This presentation discusses moving enterprise IT to public cloud. It notes that enterprise IT organizations face complex environments, growing costs, and lack of resources. The cloud looks like an option to help address these issues and generate business advantage. While there are challenges with cloud adoption related to security, control, and trust, the presentation argues that cloud providers may offer greater availability, security, and efficiency than traditional IT environments through their large scale operations. It advocates a hybrid approach for enterprises, moving commodity services to public cloud while using private cloud for high value services and legacy systems, with a goal of saying goodbye to legacy over time.
2. We (the end-user) want information (not data) and communication;
anytime – anywhere
(and more and more: any device)
2
3. Lots of enterprise IT organizations are facing the same problems:
Really complex environment
Growing IT cost
Lack of resources (people and money)
IT has been on a collision course for some time now… and we are
hitting the wall. Most of the IT budget is used for maintaining what we
have and not for new services and innovation.
Enterprise IT need the change… and need to change… to survive in to
the future and generate a business advantage again.
3
4. Cloud looks like an option.
Look at the way the big cloud providing the services -> benefit and
option 1 (public cloud).
But also at the way they build the cloud environment. Lots to be
learned from them. They operate at a large scale with a more efficient
and agile operation. -> benefit and option 2 (private cloud).
4
5. Where is the real value for the business ?
Its in the upper layers. Going up the IT stack gets you closer to the
business value
The lower layers have less value and are turning in to commodity IT;
Does an internal discussion on server box A v.s. server box B really
provide you with the competitive edge ?
Storage and compute is going commodity, have some else deal with it
and focus op the higher layers with challenges like big-data.
5
6. Cloud definition; many available. Cloud definition is not really relevant
because its still evolving.
Just choose one for the sake of discussion.
6
7. End-users and the business are getting more tech savvy.
Technology is getting more commodity and easy to use (like iPad)
So end-users start using own IT for work. This is pushed by the IT
department: long delivery time, failure to deliver, say ‘no’ al the time.
Example: Email quota enforced on the end-user leads to the user
moving the email to Hotmail or Gmail.
With mobile internet access, the office worker also has his own access
to the internet and the tools available.
This is also a generation issue: people up to age 35 will use tools like
Twitter,Linkedin,Dropbox,Ping,etc.. at the office.
IT should work with these people and not work against. This will force
the end-users to shadow-IT.
See 'The New Normal' explained by Peter Hinssen -
http://www.youtube.com/watch?v=3ugBwy343Ak
7
8. Lots of challenges with cloud adoption.
We all see and know the advantages.
There seems to be a lot of barriers to enter the cloud. (security, law,
maturity)
All the barriers come down to trust and control.
Internal IT people and traditional vendors are throwing lots of FUD
around on the cloud subject.
Check the real facts !
8
9. Does the law prevent me from going to public cloud:
Question 1: who is the data owner? – Its the business. Not IT! Lots of
IT people are talking about the law but don't know the details. Most EU
laws just tell you the data owner needs to be ‘ a responsible father’
Question2: what is the data and meta data? – looking at privacy
regulation: if you store data separate of the privacy data, you are
compliant. Example: separate data and time meta data from the photo
taken. Other option is to split data on multiple cloud platforms/vendors
so the data in it self doesn’t mean anything; it only has value
combined.
The EU is working on new law and regulation to support cloud adoption
(Neelie Kroes)
9
10. 1. Make sure you have good internal data classification.
2. Don’t work from a ridged security model, but work risk analysis
driven. Support the business and advise. (and saying ‘No’ is not an
advise. ‘Yes, but…’ is an advise.)
3. Break down traditional walls. Start looking at Jericho concepts.
4. Who is more secure? Your own datacenter or the cloud providers ?
Most of them are at least more audited. Most enterprise IT
environments do not have SAS70+PCI+ISO27001+…
Look at things like the Cloud Security Alliance.
https://cloudsecurityalliance.org/
10
11. Is your traditional IT environment more available then the cloud
provider?
Building high available IT in a traditional IT environment is really hard
and complex.
Building a TIER 4 datacenter gets you, in the end, a lower availability
then building 2 TIER 1 geo-datacenters.
Most cloud providers have lots of datacenters around the world.
Cloud providers are putting lots of cash in this development. They are
becoming the ‘Formula 1’ of IT.
The availability perception problem:
“The number of US highway deaths in a typical six month period –
around 21,000 – roughly equals all commercial jet fatalities worldwide
since the dawn of jet aviation over four decades ago. In fact, fewer
people have died in commercial airplane accidents in America over the
past 60 years than are killed in US automobile accidents in any typical
three-month time period. (Source : Boeing Corporation)”
11
12. It’s very infrequent to hear of a road crash (the traditional data center) make
national news, but in the event of a commercial jet crash (the cloud) then it’s
guaranteed to make headlines. Perhaps this is simply due to the number of
people affected on board the airliner at a single time during the incident ?
11
13. When using the cloud:
You need to adapt too the reference architecture of a cloud provider.
Just trowing your traditional IT system ‘ in to the cloud’ will not work.
Following the reference architecture also ensures you will survice an
outage like with AWS; did not affect Netflix. They understud the
architecture.
12
14. Lots of IT people will feel treated by the cloud development.
This is not true:
1. Working in IT is about Change. Change is the only constant.
2. In the next few years lots of IT people will retire. Will be hard to find
good IT people in the next 5-10 years
3. Commoditisation of an activity can result in increased consumption
of that activity through price elasticity, long tail of unmet demand,
increased agility and co-evolution of new industries. These are the
principle causes of Jevons' paradox.
(http://blog.gardeviance.org/2010/11/it-extremists.html ). So lots of
systems to be managed in the future.
13
15. The real break-out of IT:
The future of enterprise IT will be hybrid.
Moving for your current environment to the future:
1. Move commodity services/apps to public SAAS
2. Move cloud-ready services with high business value to new build
private cloud (build with partners, because its complex)
3. Create a roadmap to say goodbye to legacy…. But enterprise IT will
always still have legacy
In the future:
When an application running on private cloud becomes commodity;
move it to public cloud.
This means you need to have good cloud app frameworks! (Like:
Vmware Cloud Foundry)
14
16. The future of enterprise IT:
- Core data will be onsite (private cloud)
- The private cloud will deliver: data warehouse (information is key),
PAAS en some internal applications.
- All applications (or selections of public SAAS applications) are
delivered using internal App Store.
- Internal PAAS platform will be used by developers to create
applications that give the organization a competitive edge.
- The internal PAAS platform is open to anyone in the organization.
End-users can create own apps
15
17. Open up data API’s to the outside. This gives you the option for crowd
sourced application development. Run app development compo’s.
Example: Apps4Army in the US: http://www.youtube.com/watch?v=fv-
ewtm8RSo
16
18. What do we need
- Data classification tools
- Enterprise platforms (like ServiceMesh and Enstratus)
- Good cloud API’s and some standards
- Audit API’s , like the development of cloud audit
- PAAS to be more mature. It is the future of IT.
17
