IT Operations Management Strategy

1. IT Operations Management Strategy • Erin Quill • IT Operations Management Evangelist • equill@netiq.com

2. Balancing Control and FlexibilityThe cloud is disrupting this balance Flexibility Control

3. Goals of Speed of BusinessWhy go to the Cloud? 1 Increased application deployment speed and efficiency Business efficiency: better infrastructure elasticity, Reduced time-to-market Reduction in capital hardware expenditure Overcoming space limitations in the data center, reducing overall power consumption and reducing thermal output 2 3 4 Expectations for an overall reduction in hardware capital expenditure and increased application deployment speed and efficiency have not been fully met. Source: The Road Map From Virtualization to Cloud Computing, Published: Gartner 2012

4. Where Are You Today?Why go to the Cloud? 1 Physical and virtual workloads will grow 54% and 76%, respectively, in 2012 Windows workloads are the major target for virtualization today and in 2012. Vendor lock-in Instability Data Privacy Constraints Or poor service levels 2 3 4 5 6 Source: Cloud Management Platforms: A Step Toward 'ERP for IT’, Gartner, Published: 10 February 2012

5. Cloud Instability Are You Prepared? Google Doc’s September Disaster There came a day when Google Docs suffered approximately an hour outage due to which work in terms of daily tasks came to a standstill. This proved to be a major setback for Managed Cloud Provider in terms of monetary losses company suffered as well as their reputation in the market. Microsoft’s Office 365 Cloud Disaster Recently, in the month of August and September, Microsoft launched its Office 365 cloud productivity suite, but just few months after its launch media broke the news of its collapse that shattered hopes of Microsoft applications users. The company also experienced a global outage with DNS servers failing Google Docs…Again! Yet another cloud outage erupted with a bang when Google Docs collapsed in the Google HQ. Bad Weather Conditions can Result in Cloud Disaster In the month of August that both Microsoft and Amazon’s cloud data centers had blown off by a thunder lighting strike. Both the cloud servers collapsed because of it, which led big and small organizations to suffer hugely. Companies not only suffered monetary losses, but also had hard time in recovering. Amazon Elastic Cloud Compute Outage Yet another cloud disaster occurred when Amazon EC2 or Elastic Cloud Compute hit the East coast of the US making big time players like the Reddit, Hootsuite, Quora and Sqaurefoot suffer tremendously. To add more to its numbers, approximately 170 SMBs also suffered a major setback as they found it extremely tough to run their businesses during an 8 hour downtime that Amazon EC2 cloud showed to them. Source: http://www.prlog.org/11760525-5-serious-cloud-failures-disasters-of-2011.html

6. Where Do You Want to Go?Why go to the Cloud? 1 Forecasts of business demand, will drive capacity requirements for IT resources Agreed-on service-level policies, capacity management will be used to determine what services should be hosted in what location and on what resource pools Estimates can be made on the cost of service delivery based on the CMDB and estimated usage of IT resources (based on estimated demand), but more detailed cost analysis can be done through analyzing IT resource usage data. Use just enough IT resources to meet SLAs, thus reducing the cost of service delivery and increasing service margins 2 3 4 Source: Cloud Management Platforms: A Step Toward 'ERP for IT’, Gartner, Published: 10 February 2012

7. IT Operations Management Physical Delivery IT and Business focused solutions led to two market segments Virtual and Cloud Delivery Driven by IT Driven by the business

8. Physical Delivery Market Driven Strategy IT Operations Management and Identity Security and Goverance Markets are Converging Next Generation Service Delivery Platform (IT Service Broker) Driven by IT Virtual and Cloud Delivery Demanding services at the speed of business Manage the risk posture of the company Driven by the business

9. What We Are SeeingGet Your Ducks in a Row Before Going to the Cloud • What services • Risk Policy, Plan • Regulations • Information management • Data privacy constraints • Recovery plan when cloud fails

10. What We Are SeeingGeneral Trends 1 Infrastructure cloud markets are commoditizing quickly. New markets are evolving around the pooling of human resources Cloud First: Federal CIOs are required to consider cloud computing solutions first, and to provide evidence that there is no viable solution 2 3 Source: Cloud Management Platforms: A Step Toward 'ERP for IT’, Gartner, Published: 10 February 2012

11. What We Are SeeingAnalyst Comments An enterprise cloud service architecture has five functionality tiers: access management, service management, service optimization, resource management and the underlying resource tier. Ideally, a cloud service's layers should be logically independent of each other, they should maximize deployment flexibility and they should enable the potential for multivendor substitution. Enterprises are likely to end up with many sets of cloud resources spread across internal and external resources. This could lead to many cloud silos in an enterprise, with less efficiency in resource usage. We recommend that enterprises build as few silos as possible to accommodate an expanding service portfolio, enable broad governance and maximize the sharing of infrastructure resources. 1 2 3 4 Source: How to Build an Enterprise Cloud Service Architecture, Gartner, Published: 5 March 2012

12. What Are The Challenges?The CIO’s Dilema You're being forced to choose "Cloud First" and to reuse existing security approvals, even if that makes you uncomfortable You need access and security controls around the use of cloud You need Cloud service providers to run IaaS you can trust You need to tie into your existing Access, Identity and SIEM on-prem products as you can't afford multiple products to do the same thing You need 24x7 365 support from a world-class organization And, you need someone that will work with you directly and through your key General Contractors

13. What is Needed? • Security Baselines • Access Management • Identity Management • SIEM (Security information and event management) • Disaster Recovery • Configuration Management • Process Auditing and Monitoring Source: NIST Special Publication (SP) 800-37, as amended, Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach

14. What is NetIQ Doing About It?Working with SPs Around the World • Continuous Compliance Service Delivery Platform (CCSDP) • Loosely integrated set of management products • Single point of ordering both internal & external services • IS informed by all organizational IT assets and helps to maintain visibility into the security of the assets; • Ensures knowledge and control of changes to organizational systems and environments of operation; • Maintains awareness of threats and vulnerabilities.

15. Where Do I Start? • We can drive your internal infrastructure to a state where you can make the leap to cloud safely • Migrate, Cloud Manager • SIEM and NOC dashboards • We can secure your computing once the firewall is gone • SIEM, NCSS, IDM, App Manager • We can offer the cloud experience that your internal consumers are demanding • Cloud Manager/NOC/SIEM/Protect Integration We can use the cloud to offer short Recovery time objective (RTO) — the time it takes from the time of the disaster to the time of service restoration and access by customers. • Protect

16. NetIQ IT Operations ManagementA Full Set of Solutions to Solve Your IT/Business Challenges Access Planning & Visualization Runbook Automation & ITPA Service Dashboards Reporting & Capacity Planning Access Request Federation or Trusted Authentication Service Ordering & Provisioning Roles Management Service Governor Service Management End to end Service Management Service Level Management Correlation Runbook Automation & ITPA Discovery & Migration Business Service Management Predictive Alerting End User Experience Monitoring Resource Management Compliance Windows Monitoring Linux / Unix Monitoring Backup & Recovery Event Management Network Monitoring Log Management

17. Key Take Aways • Speed of business is accelerating • The impact of various cloud types makes things more complex and changes the level of discussion • Timeframe for service delivery, Securing people and services is shrinking from a year to days. • IT is challenged to address the speed of business and must regain control • One product doesn’t address the challenge, you need to elevate the discussion to the strategic level

18. Ease of doing Business Customer Value Excellent Technology Exceptional Service