Cloud Transformation Program Executive Sponsor Program Update

Roadshow Winter (Jan/Feb) 2018

Updates about the UIT Cloud Transformation ProgramWhat you need to know right now

Reminder about how you can stay informed and provide ongoing feedback 2

Open discussion, including general Q&A and feedback on today’s meeting3

W Winter Cloud Program Update!

Today’s Agenda 1

Reminder | Overall UIT Cloud Program Goals (through 2019)

Goal 5: Reduce UIT computing footprint on campus 50%

Goal 1: Perform cloud governance and portfolio management

Goal 3: Integrate cloud systems, processes, and services

Goal 2: Define organizational development program

Goal 6: Exit Livermore disaster recovery site

Goal 4: Run mission critical services in the cloud

Some Key Cloud Program A

Finalized and documented account provisioning and billing requirements for Google Cloud Platform

Sites 2.0 - SWS and SNow teams completed Acquia migration timeline and began testing

Kick off discovery for a UIT monitoring and log strategy with Service Desk

Kicked off discovery for network address and DNS management in the cloud with Networking team

Created a detailed inventory of Livermore equipment, mapped to system and owner

Acquired Skyhigh cloud discovery tool for information about campus cloud use

Created three new job descriptions, which are currently with UHR for leveling and approval

Published a "Choosing and Purchasing a Cloud Solution" guide for campus

Completed a survey of service owners on cloud plans, blockers, and roadmaps

Key infrastructure components (LDAP, Kerberos and IdP) are now running in the cloud

Finalized requirements for AWS and GCP provisioning and billing through ServiceNow

Made Cloud Academy online training and AWS onsite training available to technical staff

W f

What services are moving to the cloud, and when?

What are we doing to get ready as an organization for cloud transformation? (p.s., what training is available?)

How are we adjusting course for the cloud program, given other critical priorities (such as security)?

W f

What services are moving to the cloud, and when?

It’s not just what we’re moving, but also the activities that we’re doing to help us move

MIGRATING NOW

MIGRATING BY SPRING/ SUMMER 2018

Core Foundational Services

Identity & Access Management (IAM) infrastructure nearly complete in AWS

IaaS, PaaS, and SaaS MinSec guidelines are published

Tools facilitating migration: Terraform, Gitlab, Puppet (IaaS)

Active Directory

OpenLDAP will be in production

Client Certificate Authentication Infrastructure

Kubernetes, Vault, AWS/GCP account provisioning, DNS/Network management in the cloud, Monitoring in the cloud, Group services

DISCOVERY AND PLANNING

Mission Critical Services

Code Green

Stanford Sites (PaaS)

NetDB, Survey of service owners’ roadmap plans, Skyhigh testing, client satisfaction survey

ERPs

Kaba Clocks (SaaS/ integrated with PeopleSoft)

Critical apps will migrate as a BC/DR imperative; timeframe still being decided

UIT will pursue a “lift and shift” strategy to move/re-factor ERPs; will also look at supplemental apps

MIGRATING NOW

MIGRATING BY SPRING/ SUMMER 2018

Core Foundational Services

Identity & Access Management (IAM) infrastructure nearly complete in AWS

IaaS, PaaS, and SaaS MinSec guidelines are published

Tools facilitating migration: Terraform, Gitlab, Puppet (IaaS)

Active Directory

OpenLDAP will be in production

Client Certificate Authentication Infrastructure

Kubernetes, Vault, AWS/GCP account provisioning, DNS/Network management in the cloud, Monitoring in the cloud, Group services

DISCOVERY AND PLANNING

Mission Critical Services

Code Green

Stanford Sites (PaaS)

NetDB, Survey of service owners’ roadmap plans, Skyhigh testing, client satisfaction survey

ERPs

Kaba Clocks (SaaS/ integrated with PeopleSoft)

Critical apps will migrate as a BC/DR imperative; timeframe still being decided

UIT will pursue a “lift and shift” strategy to move/re-factor ERPs; will also look at supplemental apps

The Bottom Line

New UIT systems and software deployments will be cloud-sourced

Current UIT-owned and operated critical campus services and core infrastructure will be primarily cloud-sourced

W f

What are we doing to get ready as an organization for cloud transformation? (p.s., what training is available?)

3cloud training paths for Sys Admin, Software Developer roles being drafted, plus core cloud training path for IT directors/managers

Ensuring UIT staff are ready for the cloud

178hours spent in Cloud Academy online training (as of 1/18/18)

60Cloud Academy licenses

3new role descriptions approved by the OCIO and currently in review by UHR Compensation

194+UIT staff members in 4 AWS classes (2 AWS Essentials, and 2 advanced 3-day workshops, over 77 hours)

143Lynda.com courses related to cloud (for AWS, Google Cloud Platform/GCP, and Azure)

30UIT senior staff members will participate in an AWS cloud simulation exercise (scheduled for end of Feb)

20UIT service owners surveyed about cloud roadmaps and potential barriers to cloud adoption

14articles on UIT Community and UIT News websites

3Cloud Change Champions meetings, focused on sharing overall and deep-dive program updates

3cloud training paths for Sys Admin, Software Developer roles being drafted, plus core cloud training path for IT directors/managers

Ensuring UIT staff are ready for the cloud

178hours spent in Cloud Academy online training (as of 1/18/18)

60Cloud Academy licenses

3new role descriptions approved by the OCIO and currently in review by UHR Compensation

194+UIT staff members in 4 AWS classes (2 AWS Essentials, and 2 advanced 3-day workshops, over 77 hours)

143Lynda.com courses related to cloud (for AWS, Google Cloud Platform/GCP, and Azure)

30UIT senior staff members will participate in an AWS cloud simulation exercise (scheduled for end of Feb)

20UIT service owners surveyed about cloud roadmaps and potential barriers to cloud adoption

1414 articles on UIT Community and UIT News websites

3Cloud Change Champions meetings, focused on sharing overall and deep-dive program updates

The Bottom Line

Our focus has been on addressing critically needed roles first, scheduling foundational training, and establishing our communication channels

We will be focusing on modifying the next set of most-impacted job descriptions, and completing skills assessments to inform more specific training next steps

W f

How are we adjusting course for the cloud program, given other critical priorities (such as security) and the new CIO?

Cloud Client Enablement Team

Team CharterScope of work

If funded, this team will be chartered specifically to help clients with SaaS implementations This has been a Business Affairs priority this year and is supported by CIO Council and campus partners

StructureIf/when we receive funding for this group, we will determine how this group will be constituted and how it will differ from other groups in UIT (TCG, ET, RC, BPs), defining how it will supplement existing support

What have your been like with the cloud so far?

WHAT’S WORKINGThings that are working well from

your perspective and/or things you want to continue

WHAT COULD BE BETTERThings you wish were different

and/or things you would like to change

What is important for to know about

the cloud program after today’s meeting?

Cloud is still a priority for University IT1

We’re making progress towards our goalsStaff across UIT are working together towards our accomplishments to date (summarized in the preshow)

2

We’re being strategic about how/when/ which services are migrating to the cloud3

How do you get more information and keep up to date?Webpage: https://uit.stanford.edu/cloud-transformation

T !