Http:// Stepping into the Cloud Risks, Rewards, Realities Terry Gray, PhD Assoc VP, Technology...
-
date post
21-Dec-2015 -
Category
Documents
-
view
215 -
download
0
Transcript of Http:// Stepping into the Cloud Risks, Rewards, Realities Terry Gray, PhD Assoc VP, Technology...
http://www.bripblap.com/uploads/cloudbridge.jpg
Stepping into the Cloud
Risks,Rewards,Realities
Terry Gray, PhDAssoc VP, Technology StrategyUW Technology
Erik LundbergDirector, CS LaboratoryComputer Science & Engineering
14 October 2009
http://blog.host1plus.com/wp-content/uploads/2009/08/Cloud-computing013-300x300.jpg
Agenda Background
UW Strategy
Risks
• Compliance
What's Inside that Cloud?What's Inside that Cloud?the Internet + Serversthe Internet + Servers
From Wikipedia article on Cloud Computing
Cloud Computing = IT stuff running in someone else's data center
Kinds of Cloud ServicesKinds of Cloud Services
• Infrastructure as a Service e.g. Amazon EC2, S3
• Platform as a Service e.g. Google AppEngine
• Software as a Service (SaaS) e.g. Hotmail 1994
Varying degrees of shared vs. dedicated, e.g. “Cloud vs. Hosted”
Cloud Computing IngredientsCloud Computing Ingredients
– Old “service bureau” paradigm cf. ADP, 1949
– Revenue from ads + subscriptions
– Data mining for personalizing the ads
– Modern technology (web, Internet, datacenter)
– Low cost via high-scale, more self-support
– Disintermediation (self-service)
Natural EvolutionNatural EvolutionWho ya gonna call (for commodity IT)?Who ya gonna call (for commodity IT)?
Individual
Departmental
Central
Cloud
Goodbye “IT priesthood”... Hello “Consumer Computing”
In the beginning...
http://www.library.drexel.edu/blogs/librarylog/dollars.gif
Cloud CurrencyCloud Currencyusers are the users are the inventoryinventory
http://www.cksinfo.com/clipart/people/bodyparts/eyes/eyeballs.png
http://thomaslarock.com/wp-content/uploads/2009/06/datamining.jpg
So... So... Cloud Cloud Computing:Computing:
Hot or Not?Hot or Not?
Nick Carr
Richard Stallman
Larry Ellison
Bill Gates
Eric Schmidt
It must be Hot if ...It must be Hot if ...
http://www.virtualizationconference.com/node/597208
http://gemsres.com/section/156/Cloud-Computing-307x100.jpg
http://res.sys-con.com/story/dec08/770227/CloudComputingBook_MichaelMiller.JPG
http://img.brajeshwar.com/cloud-computing-vote.jpg
Cloud Apps @ UWCloud Apps @ UW
64K UW users
60% of students ALREADY forward their UW email!60% of students ALREADY forward their UW email!
PremisesPremises
• Cloud computing is a big deal
• UW should encourage use of cloud services, consistent with compliance obligations
• Compliance risk is reduced via partner contracts
• A dual-vendor strategy is appropriate for UW
• Including faculty, staff and studentsmaximizes collaboration potential
Cloud Partnership MotivationsCloud Partnership Motivations
• This is where our community is (or will be)!
• Enhance the cloud services
• Improve regulatory compliance
• Eventual reallocation of IT resources
IT Goal: info access & collaboration, any time, place, device → Cloud computing supports this goal
http://blogs.msdn.com/blogfiles/stevecla01/WindowsLiveWriter/MicrosoftGoogleandCloudWars_ACE7/03cloud_xlarge1_thumb.jpg
A Tale of Two Clouds A Tale of Two Clouds (for SaaS)(for SaaS)
-One size does not fit all-One size does not fit all -We want both partners to succeed-We want both partners to succeed
ProgressProgress
• MS and Google pilots successfully completed
• Campus launch to students and alums on 9/28/09
• CSE launch ...
• Planning for 2010 phase-out of student UA svcs (Per STF Committee funding decision)
LessonsLessons• Free services are not free
– Moving targets, startup problems, service culture– Cloud Conundrum: Integration adds value & cost
• Collaboration Barriers– Multiple account madness– Interoperability
• Pushback– Students: “Where's the beef” (vs. existing options)– Faculty: privacy, security, data ownership/mining
• Help desk load: OK so far (no forced migrations yet)
2010 Plans2010 Plans
• Cloud Service Enhancement– SSO for Outlook Live– Microsoft BPOS (Dedicated version!)– Group management features– Improved calendar interoperability
• On-Premise Service Retirement– Student UA services (at least email)– Central Exchange/Sharepoint services
• Progress gated by– Service maturity– Migration and support costs
Impact on UA ServicesImpact on UA Services
• Student Tech Fee Committee decision– UA services for students have been de-funded– Thus, they will migrate to cloud soon...
• Email– No new student Deskmail accounts as of Jan 2010– Migrate existing student accounts later in 2010– Students may continue to use consumer accts
or MS and Google partner accts
• Web publishing, etc– Roadmap will be developed during Fall quarter
RisksRisks
• User Concerns– Service maturity– Privacy– Interoperability
• Institution Concerns– Operational risk– Financial risk– Compliance risk
http://www.loc.gov/exhibits/bobhope/images/vcvg20.jpg
Interoperability Interoperability example: the calendaring problemexample: the calendaring problem
Outlook/ExchangeUser IT
Staff
GoogleCalendar
User
Institutional RisksInstitutional Risks
• Operational (service or business failures)• Individuals have biggest stake here for now
• Financial (surprise support or integration costs)• High-touch support model could kill future savings
• Compliance (failure → liability cost)• Primarily unauthorized disclosure of sens. Info• Limited forensics ability → notification cost• Ability to respond to legal requests for data
NB: 1) these kinds of business risks are uninsured 2) departments assume $$ liability for failure to comply w/UW policies 3) data guidelines need to cover all cases, not just cloud computing
Risk MitigationRisk Mitigationcompared with status-quocompared with status-quo
Contract terms added
Data security guidelines to define appropriate use
Partner contracts provide for UW account control
Inability to comply with FERPA
Disclosure of confidential data
Inability to respond to eDiscovery request
Cloud use is soaring despite concerns
The cloud enables more collaboration
So we need to enable the cloud...