5 Things to Consider when Moving to the Cloud. Dr Chris Folkerd

Transcription

1 5 Things to Consider when Moving to the Cloud Dr Chris Folkerd

2 5 Things Which cloud is right for me? How do I start to adopt cloud? What are the benefits? How secure is cloud? What questions should I ask?

3

4 Which cloud is right for you?

5 Forms of Cloud PUBLIC Shared resource Cost effective Scalable PRIVATE Guaranteed resource Completely customisable configuration Eliminates noisy neighbour Extreme performance HYBRID Incredibly flexible architecture Best of both worlds Expansible network topologies SaaS/FaaS Very granular and precise functionality Cost effective Designed to Integrate

6 Managed or Unmanaged Managed - 24x7 365 coverage of solution - Reduces internal support footprint - Provides access to specialist hosting skill sets - Allows your business to concentrate on application rather than Infrastructure Unmanaged Complete freedom Solutions how you want them Cost effective Heavily reliant on own IT resources

7 Not all clouds are created equal Consumer or business offering Feature set Effective enforceable SLA Price/cost model PAYG/contract Regulatory compliance Security certifications GDPR ISO PCI Risk profile Availability offerings Location Technological compatibility API availability

8 How do I start to adopt cloud?

9 Cloud is a Journey Pick the right use case Simple services Backups / DR as a Service/Simple VM Services Easy to deploy Simple to integrate into existing on premise solutions. Quickly add value Research and Development Increase development team flexibility Access complex technologies simply and cheaply Decrease solution time to market Better control R&D Costs Production Systems Warehousing system Client front end + DB in the cloud Warehouse and shipping systems on premise Provides low-latency to all users Infrastructure resiliency/scalability Full Cloud Native Transition Transition of applications to SaaS offerings API/ Automation driven Automatically resilient and scalable

10 Cloud is a Journey The Multi-cloud Approach Multi-cloud Scalability Backend vs Front end cloud Differing back end and front end providers Elastic scalable web tier Rock solid highlight available application/ DB tier Prod vs Dev Split Production on Enterprise/ Contract Cloud Dev on PAYG cloud Multi-cloud DR Active/Active Spanning Multiple Cloud Providers Complete supplier redundancy Tiered Offerings (CDN ontop of cloud) Flexible Pick and Mix approach to cloud services Different Tiers from different providers CDN/DDoS Mitigation/WAF

11 What are the benefits?

12 What are the benefits? Granularity of adoption Increased speed to market Reduction in risks of adoption Flexibility / Scalability where it counts Reassurance of Control Low latency at the business and consumer interface Increased, easy access to advanced technologies Decreased costs and better control of cost centers

13 How secure is cloud?

14 Where is my data? Data sovereignty /Who has legal rights to access my data? Data protection regulations GDPR in the cloud

15 Are you secure? Security in the Cloud Assuming security by default Know the regulations your bound by How shared is shared? Secure the application

16 PCI DSS Cloud used to be a considerable grey area New guidance issued as part of PCI DSS 3.2 in April - Clearly allocates each of the 12 responsibilities between the customer and the cloud provider - Provides advice on segmentation Implementing security controls - Incident response - Vulnerability management Provision for Security as Service (SECaaS) - Antivirus - Web Application Firewalls (WAFs) - IDS/IPS

17 GDPR Shift in the way companies are handling online data 22% reduction in the number of cookies set without consent First fines have already been handed out Liability now shared between you and your cloud provider Substantial fine liabilities 20m or 4% of global turnover

18 What questions should I ask?

19 What questions should I be asking? Does the providers platform meet regulatory requirements What certifications do they poses Where is my data How am I protecting my data Is my architecture secure Are you minimising complexity? Have I made the right architectural choices? Have you picked the right pricing model for you? Have you got a plan in place to manage your transition to the cloud? Do your research, try products out where you can

20 Do I need a partner?

21 5 Things Which cloud is right for me? How do I start to adopt cloud? What are the benefits? How secure is cloud? What questions should I ask?

22 Q&A