www.cfengine.com

Drive Financial Services Innovation Through IT

AutomationAndrew YeungDirector, Product ManagementJuly 17, 2014

Agenda

• The State of IT in Financial Services Today• Minimize Risk, Ensure Compliance, and Drive

Operational Efficiency with CFEngine Enterprise

• Demo• Q&A

The State of IT Today

Ensuring that critical systems and data is secure

Maintain IT infrastructure and applications

Expedient remediation of issues as they arrive

Providing technology support to employees

IT’s role today is primarily tactical and operational…

How can you help transform IT to a strategic business partner?

Additional Burdens on Financial Services FirmsIncreasing regulatory requirements

Risk and compliance management

Security is a top concern

Cost control and operational efficiency

Tremendous IT complexity

Regulatory Compliance Pressures

Regulatory compliance remains

the top driver of security spending for

financial services organizations

Average number of detected incidents in Financial Services

169% in 2013

Information and Infrastructure Security

Average financial losses due to security incidents

48% In N. America

Only 18% Of respondents say they have policies governing cloud services

79% of respondents say their security activities are effective, a decline of

5%over last year

Source: The Global State of Information Security Survey 2014, PWC.

Large Scale, Heterogeneous, Complex Environments

Maintaining standardization and consistency is complex and time consuming

Keeping configurations accurate and up-to-date is a top priority

Virtualization, cloud, containerization sprawl needs to be curbed and managed

Data centers are increasingly distributed to support local offices, user/mobile traffic

High availability, redundancy, backup/recovery are imperatives

Speed and Operational Efficiency

IT must evolve in an environment of rapid change

Technology and automation will provide the catalyst to help financial services firms achieve operational excellence

Automation as a Strategic Initiative

Increase productivity and remove human bottlenecks

Reduce costs of managing your environment

Maintain compliance and enforce security

Introducing CFEngine Enterprise

Intelligent Infrastructure Automation

Agile, secure and scalablePolicy-driven and convergent

Simple, self-service consumption

Policy-based Application Deployment

Repeatable and error-freeManage local or cloud-based

infrastructureDeliver on platform

standardization

Continuous Operations and Self-healing

Complete visibility and alerting

Compliance with self-healingOOTB inventory and

reporting

IT Automation at WebScale

Scale Speed Security Stability

CFEngine’s Heritage10,000+ Customers across 100+ countries

10 million+ servers managed200,000 nodes managed at a single customer

Market-leading scalability, securability, & reliability

JPMorgan Chase 2013 Hall of Innovation Winner

CFEngine’s innovative technology has enabled JPMC to achieve global consistency of their dynamic configuration environment, resulting in cost savings, risk mitigation, efficiency and product differentiation and faster time to market.

As the most strategic and scalable automation platform, CFEngine has made standardization easier to achieve, allowing systems to manage themselves and converge to their desired state

Mike Ashworth,Chief Information Officer for J.P.Morgan Chase

Distributed, Lightweight Architecture

1. Define Desired State

2. Ensure Desired State

HUB

3. Verify Actual State

CFEngine Hub

Design Center

MissionPortal

CFE Agents

Policy Language

Addressing the Needs of Financial Services Organizations

Establish baseline

implementation of OS,

configuration, and software

Standard Operating

Environment

Satisfy stringent security

standards and automate

vulnerability management

Security Standards

Identify, report, and alert on

possible configuration drift

Reporting / Audit

Automated remediation to approved and desired state

Problem Remediation

Manage thousands of servers, and

address issues in a matter of

minutes

Scalability and Speed

Ensure system consistency and resiliency to support mission critical environments across your enterprise.

Establish Standard Operating Environment

• Ensure baseline configuration by declaring desired state

• Managed entities include users, files, processes, s/w packages, services, etc…

• Standardize across thousands of systems• Manage and report on configuration drift

A measurable path to IT operational efficiency

Enforce IT Security Standards

• Ensure systems, users, firewalls are configured according to security regulations

• Accelerate and automate patch distribution to plug vulnerabilities

• File integrity monitoring• Alert on policy breaches to ensure

compliance

Be proactively alerted on policy drift to continuously assess and monitor conformance

Reporting and Audit

• Simple-to-use, configurable dashboard• Flexibly report on inventory assets and forensics• Alert on events that require attention• Tracking and recording of system events

Instant visibility, comprehensive coverage, exact data

Issue / Change Remediation

• Continuous verification and operations at 5 min. intervals

• Automated self-healing• Integrate with system

management tools to support end-to-end use cases

Scalability and Speed

• Distributed, lean agents• Autonomous and fault-

tolerant• Support thousands of

managed systems per hub

• 5 minute updates• Execute policies in

seconds

Architected for WebScale

Managed OSes

Enterprise APIs

CFEngine Hub

Mission Portal

Managed OSes Managed OSes

Dev Test Prod

Redis key-value

PostgreSQL

Hub

Customer Success Story

• Global provider of banking and payment technologies

• Serves more than 14,000 institutions in 100+ countries

• IT organization owns everything from bare metal to the top of the stack and supports all flavors of Unix/Linux

Customer Profile

Challenges• Adherence to security

/corporate policies is imperative

• Extremely dynamic environment

• Operational efficiency measured against its competitors

• Expected 99.999% uptime

Results• Execute millions of

compliance checks per day

• Automated security config management

• Time to update policies from days to mins

• Vast reduction in labor costs

www.cfengine.com

DEMO

Take It For A Spin!

Download CFEngine Enterprise free for up to 25 nodes!http://cfengine.com/product/free-download/

Check out our video tutorials @ http://cfengine.com/learn

Or try our prepackaged CFEngine environment using Vagrant

Download and unzip the Vagrant project

$ cd <location of vagrant_env>

$ vagrant up

…and you are all set!!

1

2

3

4

Summary

Leverage automation as a strategic initiative and transform IT

Adherence to IT security standards is a top priority for financial services organizations

Speed, scalability, and agility cannot be ignored

CFEngine Enterprise delivers IT Automation at WebScale

Infrastructure Automation, Continuous Delivery and Continuous Operations using

a model based approach that is secure, scalable, and agile and provides

enterprise-wide visibility, while ensuring service levels and compliance.

www.cfengine.com

QUESTIONS?