Business Ramifications of VariousIT Infrastructure Models

Lee Williams, CEODigital Connections, Inc.

Prepared for the Financial Executives IT Committee

September 16, 2010

The Real Chain• Decision (Yours)

• Choice (Yours)

• Consequences (Not necessarily yours)

What we want to do is fill in the unknown blanks FIRST

Getting our Ducks in a Row

Table of Contents• Introduction and Purpose• Bibliography • List of Figures• Opening Gambit • The First Great Divide• Advantages and Disadvantages of the Public CITI models• Factors Reviewed in the Public • CITI Model and the IS2 Model• Remote CITI Models• SaaS (Software-as-a-Service)• PaaS (Platform-as-a-Service)• IaaS (Infrastructure-as-a-Service)

Table of Contents

• The IS2 Models (InfraStructure Structure)• The In House Model• The IMO Model• The Outsourcing Model• Risks, Security, and Other Gotchas• Practical Applications for the CITI and IS2 Models• About IT Transformation• Conclusion

Table of Contents• Appendices (all in Excel 2010 Format)• CITI Financial Cost Model• CITI Financial Contingencies & Considerations• CITI Operational & General Notes• CITI Risks & Security Concerns • CITI Transformation Notes • IS2 Financial Cost Model• IS2 Financial Contingencies & Considerations• IS2 Operational & General Notes• IS2 Risks & Security Concerns • IS2 Transformation Notes• Works Cited

Partial Sample - Appendices Spreadsheets(10 tabs with approximately 175 entries)

CITI to In House Financial Comparison

Additional Costs

Reduced Costs

(Annualized)

1 What is the "base rate" calculation? (e.g. number of units, hours, etc.?) 2 Are there any "up front" or "set up" fees? 3 What equipment costs will need to be added? 4 What equipment costs will be eliminated? 5 Will there be additional costs in bandwidth required? 6 What additional personnel costs will be required? 7 What personnel costs will be eliminated? (include benefits) 8 What are the costs for any personnel RIFs that come into effect?

9 Are there any reductions in personnel training costs, tool sets, vehicles? 10 Will the model require additional costs for on-site back-ups? 11 What are the security associated costs? 12 What are the redundancy associated costs? 13 What will be the costs of Software Licenses? 14 How will this effect hardware maintenance costs? 15 Are "hard dollar" space costs affected? 16 Are "hard dollar" electrical costs affected?

17 Are "hard dollar" supporting systems (AC, Power Back Up Systems) affected? 18 Will there be additional technical training costs required?

How Much Can We Improve?

• It depends on how effective and efficient current structure is

• It depends on the level of service to your users• It depends on the condition of your infrastructure

(including security and redundancy)• It depends on how ethical you are

Things to Avoid

Some Things I Would Want to Avoid

• Underutilized resources – human, hardware and software resources

• Spending money with no real benefit, or worse yet, investing with worse operational performance– “Time and time again I have seen huge, massively expensive, mission-critical

applications sit on equally huge and massively expensive storage infrastructures that are essentially idling under low load. Meanwhile, elsewhere in the data center, a collection of cheap tertiary applications are burning their storage resources to a crisp with loads many times that of the critical systems.”₁

1 Matt Prigge, “The Real Cost of Lying about IT Infrastructure Costs,” InfoWorld, April 19, 2010.

But in GENERAL…

You PROBABLY can…

• Reduce your TOTAL IT costs from 10% to 40%.• Improve all of your production operational IT

up times and improve processing speeds by 2% to 5%.

• With the average office worker on a PC 800 hours per year, that’s 16 to 40 hours per year of productivity as well as reduced frustration

But you will have to…

Before You Transform

• Have an open mind. IT doesn’t have to be done the way you do it today.

• Understand your business processes and how IT affects them.

• Understand your current costs – all of them.

• Prioritize well.• Proceed slowly and cautiously.

But Doesn’t My IT Staff Do This?• Probably NOT. And here are a few of the reasons why:• 1) They may not fully understand the business logic.

First Test – Name the top 5 IT platforms that affect the business. Second Test 2 – Does your reliability, security and redundancy reflect it?

• 2) They may not be knowledgeable of what and how improvements can be made. IT is a very swiftly changing environment.

• 3) If they add certain technological improvements they will only be forced to handle more… problems, requests, additions, etc. – on your already “tight” budget?

• 4) It may be perceived that a good change for the company affects them in a negative way.

IT Infrastructure is not an end-game, it is a continually evolving process.

One thing is for certain – you will never arrive; rather, you will just be traveling towards the

destination.

This is why the ability to transition the IT infrastructure is so important.

What are IT Clouds?

What are “IT Clouds”?

• Don’t get caught up in the jargon, terminology• Clouds give a user the ability to access and use

information across a network• Clouds come in two main varieties – Public &

Private• Clouds, whether public or private, provide

scalability and elasticity• Clouds have varying degrees of security and

redundancy, thus varying degrees of risk

(CITI – Public )

Lower Business Entity Control

(CITI – Private )

PaaS

Higher Business Entity Control

SW (their tools – you develop,customize)

SW (yours)

The Six Models of CITI

SW (your tools- You develop, customize)

SW (theirs) Delivery (theirs)

SW

Infrastructure Staff

Software

Infrastructure HW

SaaS

IaaS

SW (yours) Delivery (yours)

IaaS Delivery (theirs)

SaaS

PaaS

SW (yours)Delivery (yours)

In House

Lower Business Entity Control

IMO

Out Sourcing

Higher Business Entity Control

SW +

SW

SW

SW

Infrastructure Staff

Software

Infrastructure HW IS2 Infrastructures

Vendors

Help Desk NOC

X

Help Desk NOC

The Three IS2 Models

Nine Factors Reviewed in Each Model

• Illustration• Description• Advantages• Disadvantages• Financial Ramifications• Examples of Providers• Similar Models• Negotiation Points• Considerations

In House

(CITI – Public )

Lower Business Entity Control

(CITI – Private )

PaaS IMO

Out Sourcing

Higher Business Entity Control

SW+

SW (their tools – you develop,customize)

SW (yours)

SW

SW

SW (theirs)

SW

Infrastructure Staff

Software

Infrastructure HW IS2 Infrastructures

SaaS

VendorsIaaS

Help Desk NOC

Help Desk NOC

X

PrivateSaaS

SW (Theirs)

Public

SW – Yours and you can modify

Examples: Application on your server to your workers over the network. To gain scale – virtualize.

Examples: Salesforce.com (CRM)NetSuite (business software)Rackspace

PrivatePaaS

SW (Theirs but you can develop)

Public

SW – Yours but you can develop

Examples: Company IT Personnel Vendor Provided Programmers(Any language required)

To gain scale - virtualize

Examples: Google - App Engine (Python, Django)

Salesforce.com – Force.com (Java)

PrivateIaaS

SW (Yours but maybe theirs on their platform)

Public

SW – Yours on your platform

Examples: Your applications riding on your platform delivered to your workers via your network. To gain scale - virtualize

Examples: Rackspace; GoGridMicrosoft – AzureAmazon – EC2 (Elastic Cloud Computing)

Public Cloud Advantages; Disadvantages

Hardware SW Advantages Disadvantages

SaaS Theirs Theirs Immediately usable Inflexible. Big target

PaaS Theirs Theirs but can Temporary projects Must live with develop- be developed Web 2.0 Mashups ment platform. Big target.

IaaS Theirs Yours/may Optimum use of scale No/little control. Big target. be developed Web 2.0 Mashups Difficult to disengage.

All to some degree All to some degree may offer scale, elasticity have latency, security, fast implementation ownership, legal issues.

Some Cloud Risks

• Security of proprietary information• Security of customer information• Meeting regulatory security requirements• Legal issues – Massachusetts’ security

requirements, viability issues, litigation of information issues

• Performance• Vendor Lock In.

Survey of 547 Business Technology Professionals(Survey Results from Information Week Analytics, November 9, 2009)

The Three IS2 Models• IS2 Stands for InfraStructure Structure • From your perspective, it only applies to

Private Clouds or Your IT Network

• Like Public Clouds, there are many derivations of these three models

SW

In House

Vendors

In House – The Good, the Bad, and the Ugly

• The Good – You have total control.

• The Bad – You have no scale advantages other than virtualization. High cost model. Limited staff.

• The Ugly – You have no personnel scale advantages, and may have no technical help desk, no NOC, not have the best IT prioritization, and may be involved in day-to-day IT issues. Worse yet, you may be held “hostage”. You may not have “enforceable” Service Level Agreements.

SW

IMO

IMO Provider

IMOs – The Good, the Bad, and the Ugly

• The Good – You have personnel scale advantages, technical help desk, NOC, improve IT prioritization. You should not be involved in day-to-day IT issues nor are you held “hostage”. You have enforceable SLAs. Synchronizes IT costs to budget. You own the IT assets.

• The Bad – You don’t have total control over personnel. May not have the discipline for process. Doesn’t scale. Hardware & Software applications. You own the IT assets.

• The Ugly – It may be threatening to current IT personnel.

SW

Outsourcing

Outsourcer

Outsource – The Good, the Bad, and the Ugly

• The Good – You have personnel and asset scale advantages, technical help desk, NOC, improve IT prioritization. You should not be involved in day-to-day IT issues nor are you held “hostage”. You have enforceable SLAs. Synchronizes IT spend to budget, additional metrics. You may or may not own the IT assets.

• The Bad – You don’t have total control over personnel, nor software, hardware or refresh. May not have the discipline for process. May not scale hardware and software. You may or may not own the IT assets.

• The Ugly – It may be threatening to current IT personnel. Very difficult to disengage if it were the wrong choice.

Approach & Process• How does your IT align itself with your business? What is

it that you need or don’t need and what are your business priorities? What is critical and what is not? Does IT give you the information you need to operate and optimize the business? What would be your current costs to align?

• Identify and segregate your costs – by hardware, software, personnel, benefits & expenses (training), IT test equipment or vehicles, licenses, maintenance, outside vendors. What is your monthly IT cost per user by category? Estimate what one hour of downtime to a business user costs. How many total business end user business hours do you incur? If you can’t calculate, estimate your SLAs (responsiveness).

Approach & Process

• What is the health (reliable, secure, redundant) of your IT infrastructure? What would be the cost to make it healthy? Be sure to include operational costs (e.g. maintenance) as well as capital costs.

• Now you have a “total and segregated baseline”. You now can compare both Public and Private Cloud offerings as well as IS2 models.

Approach & Process• As you compare various models to your baseline:• Does it align itself with your business model?• What exact costs go away?• What exact costs remain?• What affects do you have on end user responsiveness

(SLAs)?• What are the affects to reliability, security, and redundancy?• Is the model transitional? How hard will it be to change the

model?• Go slow. Be cautious. Do your homework! Appendix to the

paper contains about 175 questions & notes!

A Few Very General Examples

• SaaS (public) may be advantageous when: 1) the application meets your exact needs. 2) You have a “temporary” or “peak load” situation. (Beware of “SaaS sprawl”, latency, security, legal and ownership issues.)

• PaaS (public) may be advantageous when: 1) You have in house programming capabilities and the application can be made to meet your exact needs. (Beware of the platform you use. You’re stuck with it. See SaaS above.)

• IaaS (public) may be advantageous if all the applications meet your needs and you want no part of IT. (Beware of latency, security, legal, and ownership issues. Also, if they go down – you go down.)

A Few Very General Examples• In House – Advantageous if you need total control.

Virtualize your servers to gain scale. (Beware that your costs may be high and responsiveness may be poor as well as reliability, security, and redundancy issues. Plus, beware of failure – VM Ware is not for the meek, nor the overconfident.)

• IMOs – Advantageous to adding significant scale and providing better service; also very translucent. Can still take advantage of Public Cloud offerings. (Beware that you still own the assets and software.)

• Outsource – Advantageous in scale, responsiveness without being in a public cloud. (Beware that you do not own the assets or software, do not control refresh of the assets, and difficult to disengage. Also, if they centralize servers, if they go down – you go down.)

Business Ramifications of IT Infrastructure

• Thank you• Inquisitions & Answers