1. No category

IBM Canada – Cloud Managed Services
Cloud Computing:
How to best leverage for success in your Business
© 2013 IBM Corporation
Shared Infrastructure Considerations:
Networking, Security & Business Continuity
Executive Business perspective
Willie Wong
Global Technology Services
Market Segment Manager, Security, BCRS & Mobility
[email protected]
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Willie Wong
Global Technology Services
Market Segment Manager, Security, BCRS & Mobility
IT Risk Management Advocate
25+ five years of information technology experience with over
half of that experience focused on IT Risk.
During this time, he has worked in many domains including
Security Consulting, resource deployment, application
development, programming, systems analysis, architecture
and design, system integration, network services, systems
management, Sales and marketing, Internet Service Provider
services and process re-engineering.
Find me on:
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Objectives
Help organizations to better understand:
1. The evolution of Networking, Security and Business Continuity as a shared
service model
2. Latest Technology trends with associated impacts
3. Develop some key high level strategic recommendations for shared
infrastructure service needs
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
People and devices are sharing information more
than ever before
In 2000
In 2012
The rise of mobile
In 2000
In 2012
6 billion
361 million
2.67 billion
720 million
people using the Internet.
people using the Internet.
mobile subscribers worldwide.
mobile subscribers worldwide
5.8%
33%
12%
87%
of the world’s population.
of the world’s population.
of the world’s population.
of the world’s population.
The unmatched explosion of data growth
(90% of world’s data created over the last 2 years)
has put exceptional pressures on the storage capabilities, control, risk mitigation
and management of Data Centres
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Data Evolution (Circa 2000)
Traditional Infrastructure Operational Layers around Data Centre
Security
Partner
Site
Business Continuity
Citrix
Network
Server
Data Centre
Training
Site
Corporate
Email
Web Server
File
Server
Web Email
Outsourcer A
Partner
Site
Infrastructure
Data
Contained
Outsourcer B
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Data Evolution (Circa 2012)
Cloud computing & Mobility changes the boundaries of IT
Cloud
Services
(Private)
Security
Cloud
Services
(Public)
Partner
Site
Business Continuity
Network
Citrix
Server
Cloud
Services
(Hybrid)
Data Centre
Training
Site
Corporate
Email
File
Server
Web Servers
Web Email
Outsourcer A
Partner
Site
Infrastructure
Cloud
Services
(Public)
Outsourcer B
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Networking
8
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Networking Trends
IT demand and unprecedented data growth are placing demands on data centres that
can’t be addressed in traditional ways.
IT demand
82M
Servers installed
by 20131
20%
Server
workloads
have been
virtualized2
50 times
Increase in data
growth this
decade3
Less
than
30%
Disk storage
is used
effectively4
Cost pressures
75%
3%
Of chief
information
officers (CIOs)
anticipate a
strongly
centralized
infrastructure by
20135
Increase forecast
for IT spending6
Need for flexibility
70¢
Of every US$1
is spent on
maintaining
existing
environment7
14 years
Average age of
data centres8
months
To deploy new
solutions and
resources9
1
International Data Corporation (IDC), IDC Worldwide Server Market Update: Server Workloads 2011 Research, August, 2011; 2 Based on IIBM experience; individual client results vary; 3IDC, IDC’s Digital Universe Study, sponsored by EMC, June,
2011; 4IBM Storage Innovation Executive Summit in New York City, May 9, 2011, by Brian Truskowski; 5IBM, The New Voice of the Chief Information Officer (CIO), September, 2009; 6GOldman Sachs: US Technology Strategy: Independent Insight IT
Spending Survey, 2011; 7IBM, The Essential CIO: Insights from the Global Chief Information Officer Study, May, 2011; 8Data center discussion, Part II, Data Center Dynamics, 2011; 9Based on IIBM experience; individual client results vary
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Network Issues/impacts
The new IT and business requirements have direct implications for the data centre network.
IT demand
Cost pressures
Growing percentage
of virtualized servers
Reduce operating expenses for
new project spend
Growing amount of data
Consolidation and
centralization
Growing number and types
of devices requiring access
Maintain security posture
Need for flexibility
Responsive IT
scale up and down
Leverage cloud models
Design with future in mind
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Networking considerations
Designing a future-proof data centre network that satisfies both business and IT requirements
is a balancing act.
Meet IT demand
Enhance data centre network scalability
Enable a growing mix of end devices to access the data centre
Address the need for simplified and integrated Management
Manage cost pressures
Optimize the existing environment through new
architectural approaches
Reduce network footprint leveraging consolidation and
virtualization technologies
Managing
Cost
Pressures
Meeting
IT Demand
Delivering
Flexibility
DCN
Strgy
Deliver flexibility
Introduce standardized network automation
Enable a highly available logical data centre view
Address the need for redundancy and fault tolerance to meet availability requirements
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
IT Security
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Security Trends
In IBM’s recent 2012 Chief Information Security Officer Study, security leaders shared their
views on how the landscape is changing.
Nearly two-thirds say senior
executives are paying
more attention to security
issues.
External threats are
rated as a bigger
challenge than internal
threats, new technology or
compliance.
Two-thirds expect to
spend more on security
over the next two years.
More than one-half say
mobile security is
their greatest near-term
technology
concern.
Source: IBM 2012 CISO Assessment
* Expect a skills shortage in 2013/2014
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Security Trends: 2011 Targeted attacks
Source: IBM X-Force® 2011 Trend and Risk Report – March 2012
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Security Trends: Targeted attacks are increasing - 2012
2012 Sampling of Security Incidents by Attack Type, Time and Impact
Conjecture of relative breach impact is based on publicly disclosed information regarding leaked records and financial losses
Source: IBM X-Force 2012 Mid-year Trend and Risk Report, September 2012
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Security Trends: Targeted attacks are increasing - 2012
Government/International bodies
2012 Sampling of Security Incidents by Attack Type, Time and Impact
Conjecture of relative breach impact is based on publicly disclosed information regarding leaked records and financial losses
Source: IBM X-Force 2012 Mid-year Trend and Risk Report, September 2012
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Security Issues/Impacts
Evolving challenges: Internal, External & Compliance
Regulators
Criminals
Board of Directors /
Audit Committee
CIO & Team
Theft of
Client Records/
Intellectual Property
Hactavists
Insider
Fraud
/User
Error
O
rg
an
iza
tio
n/
En
tit
y
State Sponsored
Hacks
Business imperatives:
Continuity of operations
Protect sensitive client data
Protect valuable IP
Protect critical
infrastructure
Other Disruptions
Protect the Brand
Enable new Business &
Technology Models
Physical
Comply with policy and
takeover of
critical
regulations
infrastructure
Contain cost
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Security considerations to achieve effective IT security
1.
2.
3.
4.
5.
Vigilance
Security awareness
Risk prioritization
Following ten essential security practices
Integrated tools and resources are in place (Security Intelligence)
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Business Continuity
and Resiliency
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Business Continuity Trends
IT departments are facing pressures due to increasing volumes of data,
intensifying regulatory requirements and expectations for continuous
business operations.
The amount of information managed by enterprise data
centres is expected to increase by at least 50 times over
the next decade1
50x
2010
The average cost per hour of system downtime is increasing as
more business operations become automated2
$182K
$110K
2020
40 Zettabytes*
2010
*Zettabytes equals 1 trillion gigabytes
1. Source: IDC Digital Universe Study, June 2011
2012
Average cost of one hour of downtime
2. Source: Aberdeen Group: “Datacenter Downtime: How Much Does it Really Cost?,”
March 2012
Strong market demand of multi-tenant data centre (MTDC) space in major Canadian cities in 2013
12% growth in DC space in Toronto
14% growth in Montreal
15% growth in Calgary
8% growth in Vancouver
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Business Continuity Trends
Recovery Point Objectives (RPO)
$
e
in
nl iler
O ta s
Re eed
n
Continuous
Availability
Globally, IBM is experiencing upward pressure for higher tiers for
resiliency
Recovery Point Objectives (RPO)
& Recovery Time Objective (RTO) Map
RPO=near zero, RTO <1min, Automatic
Continuous Availability - Server/Workload/Network/Data SYSPLEX, Hyperswap, VTAM
Persistent Sessions, VTS PtP Availability Mode
RPO=Near zero, RTO <1Hr. to 4 hours, Automatic
Server/Workload/Network/Data Automatic Site Switch
RPO=Near Zero, RTO <1Hr. to 4 hours, Manual
Disk or Tape Data Mirroring
Multi-Site
Failover /
Fallback
RPO > 15 min. RTO= 4+ hours, Manual
PiT or SW Data Replication.
RPO=4+ hours, RTO=8 to 24 hours, Manual
Data Base Log Replicationed & Host Log Apply at Remote.
Active
Secondary Site
RPO<24 hours, RTO=8-24 hours
Electronic Tape Vaulting
RTO=>24 hours, RPO=24 hours
Hot Site & Tape
RTO=Days, RPO>24 hours
a
Tape, HW ATOD
m h
ar rc
Point-in-Time
Backup to Tape
Minutes
Hours
Recovery Time Objective (RTO)
Days
Ph sea any
Re omp
c
© 2013 IBM Corporation
$
IBM Canada – Cloud Managed Services
Business Continuity Issues/Impacts
The impact of lost data or unplanned downtime can be
catastrophic, leading to lost revenue, reputation and
competitive position.
Finances
Lost deals
Disruption of cash flow
Lost discounts
Missed payments
Drop in stock price
Miscellaneous costs
Temporary staff needed
Travel expenses incurred
Equipment rental costs
Loss of reputation
Company reputation
Damaged relationships with:
– Customers
– Suppliers
– Partners
– Lenders
– Investors
Productivity
Employees who cannot
perform their jobs
Missed deadlines
Revenue
Direct revenue losses
Loss of future revenues
Losses due to invoices
that cannot be completed
Losses due to investments
not made
Regulatory
Inability to meet compliance
requirements
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Business Continuity Considerations
IBM’s Point of View
IBM takes a holistic view of risk management that believes in a comprehensive
integrated Security, Business Resiliency, and Compliance strategy across the
enterprise
VM resiliency and availability are now a critical business metrics
Organizations need to understand how technologies like Mobility and Cloud are
changing the way organizations address data availability issues
Mission Critical applications need to move up the resiliency chain to maintain
operational availability. Tape to disk disaster recovery is no longer good enough
for some applications.
Lines of business should examine and prioritize their suite of support applications
and enable resiliency for each tier.
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Executive Takeaways
1. Understand how technologies supporting Mobility and Cloud will evolve that will
impact your Data Centre(s) and IT Operations.
2. Take a holistic view of a comprehensive integrated Security, Business Continuity
and Networking strategy across the enterprise (3 Legged Stool)
3. Optimize the existing Network environment through new architectural
approaches, while at the same time reducing the network footprint
4. With sophisticated attacks on the increase and the expected security skills
shortage, consider a vendor that provides security services.
5. With the Growth of 3rd party Data Centre space in Canada , consider how you
could leverage this industry option in your Business Continuity Strategy.
For Cloud Services – Which vendor you select DOES matter !
• Service levels (Availability)
• Compliance
• Security Options
• Transfer of Risk
• Sub contracting
• Data Flow
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Please join the IBM Webcast Series…...
IBM Canada Optimized Infrastructure Webcast Series: Maximizing Data Centre Capabilities in a
Capital Challenged World
Is your organization’s growth exceeding data centre capacity? Increasingly, CEOs are turning to their CIOs to solve the
issues arising from today’s need for expanded IT capabilities. System downtime and site outages are on the rise. Your top
challenge is to find and implement innovative strategies that ensure sufficient data centre capacity and availability to meet
service demands. Join IBM Canada for a series of webcasts to learn what your options are – so you can do more with less.
This webcast series will highlight why building a strategic roadmap will ensure that investments are aligned to business
priorities and budgets.
Topics include:
The key consideration factors when evaluating data centre services, based on thousands of client engagements
Cloud case studies that showcase how companies are leveraging Cloud today to address the opportunities and challenges
of business innovation.
Learn how a multi-sourcing strategy can optimize your infrastructure and leverage effective delivery models such as Cloud.
–
June 19 11am EST Blueprint for a Smarter Data Centre: Flexibility and Cost-Effectiveness
Speaker: Stephen Cake, Global Technology Services Project Executive, FSS / AIS
–
July 17 11am EST Addressing Data Centre Capacity with Cloud: What Workloads Make Sense
Speaker: Tom Wefers, Global Technology Services Business Unit Executive, Data Centre Services
–
July 24 11am EST Shared Infrastructure Considerations: Networking, Security & Business Continuity
Speaker: Willie Wong, Market Manager, Security, BCRS and Mobility
To Register:
https://engage.vevent.com/rt/ibm~canadawebcastseries
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
RESOURCES
For more information:
IBM Data Center Networking: Planning for Virtualization and Cloud Computing
URL:
http://www.redbooks.ibm.com/abstracts/sg247928.html?Open
Risk Management: 2013 IBM Global Risk Study: Reputation Risk URL:
https://www14.software.ibm.com/webapp/iwm/web/signup.do?source=gts-LITS-bus-connNA&S_PKG=ov12437&S_TACT=601B944W
Security: IBM Cyber Security Intelligence Index Analysis URL:
https://www14.software.ibm.com/webapp/iwm/web/signup.do?source=gts-LITS-bus-conn-NA&S_PKG=ov12561
Business Continuity: Leveraging the cloud for business resilience - Cloud computing URL:
https://www14.software.ibm.com/webapp/iwm/web/signup.do?source=gts-LITS-desktop-cloudNA&S_PKG=ov10588&S_TACT=601BV3LW
Contact:
Willie Wong, IBM IT Risk Management Advocate, IBM
416-805-5194
[email protected]
Find me on:
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Thank
you
And Speaker Bio
Willie Wong
Professional Profile
NOT TO BE CONFUSED with Willy Wonka as the fictional character in the 1964
Roald Dahl novel Charlie and the Chocolate Factory
Find me on:
Willie Wong is currently the IBM Global Technology Services Market Manager for Security Services, Business Continuity &
Resiliency Services and Mobility for IBM Canada. He is a Risk Advocate that has presented at many business and
government events and conferences.
He has over 25 years of information technology experience with over half of that experience focused on IT Risk. During this
time, he has worked in many domains including Security Consulting, resource deployment, application development,
programming, systems analysis, architecture and design, system integration, network services, systems management, Sales
& Marketing, Internet Service Provider services and process re-engineering.
Professional Experience relevant to seminar
While in a previous role as a IBM Security Principal, his focus was on assisting organizations, across all industries(Financial,
Government, Manufacturing, Retail, Distribution, Communications, Utilities etc.), to address their IT security needs (with
Security/Privacy/Identity Management solutions) as it was related to their business strategy and goals. His security consulting
experience includes a broad range of security areas:
Security Program Development;
Security Return On Investment(ROI) Workshops;
Security product research, business casing and selection;
Security Management (including day to day operations,
incident management, processes and standards development,
documentation);
Risk assessment and mitigation of risk;
Security Health Checks (based on ISO17799);
Security Awareness Management program development and
delivery;
Information Classification methodology development;
Secure Architecture Risk Analysis (SARA) workshops;
Enterprise Privacy Classification Development;
Security policy, standards and process, development and
documentation;
Communicating Security issues effectively to Executive
management;
Host Vulnerability Assessments (Windows and Unix) using
various technical tools. Applied to various types of
businesses and organizations;
Project Managing Security Engagements; and
Enterprise Security Architecture.
© 2013 IBM Corporation
IBM Canada – Cloud Managed Services
Discussion
Cloud is both an enabling and disruptive technology
One size or model does not fit all, workloads matter
IBM offers choice and flexibility
Proof points to help you get started
Next Steps
– Workload Analysis
– Specific Workload workshop with SME to discuss what your next steps might
be
Thank you
© 2013 IBM Corporation