Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Peter Nikoletatos – Chief Information Officer

Towards the private cloud, and beyond: understanding and mitigating risks

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Curtin University: Who are we?

Curtin University is Western Australia's largest university. Around 47,000 students attend a total of 14 Curtin locations, including campuses in Sydney, Singapore and Sarawak, East Malaysia.

VisionTo be an international leader shaping the future through our graduates and research, and positioned among the top 20 universities in Asia by 2020.

MissionCurtin is committed to innovation and excellence in teaching and research, for the benefit of our students and the wider community.

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

12 Services as outlined in the Service Level Expectations AgreementCITS supports an underlying

Project Management culture

Holistic view

Infrastructure; Platform; Software;as a service

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Strategy

determines

Structure

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Above the campus; pedagogical uplift

Implementing next generation learning spaces will change the way we deliver our programs and the way we interact with students and research communities.

Incorporating non-traditional IT delivery models such as cloud based services raises potential security breaches resulting in a focused risk awareness due-diligence.

This has required the need to develop profiles for cloud-based use cases, based on information classification that specifies what types of data are appropriate for off-premises models.

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Next (Net) Generation students

Net Gen students not only use technology heavily, they also trust it implicitly.

Their belief that anything accessible online should be free leads many to leverage from P2P downloading or share music, movies, or software they have not purchased.

They approach computers and other technologies as environments for communication, socialisation, learning, and game playing; and not as machines to be programmed.

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Planning Principles

Implement a consolidation strategy that brings opportunities forstandardization through greater emphasis on ICT de-duplication.

Involve vested parties in selecting the right option for transition and for perceived future needs so that they commit to the proposed level of investment in IT.

Move away from managing assets to managing information and people. Agility and Flexibility remain key.

Decide on sourcing arrangements that provide the right mix of increasing head count through FTEs versus using contractors/consultants and external service providers.

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Look ever forward: CITS 2012 Vision

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Technology Trigger

Peak ofInflated Expectations

Trough of Disillusionment Slope of Enlightenment Plateau of

Productivity

time

expectations

Years to mainstream adoption:less than 2 years 2 to 5 years 5 to 10 years more than 10 years

obsoletebefore plateau

DRAFT MODEL OF CURTIN ICT HYPE CYCLE (BASED ON GARTNER MODEL)

Desktop Virtualization (HVD) (Virtual Desktop)

Server VirtualizationCloud Computing/SaaS Integration

PC Hypervisors

Enterprise Portals (OASIS)Semantic Web Data De-duplication

Cloud Storage

Business Intelligence Platforms

Digital Preservation of Research Data

Lecture Capture and Retrieval Tools (eTeaching)Unified Communications and Collaboration

Cloud-Based Recovery Services

Cloud Computing

Virtual Worlds — HEd

Cloud E-Mail for Higher Education

802.11n

Distributed Social WebVideo Telepresence

Green ITCloud-Based E-Mail Services (Staff E-Mail)

CurtinMobile

eResearch Support

Desktop Videoconferencing

EduROAM

Flow (EDRM / ECMS)

iPortfolio

BI - Dashboards

Evaluate

Microsoft .NET Application Server

CurtinOne

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

In 2007, 1 in 11,000 web pageswas accessed online from a mobile device.

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

In May 2010, it was 1 in 54.

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

• The impact of consumer based technologies is a reflection of the aspirations of a generation, the need for participation, the desire to contribute and the sense of being part of a community.

Impact of consumerisation

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Strategic Vendors

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Live@edu for students; BPOS for staff underway

Office 365

Microsoft Surface bringing people together to think and share differently

Microsoft SharePoint underway

Microsoft OCS deployment

Microsoft Azure providing PaaS

Desktop 2010 based on Win7 O/S

CRM Dynamics

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Virtual Computing Environment Coalition

The Virtual Computing Environment (VCE) coalition, formed by CISCO, EMC and VMware, is an unprecedented collaboration between three industry leaders to accelerate the journey to pervasive virtualisation and private cloud with technology innovation, business partnership, venture investments and partner ecosystem leverage.

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Case Study: Curtin University

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Future Technology Learning Space

School of Information Systems Lab

Emerging technology experience

Focus on Touch – Surface & Desktop

Short life cycle replacement

Next Generation Learning Space: Paperless?

Engaging the next cohort of ICT students!

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Still to Come

Building 108Internal Learning Space (room 223)

Building 303Student Self-Learning Area

Building 215 24 hour Learning

2011Building 402 Student Self-Learning Areas

Building 407Student Self-Learning Areas

2012Building 106 Fully enclosed courtyard

Building 407

2013

Elsewhere Universities are targeting 1 learning seat/5 EFTSL - @Curtin today we have 1/20 EFTSL

Building 209Building 216

Building 106

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Why do cars have brakes?

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Why do cars have brakes?

To make themgo faster

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Governance, Risk Management and Compliance Are Inseparable

Governance — the process by which policies are set and decision making is executed.

Risk Management — the process for ensuring that important business processes and behaviours remain within appropriate.

Compliance — the process of adherence to policies. Policies can be derived from internal directives, procedures and requirements, or external laws, regulations, Service Agreements.

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Data Security

Poor data management increases cost

Data management practices affect agility

Increased risks in relation to maintaining secure storage and protection of sensitive data off-site.

International jurisdictions/sovereignty for off-shore data storage

Quality of service requirements for customers through service level agreements.

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

ICT Policies, ie. “appropriate use”

An organisation that has not clearly confirmed that its employees are aware of its security policies, and are willing and able to follow them, has not created a security-aware culture

Create and regularly update your security-related policy documents as the environment is constantly changing; eg social networks

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Impact of the Social Networks

Requirement for strategies for moving to an open environment that will uphold all privacy, legal, regulatory and security issues.

Social networks are becoming well-established communication tools for students, staff and alumni

Consequences of a world where the institution is less involved in the infrastructure for delivery of education. ie, Infrastructure as a Service; the 4th Utility.

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

ConclusionMap cloud architecture to enterprise by performing an information inventory to assess which data assets can be hosted in external clouds

Focus remains on ICT de-duplication. Agility and Flexibility; key skills to retain

Vendor Partnering and co-sourcing are strategic options

Support for Researchers and Teaching is not an option

Next Generation expectations are way different; be prepared

Enhance the student experience; they get it!

Strategy determines Structure

Curtin University is a trademark of Curtin University of TechnologyCRICOS Provider Code 00301J

Peter Nikoletatos, Chief Information Officer

cio@curtin.edu.au

@CurtinCIOReferences: Gartner, ECAR, EDUCAUSE, CAUDIT Inc, Microsoft, Apple, i-Luminate Conference (tcgAdvisors)