Freedom Stairway to the Cloud Offering

Transcription

1 Freedom OSS is the Top Enterprise Cloud Computing System Integrator on the Market today The 451 Group We look at Freedom PST as a full-fledged, strategic partner that can help us deliver quality cloud computing solutions BAE Systems Focusing on two major customer groups for Cloud Computing: Freedom OSS - Enterprises Fortune 1000 / Global 2000 Freedom PST - Government Sector Key Cloud Computing Partnerships #1 Amazon AWS Enterprise System Integrator (Public Cloud) #1 Eucalyptus Enterprise Partner (Private Cloud) 1

2 Freedom Stairway to the Cloud Offering Mission: Enable Enterprises & Public Sector to realize full benefits of Cloud Computing by drastically lowering barriers of entry through a combination of value- add products &services 4 2

3 Why Move to The Cloud? Gartner CIO Strategic Goals 6 3

4 Types of Cloud Com puting Infrastructure as a service (IaaS): Computing infrastructure, such as servers, storage, and network, delivered as a cloud with features such as elasticity, automatic data replication Platform as a service (PaaS): Development platform for which the development tool itself is hosted in the cloud, and the resulting application is deployed as a SaaS Data as a service (DaaS): A SaaS or Web Service exposing a set of aggregated data for access and analytics Software as a service (SaaS): Software deployed as a hosted service and accessed over the Internet Adapted from Wikipedia and others Infrastructure as a Service Advantages Traditional Hardware Virtualization Provisioning Manual Labor Semi- Automatic Infrastructure as a Service (IaaS) Automatic Billing Upfront Cost Allocation Per Use Scalability x1 x10 x1000 Measured SLA on Service Availability 99.99% No Dr No No Yes 99.99% No DR % DR Built In IaaS provides a Service-based, Pay Per Use, Elastic, Flexible on Demand Infrastructure 8 4

5 IaaS in Action Weeks Minutes Improve Productivity Replace Manual Labor with Automation Convert Fixed Cost to Variable Cost Pay-Per-Use Scale Quickly Project Candidates Collaboration DR for Cloud Deployments Non-Prod Environments 9 Achieving Operational Excellence Security & Compliance in the Cloud 5

6 Cloud Challenges Audit Trail Compliance reporting Cloud management procedures Compliance Officer Access Control Data Security Intrusion Detection Inventory Management Governance and workflows Rules and procedures Migrate Migrate Infrastructure Infrastructure Release Management Configuration Automation Change Management Security Chief Officer Operations Manager Application Development Manager Governance Data Security Project billing Business Owner Organization What is?? New York Life quote: By successfully leveraging Freedom's expertise and continuous innovation in Cloud Security, Compliance, Monitoring and Administration, we were able to significantly reduce the time to market of our Mission Critical Applications and reap the full benefits of Cloud Computing. Platform focus areas: Strong Security controls Strong Compliance controls Strong Governance controls Efficient Operational Data Mining Monitoring & Management 6

7 Governance Audit PCI ITIL HIPAA FISMA Customized Compliance Policy Platform Customer Customer 13 Securing Public Cloud for New York Life 7

8 With 2008 revenue of more than US $31 billion, New York Life once again retained its title as the largest mutual life insurance company in the United States. Fortune 500 Industry Data - Insurance: Life, Health (mutual) Rank Company Fortune 500 Rank New York Life TIAA- CREF Northwestern Mutual Massachusetts Mutual Life Insurance Guardian Life Ins. Co. of America Thrivent Financial for Lutherans Western & Southern Financial Group Mutual of Omaha Insurance National Life Group Mutual of America Life Revenues $ millions 31, , , , , , , , , ,772.9 % change since Wealth Planning Platform for Most Affluent Customers 6 Week Deployment Timeline Very stringent Security & Compliance Policies Internal and External Integration with Internal NYL Systems from Cloud Integration with External Vendors Single Sign On Across All Environments 16 8

9 Encryption of Data at Rest Sensitive Data Volume OS 3 2 Encrypting disk before using cloud instances performs full encryption on data volumes with AES 256 to protect data at rest 1 Cloud Virtual Compute Instance Encryption of Data in Transit TDE ******* TDE Transparent Data Encryption is ensuring all network communication between servers and to database data storage is encrypted. 9

10 Key/ Password Secure Vault Vault Safes (Local Drive or SAN) File Encryption Auditing (Visual Security) Dual Control Access Control Authentication Firewall Session Encryption Secured Vault Server Intrusion Detection 10

11 Log Vaulting In order to facilitate auditing and forensic investigation, all logs were vaulted to a single secure server. DDoS Protection AWS firewalls rules can be changed programmatically DDoS solution detects attack and provisions defenses in real- time 11

12 Secure Backups 23 Features Fine grained API Access Control Role Based Access Control using Active Directory Secure Key Management using PKCS 11 and PKCS 15 One Time Passwords Multifactor Authentication Benefits Protect assets deployed in the cloud Manage access control Store keys securely Grant access based on role and needs Detect Intrusion and Abuse Attempts Enable same security policy across multiple cloud providers 12

13 Threat Management Console Cloud Governance 13

14 Release/ Patch Managem ent Automated Patch Detection 14

15 Monitoring Process Flow Ticketing System Integration 15

16 Resolution SLA 32 16

17 Assessm ent Approach Cloud Assessment - Roadmap Standardize Cloud Interaction Operational Excellence Identify or Implement Key Data Services Become Hardware Agnostic Cloud can scale to 1000s of servers but effective management requires governance and expertise

18 Questions?