iasa denver feb 15 - selecting a cloud model

IASA Denver, Feb 2015

Selecting a Cloud Model

2Wayne AndersonCertified IT Architect – Professional (July 2014)

Avanade

IASA Denver, February 2015 by Wayne Anderson, CITA-P

Service Management Architect

Working in IT for more than 14 years, including a stint as a contractor at IBM Global Services. Joined Avanade in 2006, currently a group manager with our global managed services business.

About

Able to leap proposals in a single bound, known to dive into big blocks of ugly text and make sense of the whole thing. Also certified as a Holistic Information Security Practitioner.

Superpowers

[email protected]@wynweb.net

@NoCO_Architect

mailto:[email protected]



3DisclaimerIn Short: This guy is speaking as an individual professional.


While Avanade certainly supports IASA, the content of this presentation does not represent the official position of Avanade, either on the industry or towards any particular company. The content of this presentation should be seen as an informational resource, shared for the purpose of general industry discussion.

Not speaking for an employer.

Avanade, and many other organizations, are available to support organizations that are interested in making the transition to the cloud. The information presented in this discussion is not part of a paid engagement and should not substitute for getting customized professional advice.

This information is made available as a free resource, creates no professional relationship or duty, and any risk in applying data acquired for any particular business is entirely the risk of that business or professional.

No Warranty.

1 Timeline

2 NIST CloudMore than Tech

Organization

The Model


Brief AgendaSelecting a Cloud Model

Coffee break after!

3

4

5

TIMELINE


History Counts

6


UPS AND DOWNSLearning from Gartner’s 2015 CIO Agenda summary:

18% 26%Cloud First

Gain in organizational CIOs indicating Cloud or Infrastructure as a top organizational priority, 2015 vs 2014.

Not Quite.CIOs are indicating “digital” and “security” are no longer “bolt on” initiatives!

75% of CIOs indicated a plan to change their leadership style as part of the change in the landscape!

Without Marketing or

Security?Decrease in same CIOs ranking security or marketing top of list.

To learn more, visit gartner.com/cioagenda

7

NIST800-145

Financial Analysis

Risk Management Framework

Reference Architectur

e

Security and Privacy for Cloud FIS

State Department

ITAR


State of StandardizationOrganizations have Strong Foundational Guidance

500-299

800-174800-173

8

NIST800-145

Financial Analysis

Risk Management Framework

Reference Architectur

e

Security and Privacy for Cloud FIS

State Department

ITAR


State of StandardizationOrganizations have Strong Foundational Guidance

500-299

800-174800-173

Open Group:Cloud Computing for Business

IRM Cloud Computing SymposiumDTAG Cloud Computing Working Group

FedRAMPCloud.cio.gov

ISO 27001/27002NIST CSRC RMFUS NSTIC

9

NIST Cloud


There *IS* A Standard

10

I buy well-defined pieces of stuff that I connect to use how I

need to, for my business.

IaaSI have to change my code to

use stuff I buy, the underpinnings of which are

hidden from me.

PaaSI buy a volume of business

objects. How I get to that stuff is someone else’s problem.

SaaS


Cloud ModelsNIST 800-145: 2011

11

1Resource PoolingDeveloped pools of what? Disk? Transaction capability?

2On-Demand

3Rapid Elasticity

4MeasuredMeasured by what?


Linking the Attributes to ModelsNOT NIST’s Attributes! These are YOUR business’ platform attributes!

1 2 3 4The 5th attribute in 800-145 is broad network access. This is assumed, it’s typically not an attribute which will drive model choice.

12

Organization


Cloud is not a bolt-on


13Cloud PyramidCloud Security and Design Readiness

Cont

rol

Platform

Capability

1 2

3

How granular does the organization’s understanding and control of the resource need to be? Compliance and/or app architecture may drive higher levels of control needed, reducing the number of elements that are “hidden”.

ControlWhat level of skills and

experiences are available in the organization to utilize cloud services? Do skills

directly translate? Can team members lower cost for the organization successfully?

Capability

14


Financial TargetsWhere is the organization see the most value in spend? Where in the “stack”

can the business value case most easily be linked?

IaaS PaaS SaaS

Headcount

Application Portfolio

Infrastructure Costs

15

The Models


Requirements Drive Acquisition

16

IgnitionWhat you buy is what you get.

Software is already organized, with objects and security

models offering limited customization. Less

configurability and control in how the security and

operations are provided at “lower” levels of the service.

Best for organizations which need to completely remove entire legacy applications and associated skills. Also a great fit for organizations which need nearly “instant on” capabilities – such as the small/medium business or marketing and similar business capabilities.


Software as a Service“Insert Coin” … or at least nearly so.

17

Tapping into the Ecosystem

Application FocusedCapability is exposed to be

integrated into the app space. Typically highly flexible in the

capability portfolio. Infrastructure implementation

of capabilities may not be fully configurable. Organizations

with strong app dev capabilities or investment.

Great way to invest in a cloud provider that is driving development in a space important to your business. E.g. Amazon or Microsoft. Key drivers are innovation in neural / analytic capabilities driving new business opportunities.


Platform as a ServiceDid you change your application to use the service?

18

Low Bar to Entry

Maximum ControlIt’s your infrastructure, on

your terms, operated without outsized up front capital

investments.

Lack skills? Its your infrastructure on your terms,

relying on your people to make effective use of it.

Many existing enterprise applications can be reviewed for management in a different way. Is there efficiency to be gained? Can costs be eliminated by using a third party? What about highly flexible demand workloads? Seasonal applications? Dev/test infrastructures?


Infrastructure CapabilityMaking innovative ideas… from the ground up.

19

@NoCo_Architectlinkedin.com/in/[email protected]

[email protected]


THANK YOU!Feel free to ask questions!

iasa denver feb 15 - selecting a cloud model

Documents