SOLUTIONS. Secure Infrastructure as a Service for Production Workloads

Transcription

1 IaaS SOLUTIONS Secure Infrastructure as a Service for Production Workloads

2 THE CHALLENGE Now more than ever, business and government are facing the challenge of balancing conflicting demands. Market pressures to become more agile and innovative must be addressed while conserving capital and lowering overall operational costs. Today, solutions need to accelerate time to market and maintain the flexibility to adapt to uncertainty and rapid change while providing the scalability and reliability to deal with growth. Infrastructure as a Service (IaaS) addresses today s challenges by delivering compute, storage and network resources as a service. IT business as usual is no longer an option. It is not only the cost of power and space, personnel, management and maintenance that is driving the need for change. Organizations today must be able to react quickly to changing requirements and market dynamics. More virtualization alone is inadequate to meet today s challenges. Agile organizations require IT to deliver IaaS to accelerate cycle time, eliminate IT barriers to innovation, streamline operations and preserve capital: Accelerate Cycle Time. Scale IT resources on demand, and expand and contract resources as needed; react to market challenges, competition and opportunities more quickly. Innovate. Mitigate risks and improve return on investment for new business initiatives by eliminating the IT barriers and hurdles required for additional capital or resources. Align IT with Business. Reduce waste of under-used resources, and refocus IT staff on adding value to the organization instead of maintaining the infrastructure. Preserve Capital. Shift from a capital investment (capex) to an operating expense (opex) model for building and consuming IT services. The advantages of an IT as a Service delivery model are compelling, but security, reliability and integration have prevented many organizations from moving aggressively forward. Now business and government organizations can capture the advantages the cloud delivers with an IaaS solution that is built to securely support production workloads CSC IaaS. CSC ENTERPRISE CLOUD IaaS SOLUTIONS CSC Cloud IaaS delivers secure, reliable and elastic public, private and hybrid clouds for the enterprise. Our enterprise cloud services CSC CloudCompute, BizCloud and BizCloud VPE, all VMware vcloud Datacenter Services are built to support production applications as well as quality assurance and development environments. Our enterprise cloud services deliver convenient, on-demand network access to a pool of compute, storage and network resources. They deliver a highly resilient, standardized cloud platform, security and network services, as well as resource and service management using a converged cloud infrastructure, leading technologies and innovative CSC intellectual property. We have incorporated CSC managed services and cybersecurity best practices honed from more than 50 years of experience in providing highly secure, high availability infrastructure services to global commercial enterprises and government organizations. CSC provides choices to meet your application needs. Choices that will allow you to match each of your applications with the right cloud deployment, service level tier and management option. Choices that let you gain the greatest economies while meeting your requirements for availability, security, resiliency and portability. CloudCompute delivers compute, storage and network resources as a service with leveraged resources in a multi-tenant environment from CSC Cloud Data Centers. Dedicated Virtual Private Network connections and VLANs are available. BizCloud is a private cloud delivered from the customer s choice of premises with dedicated resources offered in a consumption, opex-based model. BizCloud can be deployed in the customer s data center, a collocation center, or from CSC Cloud Data Centers. 1

3 CSC Infrastructure as a Service Designed to support any x86 applications for any deployment model BizCloud VPE (Virtual Private Edition) is a hosted private cloud that delivers dedicated compute and network access with logical segregation of storage, deployed from CSC Cloud Data Centers. BizCloud for Government offers federal agencies an on-premises private cloud to achieve the environmental controls necessary for the FISMA C&A process. We use the same hardware and software stack and a consistent management discipline across all our cloud deployment models to allow federated cloud operation and simplify the implementation and management of a hybrid cloud. Our IaaS cloud offerings include a portal that provides operational transparency into the service; pre-configured service catalogs to rapidly build and manage multiple application environments; and cloud orchestration for developing and managing operational processes. From the CSC cloud portal, you can access your enterprise s cloud service catalog from which application platforms and operating system servers can be selected for use. With the portal, you also gain visibility into your cloud s usage and service performance for ongoing operations, security and budget management. Cloud orchestration automates life cycle and workflow tasks, enables rapid configuring, provisioning and decommissioning of resources, and supports service management requests for activities such as security scans, backup and restore, and image loading. CSC IaaS offers the security, backup, disaster recovery and high-availability options to support office productivity and line-of-business and enterprise applications. You can manage your cloud, or you can choose to have CSC manage it for you. With CSC management, we support you in building out your virtual environment. Then we run and maintain it for you, providing patch management, software distribution, VM monitoring and threat protection. If you choose a high-availability service support level, you have three disaster recovery options to choose from with recovery point and recovery time objectives to meet your needs. Our enterprise cloud provides the ability to select, for each application deployed, the tier of service support, storage tier and disaster recovery option that best matches the application requirements. You have the choice of four service levels, with availability guarantees from 99.0% to 99.95%, three options for storage enabling cost-effective support for archive and high-volume transaction data, multiple backup options and disaster recovery alternatives. 2

4 CHOICES TO MEET YOUR NEEDS CLOUD DEPLOYMENT MODEL CHOICES CLOUDCOMPUTE Leveraged Resources Client Data Isolation Dedicated VPN/VLAN Option Deployed from CSC Cloud Data Centers BIZCLOUD VPE Dedicated VPN and VLAN Dedicated Compute Capacity Logically Segregated storage Deployed from CSC Cloud Data Centers COMPUTE CAPACITY Completely Segregated Dedicated to One Client Up to 200% Headroom Capacity Deployed from Your Data Center or Ours Same Cloud Fabric and Standard Rate Card. Billed as a Service across the deployment models. MANAGEMENT CHOICES SELF-SERVICE 99.0% Availability 99.5% Availability CSC MANAGED 99.9% Availability 99.95% Availability DISASTER RECOVERY OPTIONS RECOVERY POINT OBJECTIVES/RECOVERY TIME OBJECTIVES 24/28 Hours 8/24 Hours 1 Hour/4 Hours STORAGE TIER CHOICES STANDARD 100% NL SAS 1,400 IOPS* SELECT Flash (5%) and NL SAS (95%) 1,875 IOPS* PREMIUM Flash (6%) and SAS (94%) 13,750 IOPS* *Performance calculations are based on random, non-sequential input and output operations assuming a blend of 50% read and 50% write operations RESILIENT AND SECURE INFRASTRUCTURE CSC IaaS is built on the VCE Vblock platform, a powerful and fully integrated cloud fabric that combines the leading virtualization software from VMware; unified networking, security and management technologies from Cisco; and storage, security and management technologies from EMC. The VCE environment is enhanced with the VMware vcloud Director, vshield and vsphere products to secure the cloud end to end, from the edge to the endpoint. Collectively, these technologies enable: Encryption of VPN traffic entering and leaving the CSC cloud Use of VLAN within the cloud to separate and protect traffic and data Firewalls or virtual firewalls between organizations and between virtual applications in the organization s cloud environment Protection against network-based threats network intrusion protection Active Directory integration for authentication and security policies Group and role-based access control (RBAC) Technologies alone, however, are not enough for a secure, resilient enterprise cloud environment. We combine leading, proven technologies with CSC processes and best practices developed and fine-tuned on the basis of more than 50 years of global managed service experience. Our CSC Cloud Controls Program covers areas such as compliance, data governance, facility security, risk management and information security. With our cloud infrastructure, each and every component that has the potential to affect service performance has a failover mechanism in place. For example, dual redundant power distribution units in the cloud rack ensure that a single individual power supply failure will not affect system availability. Many infrastructure components carry multiple power sources to enable failover to a secondary power support without affecting system availability or performance. CSC IaaS is protected by our defense-in-depth security framework, which delivers the physical and logical security, access control and data integrity options needed to support mission-critical customer-facing and back-office applications. All our IaaS offerings provide client or department data isolation and 24x7 incident response, virtual firewalls and network intrusion protection systems (NIPS) monitoring as standard features. Optional security services include 3

5 antivirus, vulnerability scanning, host intrusion prevention systems (HIPS) and CSC Audit Log Assurance Service. CSC Audit Log Assurance supports companies obligated to comply with government mandates such as Sarbanes Oxley and the Gramm Leach Bliley Act (GLBA). This CSC service ensures that all vital network and system logs are centrally stored, correlated and analyzed by our team of security experts to increase our clients ability to track infrastructure resources across their entire enterprise. CSC s Cloud Protocol facilitates the transparency of services delivered from the cloud. With transparency into our cloud, CSC is able to mitigate concerns over the loss of visibility that typically occurs when applications and data move from a client s on-premises-based solution into a public cloud. Examples of information shared by using the Cloud Protocol include current configuration, data location, access rights and history, and event logs. The Cloud Security Alliance, chartered to promote the use of best practices for providing security assurance within cloud computing, integrated CSC s Cloud Protocol as a pillar of its governance, risk and compliance (GRC) stack. Our commitment to full implementation of the Cloud Protocol distinguishes us as a leader in conforming to Cloud Security Alliance standards. 10 WEEKS TO A PRIVATE CLOUD CSC BizCloud, a VMware vcloud Datacenter Service, is the first and only private cloud billed as a service from a standard rate card that is ready for deployment in just 10 weeks and is deployed from the customer s choice of premises. BizCloud combines the privacy, security and control of a private cloud with the elasticity and convenience of a public cloud. It is an ideal solution when security and compliance concerns prevent workloads from leaving the data center. BizCloud is installed in a data center of your choice with the network security your organization has in place. Service options available for CloudCompute and BizCloud VPE are also available for BizCloud. With BizCloud, we captured our cumulative experience in standing up worldwide commercial cloud data centers. We combine the powerful cloud fabric and the security required for trust and transparency with our proven expertise in onboarding and managed services to deliver a ready-made private cloud billed as a service. BizCloud arrives preintegrated with a portal providing full transparency into the service; preconfigured service catalogs uniquely configured for your enterprise; and cloud orchestration capabilities for automation of operational processes. We provide the knowledge transfer necessary for you to run and manage your private cloud; or, if the convenience of a managed cloud is required, that option is available. TEST-DRIVE YOUR CLOUD CSC s Smart Start program allows you to minimize risk and avoid up-front capital investments while accelerating your discovery and realization of the benefits of the cloud. Smart Start is a hands-on cloud proof-of-concept (PoC) program that lets you test-drive the cloud and gain the experience you need to make informed decisions. CSC Cloud Holistic CSC Defense-in-Depth Security Framework Data/Service Integrity Scheduled and ad hoc security scanning* Backup and restore services* Security incident response 24x7 Annual SAS 70 Type II review Antivirus services* Physical Security Access-controlled Tier 2/3 data centers Servers in secure suites or cages Video surveillance monitored 24x7 Personnel background checks Multifactor authentication Separation of staff duties Transparency Physical Security Logical Security Data Integrity AccessControl Logical Security Hypervisor isolation for network adapters Network intrusion detection Cloud infrastructure protection services Cloud guest VM protection services ITIL standards Access Control Authentication, authorization, and access management Audit Log Assurance* Secure VLANs Virtual and network perimeter firewalls * Optional Services 4 * Optional Services

6 MOVE YOUR SAP TO THE CLOUD Our CSC Cloud Infrastructure Utility (IU) for SAP accelerates upgrade and deployment of SAP environments by providing a complete, ready-to-use managed service that provides the SAP infrastructure, Basis support and a menu of modular service choices to support all SAP environments. Cloud IU for SAP incorporates all aspects of an SAP infrastructure, including compute, storage, backup/restore, disaster recovery and SAP Basis Layer services. SAP Basis support covers all run-time operations so that you can refocus your staff on more critical business priorities. CSC Cloud IU for SAP is built on IaaS to deliver a secure, reliable and resilient infrastructure. Like CloudCompute, CSC Cloud IU for SAP can be delivered by using dedicated or leveraged resources from CSC Cloud Data Centers or as a private cloud with CSC BizCloud in your data center or ours. CSC s proven expertise in SAP, managed services and cybersecurity makes us uniquely qualified to deliver an endto-end SAP solution. We are one of the world s largest SAP implementation companies, with more than 6,500 dedicated SAP consultants in 50 countries. CSC is an SAP global services partner, SAP s highest level of partnership, an SAP global certified cloud services, managed hosting and applications management solutions provider, as well as a leading BusinessObjects BPC implementer. CLOUD-ENABLE YOUR APPLICATIONS The CSC ACE Factory provides a fast, predictable and economical path to develop or transform your applications for the cloud. With the ACE Factory, applications are built to take advantage of the cloud infrastructure, and legacy custom and mainframe applications are quickly transformed to run in the cloud. The ACE Factory begins by assessing each application to identify the optimal treatment for development or modernization. Then, we develop, rebuild or refactor the application by using the Azure, Force.com or VMware vfabric frameworks. We use our standard, industrialized processes to speed transformation and provide for high-quality application delivery. THE CSC ADVANTAGES Gain the CSC advantages of innovation and choice, security and delivery excellence, and end-to-end application services. Innovation and Choice Let the workloads guide your choices for cloud deployment, service tier and management Deploy a private cloud in your data center in just 10 weeks Simplify hybrid cloud deployment and management with consistent IaaS onsite and offsite Security and Delivery Excellence Be confident with the security embedded in our processes, tools, infrastructure and delivery Gain experience from more than half a century of global enterprise-grade service delivery Achieve cloud portability with a Certified VMware Datacenter Services provider End-to-End Application Services Develop, rebuild or refactor applications to fully capture cloud advantages with the ACE Factory Jumpstart cloud initiatives, and provide a no-risk PoC with CSC s Smart Start program Refocus your IT resources: Ask CSC to manage and maintain your cloud applications CSC COMMITTED TO YOUR SUCCESS With more than 50 years of system integration experience, we understand the enterprise. Customer-centric and platform independent, we help you select the best technology. Security is an integral component of all our offerings, processes and systems. Our high level of support helps you minimize risks. FIND OUT MORE NORTH AMERICA cloud@csc.com Call: EMEA eur_busdev@csc.com Call: +44(0) AUSTRALIA talk_to_us@csc.com.au Call: +61(0) ASIA asia_busdev@csc.com Call: Computer Sciences Corporation. All rights reserved. CSC, CSC CloudCompute, CSC BizCloud, CSC Cloud IU for SAP and CSC ACE Factory are all CSC logos or trademarks or registered trademarks of CSC. All other product and service names mentioned are the trademarks of their respective companies. P /12 5