agilepath's live webinar: exploring the cloud governance lifecycle dec 16 2010

AgilePath Corporation

Exploring the Cloud Governance Lifecycle

Copyright © 2010 AgilePath Corporation. All Rights Reserved. Proprietary and Confidential

December 16, 2010

AgilePath Corporation38 Merrimac St.Newburyport, MA 01950

www.agile-path.com

Agenda

� Introduction to Cloud Governance

� Major Issues, Challenges and Gaps

� The Cloud Governance Lifecycle

� Impact of Major Cloud Patterns

� Impact of Cloud Deployment


� Impact of Cloud Deployment

Patterns

� Future of IT in a Cloud-Centric

World

� Things to Do Tomorrow

Mentoring, Change Mgt. & Advisory Services

AgilePath Corporation Solution Framework

Strategy & Planning

Enterprise Governance

Funding,

Budgeting & Acquisition

Enterprise &

Solution Architecture

EnterpriseModeling

Solution

& Technical Implementation

Enterprise

GovernanceSOA & BPM

Technology

Insertion

Solution

Delivery

Practices &

CompetenciesCloud

Computing

Enterprise Architecture & Systems Engineering


AgilePath SOA Playbook ™

Acceleration

Education

Acceleration

Workshops

XPE Delivery

Sprints

AgilePath Cloud Computing Adoption Playbook ™

AgilePath Enterprise Governance Playbook ™

AgilePath SOLAR Playbook™ Methodologies &

Thought

Leadership

Solution

Delivery

3

AgilePath’s Cloud Innovations

� “Executive’s Guide to Cloud Computing”

� AgilePath Cloud Computing Reference Model (CC-RM) and CC Reference Architecture

� Developed Cloud Adoption Lifecycle Model

� Cloud Computing Playbook™ Methodology


• Cloud Business Discovery Template

• Cloud Strategy Development Template

� Developed Cloud Governance Lifecycle™

� Developed CloudSprint™ Methodology for Agile Cloud Planning and Deployment

4

Cloud Governance Issues & Challenges

� Cloud governance is an emerging requirement of Cloud computing

� The end-to-end Cloud Lifecycle is not well understood nor integrated into Enterprise IT Governance processes, e.g. EA, AQ, PfM, SDLC, et al

� Encompasses a broad set of business and technical requirements, from the strategy, planning and


requirements, from the strategy, planning and architecture process through the design-time and run-time considerations

� Shares some characteristics of Enterprise SOA Governance, e.g. run-time tooling, distributed application assembly, consumer-provider dynamics, and trust-based considerations

� Must also cover Cloud bursting, changing providers, and offboarding scenarios as well

Definitions

� Cloud Governance refers to the

decision making processes, criteria and policies involved in the planning, architecture, acquisition, deployment, operation and management of a Cloud computing capability


computing capability

� The Cloud Governance Lifecycle describes the end-to-end requirements of Cloud Governance, from planning, architecture and deployment to bursting, switching Cloud providers, and offboarding from a Cloud

A Cloud Computing Reference Model (CC-RM) Overview

� CC-RM framework for discovering repeatable Cloud Patterns that address mission needs based on Cloud-enabled resources

� A robust framework for Cloud Modeling

and Architecture efforts


and Architecture efforts

� Four supporting sub-Models

• Cloud Enablement Model

• Cloud Deployment Model

• Cloud Governance and Operations Model

• Cloud Ecosystem Model

� Applied in Federal Government, DoD and Commercial Clients

Co

mm

un

ity C

lou

d

Internal/Private Cloud

Hyb

rid

/In

teg

rate

d C

lou

d

Governance Lifecycle, Culture & Behavior

Secu

rity

& P

rivac

y

Op

era

tio

ns &

Su

pp

ort


Co

mm

un

ity C

lou

d

External/Public Cloud

Hyb

rid

/In

teg

rate

d C

lou

d

8

Secu

rity

& P

rivac

y

Management & Monitoring

Op

era

tio

ns &

Su

pp

ort

Cloud Governance Lifecycle & Operations Model

Governance Lifecycle Culture and Behavior

Secu

rity

& P

rivac

y

Op

era

tio

ns &

Su

pp

ort

Co

mm

un

ity C

lou

d


Hyb

rid

/In

teg

rate

d C

lou

d


9

Secu

rity

& P

rivac

y


Op

era

tio

ns &

Su

pp

ort

Co

mm

un

ity C

lou

d


Hyb

rid

/In

teg

rate

d C

lou

d

Cloud Governance Dimensions

Cloud Architecture, Design and Deployment

Cloud Strategy and Planning

Cloud Acquisition, Vendor Selection &


Resource Provisioning & Management

Cloud Operations & Runtime Management

Cloud Acquisition, Vendor Selection & Contract Negotiation

Cloud Master Governance Lifecycle

Cloud Strategy &

Planning

Architecture &

Standards

Acquisition &

Contracts

Cloud

Solution

Design

QA &

Test

Deployment

and/or

Onboarding

Access &

Consumption

Cloud

Integration

Contract

T&Cs, SLA,

QoS DefinedStart


Design Test

OnboardingConsumption

Resource

Mgt. &

Provisioning

Cloud Mgt

&

Monitoring

Ops &

Support

Cloud Burst

Cloud

Provider

Switching

Integration

Cloud

Contingency

Planning

Offboarding

Cloud

Migration

(Pub to Priv)

Metering,

Billing &

Accounting

Maintenance,

Versioning &

Sustainment

Finish

ApplicationEngineeringApplicationEngineering

SOA Service EngineeringSOA Service Engineering

Concept Model Assemble DeployMaintain & Manage

Technical Pre-Steps

Service Development

Service Sustainment

Service Deployment

Discovery Define Design Develop Test Deploy Maintain

Data Arch. & EngineeringData Arch. & Engineering

Provision and Support

Build and TestDesignDefine NeedMaintain & Manage

Define Need


Data CenterEngineeringData CenterEngineering

Infrastructure EngineeringInfrastructure Engineering

Maintain & Manage

Build and TestDesignDefine Need

PlatformEngineeringPlatformEngineering




Maintain & Manage

Build and TestArch. & Design

Define NeedProvision and

Support

ApplicationEngineeringApplicationEngineering

SOA Service EngineeringSOA Service Engineering

Concept Model Assemble DeployMaintain & Manage

Technical Pre-Steps

Service Development

Service Sustainment

Service Deployment

Discovery Define Design Develop Test Deploy Maintain

Data Arch. & EngineeringData Arch. & Engineering



Define Need

Software as a Service (SaaS)

Data as a Service (DaaS)

SOA as a Service (SOAaaS)


Data CenterEngineeringData CenterEngineering

Infrastructure EngineeringInfrastructure Engineering

Maintain & Manage

Build and TestDesignDefine Need

PlatformEngineeringPlatformEngineering




Maintain & Manage

Build and TestArch. & Design

Define NeedProvision and

Support

Infrastructure as a Service (IaaS)

Platform as a Service (PaaS)

Internal Business Consumer

Cloud Architecture, Integration & Interoperability

Integrated Cloud Management & Monitoring

Cloud Brokering, Portfolio Mgt, Resource Management

Cloud Strategy, Architecture, Acquisition, Design, QA/Test, Deployment,

Access/Provisioning, Mgt. & Monitoring, Operations & Support


IT Cloud Consumer Cloud Provider

Cloud Resources

Cloud Resources

Cloud Enablement Sub-Model

Cloud Platform Tier

Cloud Business Tier

PaaS

SaaS


18

Cloud Virtualization Tier

Cloud “OS” Tier

Physical Cloud Tier

Infr

astr

uctu

re(I

aaS

)

Consume IaaS from Cloud Service Provider

IaaS Consumer IaaS Provider

Application Development, QA/Test,

Maintenance & Support

Application Infrastructure

•ID, Login/PW

•Order Info, CC#•Contract, SLA, T&Cs

•Provisioning Process


Compute

IaaS

Infrastructure Engineering,

Management, Provisioning & Support

Block Storage

File Storage

•Provisioning Process•Resource Access,

Integration and Solution

Development•Consumption,

Management, Monitoring

IaaS Lifecycle Responsibilities

Consumer

� Manage developer/user access

� Provide integrated support for applications,

infrastructure, etc.

Provider

� Manage the IaaS resources and capabilities

� Infrastructure Engineering, versioning, management,

etc.


infrastructure, etc.

� Perform periodic audits of data, security, etc.

� Perform QA/Test, User Acceptance testing, etc.

etc.

� Provide Tier 1-3 support as needed

� Perform backups, ensure infrastructure is robust, etc.

� Ensure security (logical, data, premises/physical)

Consume PaaS from Cloud Service Provider

PaaS Consumer PaaS Provider

Application Development, QA/Test, Maintenance & Support

Bus. Process Mgt Lifecycle

•ID, Login/PW




PaaS

IaaS

Data Management, Information

Lifecycle, Schema Development PaaS App Dev Lifecycle


•Resource Access, Integration

and Solution Development•Consumption, Management,

Monitoring

PaaS Lifecycle ResponsibilitiesConsumer

� Manage developer/user access

� Provide integrated support for application

� Perform periodic audits of

Provider

� Manage the PaaS platform

� Manage IaaS supporting PaaS



� Perform periodic audits of data, security, etc.


needed


� Provide access to developers

� Provide developer resources, SDK, sand box, et al

Consume SaaS from Cloud Service Provider

SaaS Consumer SaaS Provider

Application Customization, QA/Test, Maintenance & Support

Bus. Process Mgt Lifecycle

•ID, Login/PW



•Customization Process


PaaS

IaaS

Data Management, Information

Lifecycle, Schema DevelopmentSaaS Application

•Provisioning Process•Resource Access,


Development•Consumption,

Management, Monitoring

SaaS Lifecycle Responsibilities

Consumer

� Manage user access

� Provide integrated support for application

� Perform periodic audits of

Provider

� Manage the SaaS application

� Provide SaaScustomization support


data, security, etc.

� Manage customizations to SaaS-based applications


� Manage PaaS and IaaSsupporting the SaaS



� Ensure data security, etc.

Consume Other Resources from Cloud Service Provider

Cloud Consumer Cloud Provider

Application Development, QA/Test,

Maintenance & Support

ID, Login/PW

Order Info, CC#Contract, SLA, T&Cs

Provisioning Process


Compute

IaaS

Infrastructure Engineering,

Management, Provisioning & Support

Block Storage

File Storage

Provisioning ProcessResource Access,


DevelopmentConsumption, Management,

Monitoring

MapReduce CloudFront Other?

SOA in the Cloud

Platform Lifecycle

Management

Services Hosting &

Lifecycle Management

Business Process Mgt,

Orchestration

SOA in the Cloud Consumer

SOA in the Cloud Provider

SOA and Cloud Lifecycle Governance


26

Data & Data Services

Lifecycle Management

Infrastructure Lifecycle

ManagementLegacy Application Hosting

& Management

Data Lifecycle Management

Business Services

Data Svcs Bus. Svcs

Adapter & Integration Svcs

Logic Svcs

Security/Utility Svcs

Messaging & Mediation Svcs

Cloud Deployment Sub-Model

Co

mm

un

ity C

lou

d


Hyb

rid

/In

teg

rate

d C

lou

d


27

Co

mm

un

ity C

lou

d


Hyb

rid

/In

teg

rate

d C

lou

d

Co

mm

un

ity C

lou

d


Hyb

rid

/In

teg

rate

d C

lou

d

Governance, Culture & Behavior

Secu

rity

& P

rivac

y

Op

era

tio

ns &

Su

pp

ort


Co

mm

un

ity C

lou

d


Hyb

rid

/In

teg

rate

d C

lou

d

28

Secu

rity

& P

rivac

y


Op

era

tio

ns &

Su

pp

ort

Private Cloud Governance

� Internal Service Provider dynamics, e.g. creating service catalogs, behaving as a “true” Service Provider vs. serving “captive” IT consumers

� Defining SLAs, QoS terms and Service contracts for Internal IT/Business consumers

� Establishing incentive models to come to the Cloud

� Implementing charge backs, fee for service models, other


� Implementing charge backs, fee for service models, other cost recovery models

� Provisioning resources to internal project teams

� Migrating legacy capabilities to the Cloud

The transition from an IT Shop to a Cloud Service Provider is not an easy

transition for most organizations. Service levels must be comparable to outside providers in terms of cost, reliability, service and trust.

Public Cloud Governance

� Security, Security and Security

� Contract terms, SLA and QoS definition

� Access to and consumption of a variety of Cloud

resources per Contract

� Business assurance, continuity of operations,


� Business assurance, continuity of operations,

failover

� Support, Reliability and Trust

� Portability, Cloud APIs, Interoperability,

Integration with other internal IT capabilities and

resources

Hybrid Cloud Governance

� Integrating Cloud resources from multiple Cloud

providers (Internal, external, et al)

� Contract T&Cs, SLA and QoS management

� Security, Security and Security

� Bursting criteria, Switching, Portability,


� Bursting criteria, Switching, Portability,

Interoperability and Integration

� Management, monitoring and business

assurance across entire hybrid Cloud

environment

Compute

Hybrid Cloud

Internal Cloud

Consumer

Internal IT/Cloud

Provider

External Cloud

Provider

Compute


Storage Storage

IT Infrastructure Acquisition,

Provisioning and Configuration Management Process

Software (aaS)

Platform

Compute

Hybrid Cloud Internal Cloud

ConsumerInternal IT/Cloud

ProviderExternal Cloud

Provider


Platform (aaS)

Compute

Storage

StorageBypass IT governance, infrastructure

provisioning and acquisition processes

IT Disintermediation

Future Implications – IT

Organization of the Future� IT is a broker of IT resources and capabilities

• External Cloud resources

• Internal IT services

• Outsourcing services

� IT is a true business relationship manager working


� IT is a true business relationship manager working to deliver best-in-class services, solutions and resources regardless of provider

� IT is unafraid of outside service provider comparisons, and desires to be compared and measured against them

� IT is a trusted advisor to the business

Software (aaS)

Platform

Compute

New Role of IT

Internal Cloud Consumer

Internal IT/CloudProvider

External CloudProvider


Platform (aaS)

Compute

Storage

StorageBypass IT governance, infrastructure

provisioning and acquisition processes

IT Disintermediation

New Role of IT Leadership

Internal Cloud Consumer

IT Resource Broker & Business Relationship

Manager

Compute

Storage

Internal IT/CloudProvider


Compute

Storage

External CloudProvider

SaaS

PaaS

Possible Future IT & Cloud

Governance Lifecycle

Cloud Strategy &

Planning

Architecture &

Standards

Acquisition &

Contracts

Contract

T&Cs, SLA,

QoS Defined

Enterprise Svcs

Computing

Strategy

Business

Relationship

Mgt

IT

Resources

Brokering

Integrated

Resources

Management

IT Resources

Acquisition &

Contracts Mgt

IT Resource

Portfolio

Mgt.


Cloud

Solution

Design

QA &

Test

Deployment

and/or

Onboarding

Access &

Consumption

Resource

Mgt. &

Provisioning

Cloud Mgt

&

Monitoring

Ops &

Support

Cloud Burst

Cloud

Provider

Switching

Cloud

Integration

Cloud

Contingency

Planning

Offboarding

Cloud

Migration

(Pub to Priv)

Metering,

Billing &

Accounting

Maintenance,

Versioning &

Sustainment

Avoiding Disintermediation of IT

� How can IT become/remain relevant in

the Age of Cloud?

� How can IT become/remain relevant by

adding value to the business ?

� The Resource/Relationship Broker


� The Resource/Relationship Broker

concept is an emerging role in

“Enterprise Services Computing”

� Combining Business Relationship

Management, Portfolio Mgt,

Contacts/Acquisition and Resource Mgt

into a new IT Strategic Competency

New Tools of Cloud Governance

� Cloud Lifecycle Management Tooling

� Cloud Services Portfolio and Contracts

Management Tools

� Cloud Management Tools

� Cloud Monitoring Tools


� Cloud Monitoring Tools

� SOA Management Tools

� Application Design and Development for Cloud

� QA and Testing for Clouds and Cloud-centric

Applications

Things to Do Tomorrow� Develop a Cloud Strategy – Vision, Goals,

Objectives, Business Case, et al

� Develop a Cloud Reference Model and Reference Architecture to guide decision making and solution definition

� Document your Cloud Governance Lifecycle based

on the Cloud Strategy and Ref Model/Ref


on the Cloud Strategy and Ref Model/Ref Architecture

� Adapt & Integrate the Cloud Governance Lifecycle into your Enterprise IT Governance processes

Remember: There is no free lunch, just a better or a different lunch… The Cloud Governance Lifecycle will help you understand your lunch better…

Additional Reference Materials� Marks, Eric and Robert Lozano, Executive’s Guide to Cloud

Computing, 2010, Wiley & Sons. Hoboken, New Jersey.

� AgilePath Corporation Whitepaper: Cloud Computing and SOA: Enabling the Agility Double Play, May 2009.

� AgilePath Corporate Whitepaper: A Pragmatic Cloud Computing Reference Model, September 2009.


� Coming Soon. Cloud Governance Lifecycle Whitepaper

� Cloud Playbook™ Strategy and Cloud Assessment Templates

Q&A?


Thank You!


Eric A. Marks

AgilePath Corp.

[email protected]

www.agile-path.com

agilepath's live webinar: exploring the cloud governance lifecycle dec 16 2010

Technology

cloud providers

cloud bursting

cloud modeling

planning cloud architecture

cloud mgt maintenance

cloudenabled resources

repeatable cloud patterns

definitionscloud governance