IASA Denver, Feb 2015
Selecting a Cloud Model
2Wayne AndersonCertified IT Architect – Professional (July 2014)
Avanade
IASA Denver, February 2015 by Wayne Anderson, CITA-P
Service Management Architect
Working in IT for more than 14 years, including a stint as a contractor at IBM Global Services. Joined Avanade in 2006, currently a group manager with our global managed services business.
About
Able to leap proposals in a single bound, known to dive into big blocks of ugly text and make sense of the whole thing. Also certified as a Holistic Information Security Practitioner.
Superpowers
[email protected]@wynweb.net
@NoCO_Architect
3DisclaimerIn Short: This guy is speaking as an individual professional.
IASA Denver, February 2015 by Wayne Anderson, CITA-P
While Avanade certainly supports IASA, the content of this presentation does not represent the official position of Avanade, either on the industry or towards any particular company. The content of this presentation should be seen as an informational resource, shared for the purpose of general industry discussion.
Not speaking for an employer.
Avanade, and many other organizations, are available to support organizations that are interested in making the transition to the cloud. The information presented in this discussion is not part of a paid engagement and should not substitute for getting customized professional advice.
This information is made available as a free resource, creates no professional relationship or duty, and any risk in applying data acquired for any particular business is entirely the risk of that business or professional.
No Warranty.
1 Timeline
2 NIST CloudMore than Tech
Organization
The Model
IASA Denver, February 2015 by Wayne Anderson, CITA-P
Brief AgendaSelecting a Cloud Model
Coffee break after!
3
4
5
TIMELINE
IASA Denver, February 2015 by Wayne Anderson, CITA-P
History Counts
6
IASA Denver, February 2015 by Wayne Anderson, CITA-P
UPS AND DOWNSLearning from Gartner’s 2015 CIO Agenda summary:
18% 26%Cloud First
Gain in organizational CIOs indicating Cloud or Infrastructure as a top organizational priority, 2015 vs 2014.
Not Quite.CIOs are indicating “digital” and “security” are no longer “bolt on” initiatives!
75% of CIOs indicated a plan to change their leadership style as part of the change in the landscape!
Without Marketing or
Security?Decrease in same CIOs ranking security or marketing top of list.
To learn more, visit gartner.com/cioagenda
7
NIST800-145
Financial Analysis
Risk Management Framework
Reference Architectur
e
Security and Privacy for Cloud FIS
State Department
ITAR
IASA Denver, February 2015 by Wayne Anderson, CITA-P
State of StandardizationOrganizations have Strong Foundational Guidance
500-299
800-174800-173
8
NIST800-145
Financial Analysis
Risk Management Framework
Reference Architectur
e
Security and Privacy for Cloud FIS
State Department
ITAR
IASA Denver, February 2015 by Wayne Anderson, CITA-P
State of StandardizationOrganizations have Strong Foundational Guidance
500-299
800-174800-173
Open Group:Cloud Computing for Business
IRM Cloud Computing SymposiumDTAG Cloud Computing Working Group
FedRAMPCloud.cio.gov
ISO 27001/27002NIST CSRC RMFUS NSTIC
9
NIST Cloud
IASA Denver, February 2015 by Wayne Anderson, CITA-P
There *IS* A Standard
10
I buy well-defined pieces of stuff that I connect to use how I
need to, for my business.
IaaSI have to change my code to
use stuff I buy, the underpinnings of which are
hidden from me.
PaaSI buy a volume of business
objects. How I get to that stuff is someone else’s problem.
SaaS
IASA Denver, February 2015 by Wayne Anderson, CITA-P
Cloud ModelsNIST 800-145: 2011
11
1Resource PoolingDeveloped pools of what? Disk? Transaction capability?
2On-Demand
3Rapid Elasticity
4MeasuredMeasured by what?
IASA Denver, February 2015 by Wayne Anderson, CITA-P
Linking the Attributes to ModelsNOT NIST’s Attributes! These are YOUR business’ platform attributes!
1 2 3 4The 5th attribute in 800-145 is broad network access. This is assumed, it’s typically not an attribute which will drive model choice.
12
Organization
IASA Denver, February 2015 by Wayne Anderson, CITA-P
Cloud is not a bolt-on
IASA Denver, February 2015 by Wayne Anderson, CITA-P
13Cloud PyramidCloud Security and Design Readiness
Cont
rol
Platform
Capability
1 2
3
How granular does the organization’s understanding and control of the resource need to be? Compliance and/or app architecture may drive higher levels of control needed, reducing the number of elements that are “hidden”.
ControlWhat level of skills and
experiences are available in the organization to utilize cloud services? Do skills
directly translate? Can team members lower cost for the organization successfully?
Capability
14
IASA Denver, February 2015 by Wayne Anderson, CITA-P
Financial TargetsWhere is the organization see the most value in spend? Where in the “stack”
can the business value case most easily be linked?
IaaS PaaS SaaS
Headcount
Application Portfolio
Infrastructure Costs
15
The Models
IASA Denver, February 2015 by Wayne Anderson, CITA-P
Requirements Drive Acquisition
16
IgnitionWhat you buy is what you get.
Software is already organized, with objects and security
models offering limited customization. Less
configurability and control in how the security and
operations are provided at “lower” levels of the service.
Best for organizations which need to completely remove entire legacy applications and associated skills. Also a great fit for organizations which need nearly “instant on” capabilities – such as the small/medium business or marketing and similar business capabilities.
IASA Denver, February 2015 by Wayne Anderson, CITA-P
Software as a Service“Insert Coin” … or at least nearly so.
17
Tapping into the Ecosystem
Application FocusedCapability is exposed to be
integrated into the app space. Typically highly flexible in the
capability portfolio. Infrastructure implementation
of capabilities may not be fully configurable. Organizations
with strong app dev capabilities or investment.
Great way to invest in a cloud provider that is driving development in a space important to your business. E.g. Amazon or Microsoft. Key drivers are innovation in neural / analytic capabilities driving new business opportunities.
IASA Denver, February 2015 by Wayne Anderson, CITA-P
Platform as a ServiceDid you change your application to use the service?
18
Low Bar to Entry
Maximum ControlIt’s your infrastructure, on
your terms, operated without outsized up front capital
investments.
Lack skills? Its your infrastructure on your terms,
relying on your people to make effective use of it.
Many existing enterprise applications can be reviewed for management in a different way. Is there efficiency to be gained? Can costs be eliminated by using a third party? What about highly flexible demand workloads? Seasonal applications? Dev/test infrastructures?
IASA Denver, February 2015 by Wayne Anderson, CITA-P
Infrastructure CapabilityMaking innovative ideas… from the ground up.
19
@NoCo_Architectlinkedin.com/in/[email protected]
IASA Denver, February 2015 by Wayne Anderson, CITA-P
THANK YOU!Feel free to ask questions!
Top Related