06 Netiq u Cloud

7/30/2019 06 Netiq u Cloud

1/61

Cloud Computing

Erin QuillSME

[email protected]


2/61

2011 NetIQ Corporation. All rights reserved.2

Situational Fluency

Successful conversations with existing and potentialcustomers are founded on your ability to showunderstanding of the world they live in, the

business issues they face, and the ability to speaktheir language. This enablement session focuses on

how to ensure your conversations on Cloud Computingare credible.

15% of Business Leaders indicate that conversationsthey have with sales reps are of value to them.

Our goal is to enable Customer-centric conversations,conversations focused ontheirissues and priorities


3/61

What is the Cloud?

3


4/61


Cloud Description

Cloud Computing is: On-demand access to a shared pool

of computing resources or services thatcan be rapidly provisioned and released

Characteristics of Cloud Computing: On-demand self-service

Broad network access

Resource pooling

Rapid elasticity

Measured resource usage

(seehttp://csrc.nist.gov/publications/nistpubs/800-145/SP800-145.pdf)
http://csrc.nist.gov/publications/nistpubs/800-145/SP800-145.pdfhttp://csrc.nist.gov/publications/nistpubs/800-145/SP800-145.pdfhttp://csrc.nist.gov/publications/nistpubs/800-145/SP800-145.pdfhttp://csrc.nist.gov/publications/nistpubs/800-145/SP800-145.pdfhttp://csrc.nist.gov/publications/nistpubs/800-145/SP800-145.pdfhttp://csrc.nist.gov/publications/nistpubs/800-145/SP800-145.pdf


5/61


Cloud Computing Types

Private Hybrid Public


6/61


Cloud Computing Examples

Software as a Service (SaaS) Salesforce.com

Google Apps (Gmail, Google Docs, etc.)

Platform as a Service (PaaS)

Microsoft Azure Force.com

Infrastructure as a Service (IaaS) Amazon EC2, S3

Rackspace VMware (vCloud Express or private clouds with vSphere)


7/61

Why is the Cloud a Big Deal?

7


8/61 2012 NetIQ Corporation. All rights reserved.8

Why compute in the Cloud?

Challenges with traditional IT: Difficult to provision just the right

amount of computing resources

IT takes too long to provision resources

Lack of transparency into costs of IT services

Cost prohibitive access to IT services

Benefits of Cloud Computing:

Elasticity (scalability up and down)

Pay only for what you use, and know the total cost up-front Provider takes care of infrastructure and application management

Access information and services from multiple devices orplatforms, anywhere (as long as Internet is available)



A conversation before Cloud Computing

BusinessExecutive

ITManager

We need faster

rollout of servicesThatll cost you

How much?I cant say

Isnt there unused

capacity on systemswe paid for?

Possibly, but itsall part of a virtualpool of servers

Id rather pay byuser

Not goingto happen



A conversation after Cloud Computing

BusinessExecutive

CloudProvider

We need faster

rollout of servicesIs next week bad?

How much?$50/user/month

What if I have to

expand or shrink theuser base

No problem

I love youNot goingto happen



Base: 1,900 to 2,438 software decision-makers

2009

(Actual)

2010

(Actual)

2011

(Actual)

2012

(Planning to

implement in the next

12 months)

2013+

(Planning to

implement in a year or

more)IaaS 9% 14% 17% 29% 41%

PaaS 5% 8% 11% 19% 32%

SaaS 21% 25% 30% 45% 60%

0%

10%

20%

30%

40%

50%

60%

By the end of 2012, 45% of all companieswill be using SaaS (60% in 2013!).

SaaS

IaaS

PaaS

Cloud adoption accelerates in 2012What are your firms plans to adopt the following software technologies?

(Respondents who selected implementing, not expanding, expanding/upgrading implementation,planning to implement in the next 12 months, or planning to implement in a year or more)

Source: Forrester Forrsights Software Survey, Q4 2009, 2010, 2011



Base: 910 software decision-makers in North America and Europe

Using your best estimate, how many different software-as-a-service (SaaS)...?

2.1

2.6

2.8

4.5

8.4

10.8

3.3

4.5

4.7

7.2

18.2

18.0

Small Business

Small-Medium Business

Medium Business

Small Enterprise

Medium Enterprise

Large Enterprise

is your firm likely to use 12 months from now does your firm use today

Source: Forrsights Software Survey, Q4 2011, mean for each businesssize presented here

Most aggressive users of SaaS are enterprises



Control Flexibility

IT wants control, business wants flexibilityThe cloud is disrupting the balance of power



Left to IT leaders, apps would stay in-house

Today (avg.)Four years from

now (avg.)

On physical servers not virtualized operated in our datacenters 50.1% 23.6%

On relatively static virtual servers in our data centers 31.4% 32.3%

On a dynamic private cloud pool of virtual servers in ourdata centers 8.4% 25.9%

Hosted private cloud IaaS, where our virtual servers areisolated from other customers 1.4% 5.9%

Public cloud IaaS, where virtual servers are on serversshared with other customers 0.8% 2.5%

Traditional hosting offering, virtual or physical, that is notcloud IaaS 4.3% 4.8%

Outsourced service provider 3.6% 5.1%

Today, what percentage of your firms total x86 server OS instances are in each of the following categories?In four years, what percentage of your firms total x86 server OS instances will be in each of the following categories?

Base: 247 technology decision-makers at North American enterprises (5000+ employees) using x86 servers

Source: Forrsights Hardware Survey, Q3 2011



Base: 804 North American and European IT decision makers at firms which are using x86 server virtualization

Source: Forrsights Hardware Survey, Q3 2011

What are your firms plans to implement the following server virtualization management

capabilities?

4%

5%

8%

10%

21%

27%

37%

2%

3%

6%

8%

14%

23%

24%

8%

12%

11%

12%

10%

13%

10%

Chargeback to business user based on actual virtualmachine usage in a period

Self-service portal for end users such as developersto deploy, manage, and remove virtual machines

Policy-based automation of virtual machine allocationfor routine adjustments, without human review

Resource tracking of virtual machine usage byaccount to track which users drive usage

Booting all virtual machines from networked storage

Use live migration of virtual machines as a standard

practice

Implement a "virtual first" policy for new serverdeployments

Expanding/ upgrading implementation Implemented, not expanding

Planning to implement in the next 12 months

Cloud

requirements

Few Firms Are Ready To Operate A Private Cloud



We have no formal [cloud]

strategy/approachWe see unsanctioned [cloud]

buying by business outside ITWe are executing on a formal

[cloud] migration plan

Base: 1,031 IT services decision-makers

8%

14%

2011 2012

17%

9%

2011 2012

44%

24%

2011 2012

45% 75% 47%

IT wants to take charge of procurement of cloudservices IT as a Service Broker

Source: Forrsights Software Survey, Q3 2011

Today, which of the following describes your firms strategy/approach around the use of

software-, infrastructure-, or business-process-as-a-service offerings?

By the end of 2012,which of the following will describe your firms strategy/approach aroundthe use of public software-, infrastructure-, or business-process-as-a-service offerings?


17/61

so why are they struggling toimplement?

1


18/61


Data Protection Concerns

Top cloud providers are typically conscientious atsecuring servers and networks

Companies want to protect information, not servers

Public cloud services are available anywhere, anddata is outside the firewall broadening access

Lack of access to log data prevents visibility intoattacks

The infamous Twitter Hack was made possible byuse of Google Apps

(refhttp://www.csoonline.com/article/500344/winkler-the-real-problems-with-cloud-computing?page=1)
http://www.csoonline.com/article/500344/winkler-the-real-problems-with-cloud-computing?page=1http://www.csoonline.com/article/500344/winkler-the-real-problems-with-cloud-computing?page=1http://www.csoonline.com/article/500344/winkler-the-real-problems-with-cloud-computing?page=1http://www.csoonline.com/article/500344/winkler-the-real-problems-with-cloud-computing?page=1http://www.csoonline.com/article/500344/winkler-the-real-problems-with-cloud-computing?page=1http://www.csoonline.com/article/500344/winkler-the-real-problems-with-cloud-computing?page=1http://www.csoonline.com/article/500344/winkler-the-real-problems-with-cloud-computing?page=1http://www.csoonline.com/article/500344/winkler-the-real-problems-with-cloud-computing?page=1http://www.csoonline.com/article/500344/winkler-the-real-problems-with-cloud-computing?page=1http://www.csoonline.com/article/500344/winkler-the-real-problems-with-cloud-computing?page=1http://www.csoonline.com/article/500344/winkler-the-real-problems-with-cloud-computing?page=1http://www.csoonline.com/article/500344/winkler-the-real-problems-with-cloud-computing?page=1http://www.csoonline.com/article/500344/winkler-the-real-problems-with-cloud-computing?page=1http://www.csoonline.com/article/500344/winkler-the-real-problems-with-cloud-computing?page=1http://www.csoonline.com/article/500344/winkler-the-real-problems-with-cloud-computing?page=1


19/61


Regulatory Violations

National data privacy laws in Europe require customerdata reside in country of origin

For example, a U.S.-based Cloud Service Providerthat controls data in Germany must comply withGerman data protection laws, European Union dataprotection and notification statutes, and USA Patriot

Act requirements

(refhttp://www.journalofaccountancy.com/News/20125922.htm)
http://www.journalofaccountancy.com/News/20125922.htmhttp://www.journalofaccountancy.com/News/20125922.htm


20/61


Google Docs September DisasterThere came a day when Google Docs sufferedapproximately an hour outage due to which work interms of daily tasks came to a standstill.This proved to be a major setback for Managed CloudProvider in terms of monetary losses company sufferedas well as their reputation in the market.

Google DocsAgain!Yet another cloud outage erupted with a bang whenGoogle Docs collapsed in the Google HQ.

Bad Weather Conditions can Result in CloudDisasterIn the month of August that both Microsoft and

Amazons cloud data centers had blown off by athunder lighting strike. Both the cloud servers collapsedbecause of it, which led big and small organizations tosuffer hugely. Companies not only suffered monetarylosses, but also had hard time in recovering.

Amazon Elastic Cloud Compute OutageYet another cloud disaster occurred when Amazon EC2or Elastic Cloud Compute hit the East coast of the US

making big time players like the Reddit, Hootsuite,Quora and Sqaurefoot suffer tremendously. To addmore to its numbers, approximately 170 SMBs alsosuffered a major setback as they found it extremelytough to run their businesses during an 8 hourdowntime that Amazon EC2 cloud showed to them.

Source: http://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.html

DowntimeAre You Prepared?

Microsofts Office 365 Cloud DisasterRecently, in the month of August and September,Microsoft launched its Office 365 cloud productivitysuite, but just few months after its launch media brokethe news of its collapse that shattered hopes ofMicrosoft applications users. The company alsoexperienced a global outage with DNS servers failing

(refhttp://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/)
http://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.computerworlduk.com/news/cloud-computing/3364982/cloud-downtime-has-cost-more-than-45-million-since-2007/http://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.htmlhttp://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.html


21/61


Access Control

SaaS services can have inconsistent and non-compliant processes for controlling account access

For example, if an employee leaves, who checks toensure their account is not left enabled for weeks,

allowing access to sensitive information that can bemisused?

Single-sign-on is sometimes used to get around thisproblem, but often passwords are sent to the cloud

provider instead of a token, meaning that a maliciousactor who has access to the cloud providers data nowhas access to this users services in all othercorporate accounts as well


22/61


Cost Containment

38% of companies using or evaluating the cloud(IaaS) are concerned about runaway costs if a servicescales up unintentionally, by error or mismanagement

(refInformation WeekCloud ROI Survey, Nov 2011)

Costs can also rise if the flexibility of cloudencourages faster service rollout, particularly forincreased headcount to support

(refhttp://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921)
http://reports.informationweek.com/abstract/5/8895/Cloud-Computing/does-the-cloud-pay-off*.htmlhttp://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://reports.informationweek.com/abstract/5/8895/Cloud-Computing/does-the-cloud-pay-off*.html


23/61


Silos Multiply

Organizations that use cloud computing typicallycreate new items that become silos of data, services,and processes that are difficult to integrate into on-premise systems

(refhttp://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921)
http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921http://www.infoworld.com/d/cloud-computing/3-issues-the-cloud-cant-solve-you-190921


24/61


Compounding Problems

IT is dealing with the old and new Legacy systemsmust be maintained, cloud applications must becontained, all without additional resources

Accounting for cloud spend Are we tracking all ofour cloud purchases? Do we need all of our seats? Allof our cloud computing capacity?

Duplication of efforts With multiple business units

making cloud purchases, there are overlappingproviders


25/61


Why You Need to Understand theTopic of Cloud

Cloud is a disruptive technology to the way IT servicesare being delivered

IT is losing control of their traditional monopoly

By next year, 60% of all companies will be using cloud services

The rush to cloud is compromising security, availability and canhave hidden costs

Your customers are struggling with how to addresscloud computing help them and become a trusted

advisor


26/61

Who to talk to

2


27/61


Market Segmentation by Size

The topic of Cloud is relevant to all industry verticals inevery size company. But benefits may vary:

Large Enterprise and Federal: the top benefit is agility - theability to more rapidly provision new IT services than ispossible with traditional internal IT processes

Mid-Market: the top benefit is efficiency - improved assetutilization due to the elastic nature of cloud computing

SMB: the top benefit is innovation - the ability to use ITservices internally and provide them to customers that would

otherwise be out of reach

Ask your customer if they agree with these assertions a healthy debate could uncover opportunity


28/61


Market Segmentation by Vertical:Federal Government

The cloud computing model can significantly help agenciesgrappling with the need to provide highly reliable, innovative servicesquickly despite resource constraints Vivek Kundra, U.S. CIO

An estimated $20 billion of the Federal Governments $80 billion inIT spending is a potential target for migration to cloud solutions

Case Study: The Defense Information Systems Agency (DISA) supports US and coalition

fighting forces.

To better meet their needs, DISA decided to deploy its own IaaS solution calledRapid Access Computing Environment (RACE)

Using traditional infrastructure, provisioning a dedicated server environmentrequired 3 to 6 weeks. With RACE, the time required to provision functional servicespace for users is now 24 hours.

For more details and case studies, see: http://www.cio.gov/documents/federal-cloud-computing-strategy.pdf
http://www.cio.gov/documents/federal-cloud-computing-strategy.pdfhttp://www.cio.gov/documents/federal-cloud-computing-strategy.pdfhttp://www.cio.gov/documents/federal-cloud-computing-strategy.pdfhttp://www.cio.gov/documents/federal-cloud-computing-strategy.pdfhttp://www.cio.gov/documents/federal-cloud-computing-strategy.pdfhttp://www.cio.gov/documents/federal-cloud-computing-strategy.pdfhttp://www.cio.gov/documents/federal-cloud-computing-strategy.pdfhttp://www.cio.gov/documents/federal-cloud-computing-strategy.pdfhttp://www.cio.gov/documents/federal-cloud-computing-strategy.pdf


29/61


Market Segmentation by Vertical:Healthcare

Cloud computing is an ideal solution for an industry thatprefers targeted services rather than big investments insunk costs for internal IT, but privacy issues remain.

Case Study:

Cook Childrens Healthcare System in Fort Worth, Texas ispursuing cloud-based electronic health records

The difference is theres no significant upfront investment withcloud. What I like about CareCloud is if theyre not working for

you, you can move on; you dont have a huge sunken cost, saysRyan Champlin, VP of Operations. The question is: who isgoing to produce better health for a given dollar? I bet my moneyits cloud.

http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/
http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/http://www.forbes.com/sites/zinamoukheiber/2012/06/11/can-cloud-computing-take-on-the-health-care-establishment/


30/61


Market Segmentation by Vertical:Financial

Some resistance to the cloud due to risks, but thebenefits can be had with private, hybrid and communityclouds, and banks like ING and Deutsche Bank arebuilding these

Case Study: ING Banks project involves building a large hybrid cloud that

combines features of public clouds and private data centers, oneit will open to other banks to use. The hybrid or shared ITinfrastructure will achieve the variable costs, scalability,

flexibility, and on-demand availability offered by public cloudcomputing in a way that addresses the security, compliance andperformance requirements banks adhere to in their internalclouds.

http://www.cloudave.com/16149/banking-sector-gets-more-comfortable-with-cloud/
http://www.cloudave.com/16149/banking-sector-gets-more-comfortable-with-cloud/http://www.cloudave.com/16149/banking-sector-gets-more-comfortable-with-cloud/http://www.cloudave.com/16149/banking-sector-gets-more-comfortable-with-cloud/http://www.cloudave.com/16149/banking-sector-gets-more-comfortable-with-cloud/http://www.cloudave.com/16149/banking-sector-gets-more-comfortable-with-cloud/http://www.cloudave.com/16149/banking-sector-gets-more-comfortable-with-cloud/http://www.cloudave.com/16149/banking-sector-gets-more-comfortable-with-cloud/http://www.cloudave.com/16149/banking-sector-gets-more-comfortable-with-cloud/http://www.cloudave.com/16149/banking-sector-gets-more-comfortable-with-cloud/http://www.cloudave.com/16149/banking-sector-gets-more-comfortable-with-cloud/http://www.cloudave.com/16149/banking-sector-gets-more-comfortable-with-cloud/http://www.cloudave.com/16149/banking-sector-gets-more-comfortable-with-cloud/http://www.cloudave.com/16149/banking-sector-gets-more-comfortable-with-cloud/http://www.cloudave.com/16149/banking-sector-gets-more-comfortable-with-cloud/


31/61


Market Segmentation by Vertical:Retail

Time to market and scalability (up and down) are criticalconcerns of companies selling to finicky consumers. Theinherent elasticity and agility of cloud computing iscompelling.

Case Study: WalMart selected SuccessFactors (an SAP company) for a 2.1M

seat SaaS HR Management platform

Drivers for selection included the scalability to deliver across

multiple geographies for large numbers of customers and theshortened timeframe for implementation vs. traditional IT

http://www.informationweek.com/news/global-cio/interviews/224700586
http://www.informationweek.com/news/global-cio/interviews/224700586http://www.informationweek.com/news/global-cio/interviews/224700586http://www.informationweek.com/news/global-cio/interviews/224700586http://www.informationweek.com/news/global-cio/interviews/224700586


32/61


Market Segmentation by Vertical:Manufacturing

This industry has applied information technology tosupply chain management a benefit of cloudcomputing is the opportunity to expand communicationbetween sales, suppliers and operations

Case Study:

Andersen Windows and Doors needed to populate SalesforceCRM with customer master data (Customer Care) as well assupplemental data from 4 other sources (Oracle, SQL Server,Flat File)

Used a cloud service from Informatica to integrate the data Now has external customer reporting from Salesforce and back

office systems available in the corporate Data Warehouse forone view across sales, operations and suppliers

http://www.informaticacloud.com/customers/106-andersen-windows.html
http://www.informaticacloud.com/customers/106-andersen-windows.htmlhttp://www.informaticacloud.com/customers/106-andersen-windows.htmlhttp://www.informaticacloud.com/customers/106-andersen-windows.htmlhttp://www.informaticacloud.com/customers/106-andersen-windows.htmlhttp://www.informaticacloud.com/customers/106-andersen-windows.htmlhttp://www.informaticacloud.com/customers/106-andersen-windows.html


33/61


Market Segmentation by Vertical:Service Providers

Most service providers are joining the cloud computinggold rush. They are well-positioned for this role, but likeinternal IT organizations, are threatened by cloudproviders competing for their business. So not only do

they have advantages, but they must adapt to stayrelevant.

Case Study:

NetIQ AppManager customer Terremark leveraged its market

leadership in IaaS offerings to acquisition by Verizon Business,itself an MSP customer of NetIQ AppManager


34/61

Business DiscoveryStarting the Conversation

3


35/61


Conversation Starters

What sort of cloud initiatives do you have this year?

Whats your primary driver for using cloud services?

What is driving your choice in using a private cloud? (if applicable)

How would you measure the success of your cloud initiative(s)?

Whats preventing you from achieving that success?

What risks have you had to consider when moving services to thecloud?

How are you provisioning/deprovisioning access to the cloud?

Does that apply to partners and customers?

Are users going to the cloud outside of your control?

How are you tracking compliance of access?

Do you know if your data in the cloud is secure?


36/61


Conversation Grabbers

Shadow IT the cloud services that the businessbuys directly, typically from SaaS providers, withoutany knowledge or involvement from IT

Living with a false sense of security the

presumption, usually of PaaS or IaaS providers, thatmore services for disaster recovery, security andcompliance are being provided than actually are

IT as a service broker the concept that IT can act

as a fulfillment house for services, whether providedby the IT organization or externally by cloud providers,for the purpose of ensuring security, compliance andservice levels


37/61

ITOM-Related Cloud Problems

3


38/61


Shadow IT

The cloud services that the business buys

directly, without knowledge or involvementfrom the IT organization

Circumvents the controls that minimize risks ofoutages and cost overruns

IT organizations can see this trend as both a threatand an opportunity to create competitive offerings withprivate clouds

Private clouds are more than virtualization -automation is needed for self-service provisioning,DR, securing, maintaining and billing for usage


39/61


Shadow IT Solution ComponentBuilding, Securing and Maintaining a Private Cloud

NetIQ Cloud Manager Self-service provisioning of

VMs and workloads

Standardize serviceofferings and SLAs

Manage capacity

Chargeback based onusage and service levels


40/61



Backup tovirtual machines

Incrementalreplication

PlateSpin Protect:Disaster Recovery solution for all server workloads.

Easy to testOne-click

failover

Virtualservers

Virtualhosts

Physicalservers Workload decoupled

from hardware


41/61



NetIQ Sentinel Security Information and

Event Management

Log Management

NetIQ SecureConfiguration Manager

Configuration assessmentand compliance reporting

NetIQ Change Guardian Real-time change

monitoring for criticalinformation


42/61



NetIQ AppManagerAuto-detect and deploy

monitoring for VirtualMachines & workloads inyour private cloud

NetIQ Operations Center

Understand theperformance of services,regardless of where they

are hosted


43/61


Downtime

Significant outages of popular cloudservices continue to make headlines

Organizations must be able toobjectively measure the performance

of public-cloud services Hold cloud service providers accountable

for service levels

Ensure users can perform their jobs


44/61


Downtime Solution ComponentObjectively Measure and Report Against Service Levels

NetIQ AppManagerActively performs user

transactions at regularintervals, collects data andescalates events

NetIQ Operations Center

Create dashboards ofservice performanceachievement so that

remediation can bepursued


45/61


Creating Competitive Cloud Services

Most service providers arejoining the cloud computing goldrush. They are well-positionedfor this role, but like internal ITorganizations, are threatened by

cloud providers competing fortheir business. They must adaptto stay relevant.

Service providers looking toevolve into Cloud service

providers must understand theexpectations from cloudbuyers for a fully-automatedexperience.

C ti C titi Cl d S i


46/61


Creating Competitive Cloud ServicesA powerful set of tools for service providers to get servicesdeployed quickly

NetIQ Cloud Manager Offer customers mobile-enabled

self-service provisioning andmanagement

NetIQ Access Manager

Offer Access as a Service

NetIQ Aegis

Automate simple or complex

processes by integratingmultiple tools


47/61

ITOM-Related Cloud Problems

4


48/61


Compliance in the Cloud

Organizations lack controls and cannot effectivelycertify and report on cloud services, let alone whohas access, to meet compliance standards

Security teams need a way to integrate themanagement of access and compliance reportingacross multiple cloud and traditional environments


49/61


Compliance in the Cloud SolutionsIntegrated Access Management and Compliance Reporting

NetIQ Access Manager Extends identity

management to includeSaaS offerings likeSalesForce.com, Google

Apps or Office365Allows the organization to

control the provisioningprocess, certify access andreport on system activity

SaaS

IT Department

Single sign-on andstrong authentication

Automated process

Full reporting

Corporate credentialssecured


50/61


Compliance in the Cloud - SolutionsIntegrated Access Management and Compliance Reporting


Report on servers inprivate clouds and in

traditional environments Maintain compliance

continuously through anautomated process thatproduces audit efficiencies

C t lli A t Cl d


51/61


Controlling Access to CloudServices and Data

Since most cloud services are provided as a subscription,there is a tendency to allow users to sign up directly,rather through IT controls

Lack of visibility and control of data may putorganizations at risk of regulatory violations and dataloss

If user management is not done properly, organizationsmay encounter large unanticipated fees and true-ups

Controlling Access to Cloud Services


52/61


Controlling Access to Cloud Servicesand Data - SolutionsReduce the Risk of Data Loss and Unexpected Costs

NetIQ Sentinel Integrated SIEM to identify

Cloud services accessedfrom the network, affordinggreater control and faster

response to an attack


Helps ensure consistent

policies are enforcedacross traditional, privatecloud and IaaSenvironments

Controlling Access to Cloud Services


53/61


Co t o g ccess to C oud Se cesand Data - SolutionsReduce the Risk of Data Loss and Unexpected Costs

NetIQ Access Manager Extends identity

management to includeSaaS offerings likeSalesForce.com, Google

Apps or Office365Allows the organization to

control the provisioningprocess, certify access andreport on system activity

SaaS

IT Department


Automated process

Full reporting



54/61


Increased Risk in Mixed Environments

Most IT organizations aresupporting both traditional andcloud-based services, with hybridpublic/private configurations

Mixing high and low value virtualmachines on the same hardwareintroduces risk that a breach toone can cascade to others

Users commonly use the same credentials for their

cloud hosted applications as they do for their internallyhosted applications, increasing the risk of a breach



55/61


- SolutionsReduce the Risk of Cascading Security Breaches


Automatically identifysystems in the private

cloud that are poorlyconfigured and vulnerableto attack



56/61


- SolutionsReduce the Risk of Cascading Security Breaches

NetIQ Access Manager

Extends identitymanagement to includeSaaS offerings likeSalesForce.com, Google

Apps or Office365 Extend single sign-on

experience to cloud hostedapplications, makingaccess more convenient for

users and eliminating theneed for users to savepasswords in anunprotected format

SaaS

IT Department


Automated process

Full reporting



57/61

Summary

Why You Should Care

5

Why You Need to Understand the


58/61


Why You Need to Understand theTopic of Cloud

Cloud is a disruptive technology to the way IT servicesare being delivered

Business and government organizations of all sizes andverticals are adopting cloud computing, although for multiplereasons

Leverage grabbers such as Shadow IT Living with a falsesense of security and IT as a service broker to engage inconversations

Your customers are struggling with how to address

cloud computing help them and become a trustedadvisor


59/61


Thank you.

Questions?


60/61


61/61

This document could include technical inaccuracies or typographical errors. Changes areperiodically made to the information herein. These changes may be incorporated in neweditions of this document. NetIQ Corporation may make improvements in or changes to thesoftware described in this document at any time.

Copyright 2012 NetIQ Corporation. All rights reserved.

ActiveAudit, ActiveView, Aegis, AppManager, Change Administrator, Change Guardian, Compliance Suite, thecube logo design, Directory and Resource Administrator, Directory Security Administrator, Domain Migration

Administrator, Exchange Administrator, File Security Administrator, Group Policy Administrator, Group PolicyGuardian, Group Policy Suite, IntelliPolicy, Knowledge Scripts, NetConnect, NetIQ, the NetIQ logo, PSAudit,PSDetect, PSPasswordManager, PSSecure, Secure Configuration Manager, Security Administration Suite,

Security Manager, Server Consolidator, VigilEnt, and Vivinet are trademarks or registered trademarks of NetIQCorporation or its subsidiaries in the United States and other countries.

06 Netiq u Cloud

Documents

Transcript of 06 Netiq u Cloud