The Software Solution Experts - bcs.org · MDM (e.g. GOOD, Mobile Iron, Airwatch, MaaS360)! Mobile data?! VPN, Activesync ... Do a pilot/PoC first! Request changes to contractual

The Software Solution Experts

Sunday, 1 July 12

A Bluewave Group Company | www.bluewavegroup.eu | Commercial confidential Presentation

Considering the cloud

Paul Mooneywww.bluewavegroup.eu

Sunday, 1 July 12

http://www.bluewavegroup.eu



Whoami

n Senior Technical Architectn Bluewave Technology

n 16 Years consultingn Infrastructure Architect level consulting

n Security Audits, large scale deployments, technical reviews

n IBM, Symantec, Google Apps

n Speaker, Author, Blogger, jogger, bikern www.pmooney.net

Sunday, 1 July 12



http://www.pmooney.net



Bluewave Technology

n www.bluewavegroup.eu

n 26 staff

n Dublin, London

n Operate Globally

Sunday, 1 July 12






Someone copied content from the internet?

n Sources...n Marie Scottn Director, E-Mail Servicesn Virginia Commonwealth University

n @Beaker (Chris Hoff)n Rationalsurvivability.com

n Gartner

n IDC

n My Mothern She is always right

Sunday, 1 July 12




Tonight Matthew, I will ben Balanced

n Agnostic

n Referencing from experiences

n Not selling anything

n Sober

Sunday, 1 July 12




Cloud chasing is fashionable!

Sunday, 1 July 12




Everyone wants these clouds

Sunday, 1 July 12




Gartner says...

n“By YE2012, Cloud E-mail Collaboration Services [CECS] at 10% penetration will have 'passed the tipping point,' with broad scale adoption under way. By 2020, CECS market growth will level off as it approaches 70%. As the market evolves, enterprises need to develop their strategy and approach to CECS.”n Source: Gartner: “The Cloud E-Mail and Collaboration

Services Market” ID:G00205184, July 2010

Sunday, 1 July 12




Cloud evangelists say

n Simplicity

n “we manage security”

n Long term savings

n “GREEN”

n Easier change management

Sunday, 1 July 12




Why the cloud ROCKS!

n Your IT department get to learn something new!

n Innovative

n Retooling staffn Focus on other projects

n No more late night calls / patching

Sunday, 1 July 12




IT departments may say

n Large investment in “on premise” architecture

n Loss of control

n Who do you trust?

n Is my job at risk?

Sunday, 1 July 12




Key points to take home

n You will still be managing a solution

n You will still have many of the same problems

n You need to baseline what your current service is/doesn This WILL surprise you

n You then need to apply that to the cloud model

n There are cost savings to be maden Not always where you think

n Remember, all sales people lien Do your homework

n What are YOUR driving factors in moving to a cloud solution

Sunday, 1 July 12




Definition of cloud service

n National Institute of Standards and Technology (NIST)n On demand self-servicen Broad Network accessn Resource poolingn Rapid Elasticityn Measured service

n Modelsn Cloud software as a service (SaaS)

n e.g. Amazon Web Services, MS Azure, IBM Smartcloudn Cloud platform as a service (PaaS)

n E.g. Salesforce.comn Cloud Infrastructure as a service (IaaS)

n e.g. Google App engine, Force.com

Sunday, 1 July 12




Definition of cloud service

n Deployment modelsn Private Cloudn Community Cloudn Public Cloudn Hybrid Cloud

n For moren http://csrc.nist.gov/groups/SNS/cloud-computing/

Sunday, 1 July 12



http://csrc.nist.gov/groups/SNS/cloud-computing/

http://csrc.nist.gov/groups/SNS/cloud-computing/


Examples

n Public Cloudn Infrastructure and/or platform is available to the general public

and is owned and operated by the vendor selling cloud services.

n Private Cloudn ─Infrastructure and/or platform is operated for one

organisation. It may be on-premises or off-premises and may be managed by the organisation or a third-party vendor.

n Hybrid Cloudn A blend of both public and private clouds.

Sunday, 1 July 12




What have you currently got?

n What eMail systemn Exchange, Fetch, Lotus Notes, public email system, basic

IMAP/POP?

n What applications / Solutions?

n Active Directory / LDAP ?n Is it customised?

n User Management system?

n Mobile management system?n Blackberry Enterprise Servern MDM (e.g. GOOD, Mobile Iron, Airwatch, MaaS360)

n Mobile data?n VPN, Activesync

Sunday, 1 July 12




ASK THE VENDOR

Sunday, 1 July 12




Licensing

n How many licenses for products do you have?n Are they all active?n Are they perpetual?n CPU based? Enterprise Based?

n Are you using what you are paying for?

n Can you renegotiate a rate?

n Is this a driving factor?

n Will the Vendor negotiate?

n ASK THE VENDOR

Sunday, 1 July 12




Customisation

n Review the systems that may go “cloudy”

n Any out of the box changes?

n Are any of these business critical?n Can they be duplicated with a cloud solution?

n ASK THE VENDOR

Sunday, 1 July 12




Your directory

n Typically a *lot* more than an authentication / management repository

n Does it integrate with other sources?n Do sources feed the directory?n Are all / some of these process going to the cloud?

n If not, hybrid model?

n Group management, delegated management of directories

n Can this be reproduced in the cloud?

n ASK THE VENDOR

Sunday, 1 July 12




eDiscovery / Audits

n Auditors still exist in the cloudn I’m sorry

n What are your current procedures?n eDiscoveryn Auditsn Data/account retentionn What about ARCHIVES!

n Are they being retained on premise?

n Involve the auditing department in your review

n Can you meet your audit requirements if you move to the cloud?n Is there an additional cost?

n ASK THE VENDOR

Sunday, 1 July 12




More about auditors

n If a system audit is requiredn How is it performed

n What is the vendor data centre certification

n Does the vendor match your regulatory compliance level

n ASK THE VENDOR

Sunday, 1 July 12




Accessing your data

n What about your intranet and your extranet?

n Will you need to make any rule changes to your firewall?

n Do you require users to access any systems through a VPN?

n Will you need to consider any changes to your wireless infrastructure?

n Will the cloud systems require any additional network ports?

n Will you need to consider any changes to your network architecture for redundancy

n What about the vendor's network?

n Do they use network encryption for all traffic?

n Do they use any sort of packet-shaping or throttling mechanism for scaling back usage when loads are high?

n Is there any limit on the number of users who can be logged in at one time?

n ASK THE VENDOR

Sunday, 1 July 12




Access and usability

n How will users access email and related services

n Browser?n Client?n Mobile?n IMAP/POP3/Activesync?n Offline access?

n Can we limit all of these to groups?

n Policy based management?n Where is password stored?

n Federated identity system or cloud

n ASK THE VENDOR

Sunday, 1 July 12




How do I migrate users/data?

n Whats the data migration process?n You may be surprised with the answers

n How would they suggest the migration process runs?n Disruptive or integrated migration

n ASK THE VENDOR

Sunday, 1 July 12




Quotas and user space

n What is the default allocation per user?

n What is the charge once you pass the allocation?n You may be surprised

n ASK THE VENDOR

Sunday, 1 July 12




Data security / availability

n What type of encryption is used?

n What are backup / restore procedures?n Prove it!n And.. .get them to prove it again!

n Are you sharing storage?

n Who has access to your data?

n What contingency do they offer?

n ASK THE VENODR

Sunday, 1 July 12




Data security / availability

n What availability monitoring do they offer?

n Who monitors the cloud?n Have you looked at independent monitoring services?

n What are their SLAsn Contact numbers, response times (all levels)

n ASK THE VENODR

Sunday, 1 July 12




Location location location

n Where will your data reside

n Does this affect any part of your business

Not ideal

location

Sunday, 1 July 12




Choosing the vendor

n Research

n Shop around

n Learn from other people’s mistakes

n Trial offers

n Review your current services

n Create a checklist

Sunday, 1 July 12




Running a cloud project

n It’s THE SAME as any other project

n Project sponsorn Mission statementn Time framesn Criteria for success

Sunday, 1 July 12




Basics for a cloud project

n Pilot/test project first!

n Staff buy inn Leadership required

n Especially for social business toolsn E.g. Socialtext, Chatter, IBM Connections, yammer etc

n Leaders to not have to be managers

n Test domain / environment in cloud

n Systems migration plan

n User migration plan

n Designated users

n Training plan

n Resources planning

Sunday, 1 July 12




User migration

n Are you planning to migrate everyone?

n Pilot migration

n Choose different regions

n Power users

n Dual delivery?

n New Domain name?

n Aliasing?

n What data migration tools can you use?

n Free/Third party

n Costs

n In house?

n Any bottlenecks?

n AV scanning, throttling, threading

Sunday, 1 July 12




Time to clean house?

n Do you NEED to migrate datan Keeping legacy data in-housen Until retention period expires

n Are you allowed to migrate data

n What about services you cannot migrate?n How are they affected

Sunday, 1 July 12




Administration

n How will you administrate?

n Who will administrate?

n Who has access?n Security levelsn Admin interfacen Help desk training

n Support/assistancen Support number?n Response times?n Proactive notifications on outages?

Sunday, 1 July 12




Administration

n Know your SLAn Know the penalties

n Ensure service falls within SLAn Who is monitoring your service?

n Know your bottlenecks?n Bandwidth to Internet?n Secondary links?

n Different carrier / hardwaren VPNs?

Sunday, 1 July 12




Disasters...

n This is still YOUR service

n Do NOT neglect your Disaster Recovery plan

n What if service is down for days?n Communication plann Backout plan

n How can you get the data out of the cloud?

Sunday, 1 July 12




In Summary

n Look at what your IT service doesn Document all of it

n Especially the incidental services

n Ask LOTS of questions

n Do a pilot/PoC first

n Request changes to contractual agreements with Vendors

n One cloud does not fit alln Make it fit your needs

Sunday, 1 July 12




Further reading

n “Cloud Computing: The Next Generation of Outsourcing”, Ben Pring,

n Gartner Research, ID G00207255, November 2010.

n “Hype Cycle for Cloud Computing, 2010”, David Mitchell Smith, Gartner Research, ID G00201557, July 2010.

n “Criteria for Government to Evaluate Cloud Computing”, Andrea Di Maio, et al., Gartner Research, ID G00175342, May 2010.

n “Cloud Security Guidance IBM Recommendations for the Implementation of Cloud Security” http://www.redbooks.ibm.com/redpapers/pdfs/redp4614.pdf

n SAMLKnowledgebase:http://saml.xml.org/wiki/saml-wiki-knowledgebase

n “Collaboration in the Cloud: How Cross-Bound Collaboration is Transforming Business” Erik van Ommeren, et al., Microsoft Sogeti 2009

Sunday, 1 July 12



http://www.redbooks.ibm.com/redpapers/pdfs/redp4614.pdf




http://saml.xml.org/wiki/saml-wiki-knowledgebase





Even more reading.... :)

n “CloudE-mailandCollaborationServicesMarket”,TomAustin,Gartner Research, ID G00205184, July 2010.

n “Chasing the Cloud: Part 1 – What Domino Administrators and Managers need to Know,” Marie Scott, The View, Wellesley Information Services, May 2011.

n “Chasing the Cloud: Part 2 – Plan & Prepare for Moving your Domino Environment to the Cloud,” Marie Scott, The View, Wellesley Information Services, July 2011.

n “Chasing the Cloud: Part 3 – Migrating your users and Data,” Marie Scott, The View, Wellesley Information Services, September 2011.

Sunday, 1 July 12




Thank you

n Paul Mooneyn www.bluewavegroup.eun [email protected]

n www.pmooney.netn [email protected]

n @pmooneynet

Sunday, 1 July 12





mailto:[email protected]






Documents

The Software Solution Experts - bcs.org · MDM (e.g. GOOD, Mobile Iron, Airwatch, MaaS360)! Mobile data?! VPN, Activesync ... Do a pilot/PoC first! Request changes to contractual