

Getting exactly what you need when you need it ─ affordably Ability to specify capability requirements and configurationsAbility to specify capability requirements and configurations — from virtualization to complex application environments — and dictate exactly how you want them provided, maintained, and supported Flexibility to securely deliver apps,Flexibility to securely deliver apps, data, and/or resources to your locations An all-encompassing SLA to makeAn all-encompassing SLA to make management easier and keep your costs under control The importance of customizing your Cloud

The importance of customizing your Cloud Shape-Your-Own Cloud deployment options Local cloud services Deployed on your premises or hostedDeployed on your premises or hosted Secure, dedicated (non-shared) single-tenant infrastructureSecure, dedicated (non-shared) single-tenant infrastructure Remote cloud services Multi-tenant deployment in a secure unified virtual architectureMulti-tenant deployment in a secure unified virtual architecture Uses trusted logical separation and private or VPN connectivityUses trusted logical separation and private or VPN connectivity Hybrid cloud services Massive multi-tenant, Internet-based deploymentMassive multi-tenant, Internet-based deployment Designed for discrete non-core applicationsDesigned for discrete non-core applications

What customized Cloud Computing delivers Infrastructure as a Service (IaaS)Infrastructure as a Service (IaaS) Desktop as a Service (DaaS)Desktop as a Service (DaaS) Data Protection/Security as a ServiceData Protection/Security as a Service Disaster Recovery/Business Continuity as a Service (DRaaS)Disaster Recovery/Business Continuity as a Service (DRaaS) Messaging & Collaboration as a ServiceMessaging & Collaboration as a Service Application Development/Test as a ServiceApplication Development/Test as a Service At your service: What capabilities do you need?

Infrastructure-as-a-Service (IaaS) The most basic of Cloud servicesThe most basic of Cloud services Comprehensive, integrated Cloud infrastructureComprehensive, integrated Cloud infrastructure that exploits virtualization and autonomic management synergies Provides end-to-end security and virtual machine isolationProvides end-to-end security and virtual machine isolation You can rent raw IaaS capacity/capability or opt for a provider’s more function-specific services, which are delivered from this infrastructureYou can rent raw IaaS capacity/capability or opt for a provider’s more function-specific services, which are delivered from this infrastructure At your service: What capabilities do you need?

Desktop-as-a-Service (DaaS) Enables rapid deployment of desktops on almost any device without the upfront costs and complexity of traditional desktop virtualizationEnables rapid deployment of desktops on almost any device without the upfront costs and complexity of traditional desktop virtualization Eliminates traditional desktop infrastructure, management problems, end-user demands for non-standard appsEliminates traditional desktop infrastructure, management problems, end-user demands for non-standard apps Allows end-user BYODAllows end-user BYOD At your service: What capabilities do you need?

Data Protection/ Security-as-a-Service Effectively identifies, monitors, and protects data in use, data in motion, and data at restEffectively identifies, monitors, and protects data in use, data in motion, and data at rest Detects sensitive content, monitors its use on the networkDetects sensitive content, monitors its use on the network Enforces policies to ensure protectionEnforces policies to ensure protection At your service: What capabilities do you need?

Disaster Recovery/ Business Continuity-as-a-Service (DRaaS) Protects data and apps in a highly secure remote locationProtects data and apps in a highly secure remote location Provides highly available and reliable virtualized data storage with advanced replication and restore functionalitiesProvides highly available and reliable virtualized data storage with advanced replication and restore functionalities At your service: What capabilities do you need?

Messaging & Collaboration -as-a-Service Voice/video/conferencing services that enable real-time collaboration over a networkVoice/video/conferencing services that enable real-time collaboration over a network Compliance with organizational security and compliance policyCompliance with organizational security and compliance policy Encrypted data transfer, password-Encrypted data transfer, password- protected meetings At your service: What capabilities do you need?

Application Development/Test -as-a-Service Environment for developing custom software without the hassles of a dedicated development environmentEnvironment for developing custom software without the hassles of a dedicated development environment Streamlines new application performance testing in an environment that simulates real-world conditionsStreamlines new application performance testing in an environment that simulates real-world conditions Doesn’t compromise day-to-day IT operationsDoesn’t compromise day-to-day IT operations No need to scale up on-premise IT environmentNo need to scale up on-premise IT environment Provides access to expert help designing the right development environmentProvides access to expert help designing the right development environment At your service: What capabilities do you need?

Counting down Cloud Computing best practices Cloud Computing best practices

#5 Always monitor your Cloud services Cloud Computing best practices Moving to the cloud doesn’t require a new network (unless your existing network already has serious issues)Moving to the cloud doesn’t require a new network (unless your existing network already has serious issues) But bandwidth is a core component of cloud platforms,But bandwidth is a core component of cloud platforms, so you need to plan for your bandwidth requirements and monitor bandwidth use Monitoring is also the best way to ensure that your provider is living up to your SLAMonitoring is also the best way to ensure that your provider is living up to your SLA

#4 Cover your data backsideup Cloud Computing best practices Make sure you know … What data lives in the cloudWhat data lives in the cloud Where your data lives in the cloudWhere your data lives in the cloud How your data is protected once it’s in the cloudHow your data is protected once it’s in the cloud How your data is protected in transitHow your data is protected in transit How and where your data is backed upHow and where your data is backed up How — and how easy — is it to get your data backupsHow — and how easy — is it to get your data backups

#3 Pay attention to security Cloud Computing best practices Evaluate cloud providers’ security with the right questions about …Evaluate cloud providers’ security with the right questions about … -Access control policy -Account provisioning and data protection -Authentication -Delegating administration -Log information, reporting, and analysis -Information sharing Pay attention to user authenticationPay attention to user authentication Perform a thorough evaluation of your own IT securityPerform a thorough evaluation of your own IT security Develop a risk mitigation plan and document itDevelop a risk mitigation plan and document it Monitor cloud service performance for security threatsMonitor cloud service performance for security threats

#2 Negotiate your Cloud SLA Cloud Computing best practices Shift significant amounts of IT costs from your capital budget to your operating budgetShift significant amounts of IT costs from your capital budget to your operating budget Relieve you of IT asset upgrade and maintenance costsRelieve you of IT asset upgrade and maintenance costs Make it easier to manage your services and ensure appropriate service levelsMake it easier to manage your services and ensure appropriate service levels The right cloud service-level agreement will enable you to bundle all your cloud services into a single monthly OpEx payment that will …

#1 Develop a Cloud strategy Cloud Computing best practices To do your cloud provider due diligence, check out …To do your cloud provider due diligence, check out … -Cloud infrastructure -Compliance policies and procedures -Security and data protection policies and procedures -Development practices -Data classification policies and procedures Conduct a cloud feasibility assessmentConduct a cloud feasibility assessment -Chances are you shouldn’t do this alone -Look for a provider who will conduct a FREE cloud feasibility assessment

When it comes to Cloud services, one size does not fit allWhen it comes to Cloud services, one size does not fit all Seek out a Cloud services provider who …Seek out a Cloud services provider who … → Takes time to understand your objectives — and knows what’s necessary to achieve them → Has the experience and expertise to work seamlessly with your staff, systems, policies, and procedures to design, deliver, and support a customized Cloud → Operates a state-of-the-art network of advanced-technology, highly-secure, highly-available Cloud data centers → Provides a customizable umbrella Cloud SLA The bottom line … and finally, remember:

Federal Cloud Computing Strategy, February 8, 2011, computing-strategy.pdfhttp:// computing-strategy.pdf 2Planning Guide: Technology for Tomorrow’s Cloud, September 2011, Intel, cloud-planning-guide.html cloud-planning-guide.html 3Gartner press release, March 5, 2012, 4IDC press release, IBM Tech Trends Report Deep Dive, IBM, November 2011, Uuid=ff67b471-79df-4bef def4013d#fullpageWidgetId=W90e0c88370ed_487f_9118_c b8f&file=a91dcf57-15c0-48c5-b0fa b1365ff Uuid=ff67b471-79df-4bef def4013d#fullpageWidgetId=W90e0c88370ed_487f_9118_c b8f&file=a91dcf57-15c0-48c5-b0fa b1365ff 6Future of Cloud Computing Survey, North Bridge Venture Partners, June 2011, 7Cloud Computing Forecasting Change, Alistair Banks, Deloitte Touche Tohmatsu, September 2011, 8Osterman Research Survey Report, January 2011, 9Deloitte Perspectives blog: Eyes on the sky: How cloud computing is shaping society, January 19, 2012, shaping-society.html shaping-society.html 10Strategic Advisor, Quest, September/October 2011, Quest © Quest ® is a registered trademark of Quest Media & Supplies, Inc