Configuration Management Aids Compliance

Transcription

1 Configuration Management Aids Compliance Wednesday, November 9, :00 p.m. Eastern / 10:00 a.m. Pacific Sponsored by Hosted by

2 Conquering Complexity and Compliance with Configuration Management Ronni Colville Research Vice President Gartner Inc.

3 What Are The Drivers? Audit Security Compliance IT Supporting the Business Increased Change Frequency ITIL initiatives IT Service Management

4 Where is the Intersection of Automated Configuration and Change Management? IT End-to-End Service Configuration Management CMDB Federation, Visualization, Integration Change Management

5 The ITIL Dilemma: Which Came First, the Chicken or the Egg: Problem, Change and Configuration Defined processes create a common nomenclature Document workflows and establish appropriate escalation road map Establish postmortem and reporting Management requires evergreen culture Problem Incident Release SLA ITIL Configuration LOB Change Control Change Execution Asset Customers VISA MasterCard American Express End Users

6 What Is a Configuration Management Database? Change workflow control CMDB Root cause analysis and problem identification and resolution Desktops Config. Views of real-time/near-real-time configuration data from silos below Other Network Config. Server/Apps. Config. Event Mgmt. Financial ITAM BSM App. Dev. Dependency Mapping Discovery or integration of discovery of configuration data Federated data store that provides view of configuration items Hierarchical and peer-to-peer visualization of infrastructure components Life cycle view of an infrastructure component (includes financial and contractual associations) Impact/risk analysis

7 Business Service Views: Manual or Magic Middleware Network Storage Web Application OS OS OS OS CMDB Business Service "Container" Mainframe Firewall Ser- Server Server Database OS Credit Card Check Frame Relay Circuit Server Response Time Service Management Viewers Business Service Management IT Service Dependency Mapping Service-Oriented Architecture: Some Are, Some Aren't IT Service Management

8 How Many CMDBs, and Where? Known Errors CMDB Forewarning Incident/Problem Mgmt. CRFs CMDB Change Mgmt. Potential Impact/Environment Data Knowledge of Alteration Configuration Mgmt. CMDB Environment Data CMDB Other Processes: Security Architecture Business Service Management Service Continuity Asset Mgmt. Etc.

9 Governance via Stakeholder Collaboration Committee Responsibilities Configuration management vision Project management and prioritization Funding and infrastructure investment Technical architecture Standards, tools and vendor criteria Measurement criteria Reporting to management Stakeholders IT operations and production engineering Architecture and standards IT asset management IT service desk and change Security and compliance Business applications

10 What Is Your Configuration Item? Sample CMDB Configuration Item Attributes Server Application Component A Hardware Software Software Component B Software Database Category (hardware, software, documentation, other) Version number Location Owner Status Configuration item "parents/children" Software Component C Category (application) Components Version Configuration item "parents/children" Segment by CIs by physical, logical and software.

11 Active Configuration Management Data and Personality Settings Servers Inventory Packaging Image Recovery Usage SD/Patch Provisioning/Imaging Discovery Packaging Audit Compliance System/Software Configuration Patch Desktops

12 Discover the Relationships Service A Service B Service N App3 App1 App1 DB2 App2 App2 Ingres App5 App3 App3 Oracle App4 SQL App1 App5 App5 Sybase

13 Dependency Mapping Agent, Agentless or Real-Time Scanning Blueprints/Models/ Templates Platforms Supported Applications Discovered Custom Apps. GUI and Visualization

14 Do All Roads Lead to a CMDB? CMDB: Emerging Market Sys and Net Mgt Application Development Help Desk Business Service Management CMDB CMDB Desktop/Server Config Mgt IT Asset Management Purchasing Human Resources Facilities

15 Recommendations Cross-organizational alignment is a prerequisite for an enterprisewide configuration management strategy. Change and configuration are inexplicably linked; a successful CMDB will require a comprehensive change process. A configuration management database will have as many as seven or more data sources, and companies should expect to do manual integration for the next three to five years. While developing a CMDB strategy, customers need to keep in mind the role that business service views will have in their environment, and plan for it.

16 ITIL Compliance using Marimba Software Configuration Management Purnima Padmanabhan Director Product Management BMC Configuration Management Product Line

17 How BMC s Change and Configuration Management solutions get you to compliance? Sarbanes SarbanesOxley & other otherinternal internalcontrols What What do do I I need need to to be be in in compliance compliance with? with? COBIT COBIT At At a a high high level, level, what what are are the the specific specific IT IT controls controls that that I I need need to to implement implement to to be be in in compliance? compliance? ITIL ITIL How How do do I I functionally functionally arrange arrange my my IT IT infrastructure infrastructure to to Ensure Ensure COBIT COBIT (or (or other) other) controls controls are are in in place? place? BMC BMCBSM BSMSolutions Solutions What What are are the the integrated integrated technology technology components components that that are are Required for ITIL compliance? Required for ITIL compliance?

18 Enterprises require dual maturity/ competency levels Closed loop change automation L4: Process-based Optimization L3: Process-based Automation (SCM + ITSM) Closed loop software license and asset management L2: Policy Based Automation L1: Element Mgmt (SCM) L2: Best Practice (ITIL) Based Mgmt L1: Process-based Mgmt (ITSM) End user management Self Service Capacity based provisioning Networks Storage Servers Clients Devices Applications Impact based configuration

19 ITIL calls for integrated closed loop CCM The different components of the ITIL Service Support model don t operate in a vacuum They are closely interdependent and integrated For example, Change & Configuration Management must provide tight coordination and ideally be part of an integrated technology stack A centralized CMDB is critical to empower these ITIL subprocesses, and it must be integrated with both the Configuration & Change Management components

20 BMC: Change Process Management + Change Execution Remedy Marimba

21 BMC: Closed loop Asset Management Configuration Management Asset Management Step 3 Track software usage & licenses; install, uninstall software Step 2 Full lifecycle asset mgmt: contracts & financials Step 1 Discovery of all desktop, laptop & server assets Discovery Discovery Express & Marimba Configuration Discovery One centralized repository for all asset data Integration of all inventory (discovery) data into the CMDB Remedy asset to leverage CMDB for environment data Software license management Normalization of applications and suites through a common extensible dictionary Normalization across inventory, asset and DSL Targeting/harvesting based on Remedy asset license reports CMDB Remedy Asset Management Marimba Software Configuration Mgmt.

22 BMC Software Configuration Management Offerings (Marimba) Products for Desktops/Laptops Application Management Extranet Application Management Configuration Discovery OS Management Software Usage Patch Management Products for Devices Application Management Configuration Discovery Integrations & SDK Marimba Integration for Remedy ($0) Marimba Developer Kit Products for Servers Application Management Configuration Discovery OS Management Content Management Patch Management

23 The BMC Advantage Configuration Management (Marimba) Three fundamental concepts that have made BMC Marimba the technology leader Continuous, policy-based management Rapid, adaptive deployment and maintenance without compromising security or scalability Complete heterogeneity platforms, environments and systems

24 Policy Compliance

25 Large National US Retail Grocer License and Regulatory Compliance Only Authorized Software is Allowed Marimba Configuration Discovery manages 3,000 applications for license compliance Categorize (Dangerous, Unwanted, Allowed, Authorized) Dangerous software immediately uninstalled upon detection Insures Anti-virus is updated and installed on EVERY system Reports on repeat offenders/violators Scanner Extension automatically escalates when scanner identifies virus by definition file Single system of record for Regulatory Compliance Finance, IT, HR, in 2,500+ Stores 35,000 Pocket PCs, 31,000 Workstations, 2,500 servers Accommodates hyper-growth/acquisitions (New Chain in 2004 added 200+ stores) Solutions Used Marimba Desktop, Server, Device, Inventory, and Patch Management

26 Questions & Answers Hosted by Sponsored by

27 Thank You for attending today s online seminar, sponsored by BMC Software. Hosted by Sponsored by

28 Attendee Services Download a copy of today s presentation Please give your feedback by completing our optional survey View our calendar of upcoming events A recorded version of this seminar will be available at: Hosted by Sponsored by