Data, Data, Who Has The Data?

Size: px

Start display at page:

Download "Data, Data, Who Has The Data?"

Roderick Stokes
10 years ago
Views:

1 Data, Data, Who Has The Data? 13 February 2015 Mari Heiser IBM STSM (Senior Technical Staff Member) Master Certified Architect IBM Cloud Security and Compliance

2 What is Cloud? The practice of using a remote server or computers hosted on the internet to store, manage and process data rather than on a local server or personal computer. 2

3 Cloud computing is continuing to transform the way organizations manage their infrastructure 80% of organizations were using cloud services by the end of 2014 Many cloud vendors stand ready to supply clouds to consumers in 2015 and beyond. 3

organizations were using cloud services by the end of 2014

4 Cloud requires a change in mindset Logical vs physical Perimeters are dynamic rather than fixed Compliance concerns becomes a shared model between you and your provider Vendor certifications (proof of capabilities) Service type (hybrid, private, multi-tenancy) Data location Workload analysis Data ownership Ability to layer on additional security/privacy controls Incident response/disaster recovery Managed services 4

capabilities) Service type (hybrid, private, multi-tenancy) Data location Workload analysis Data

5 Look for these certification and/or compliance audits as proof of capabilities : ITAR Certification FedRAMP Certification 5

6 What is their service model? Do they offer hybrid, private, multi-tenancy or other solutions? Keep in mind, multi-tenant environments often have compliance challenges. Where are the servers located? You should be able to choose the exact location of your servers Do you know the exact location (geographical) your data will be stored? Do you have control of where it will reside? Some cloud services do not give you an option of where your data is physically stored in the world Do you retain ownership rights? Check to insure that your intellectual capital is your own Can the provider access your data? IaaS best case, no but may vary. PaaS depends SaaS likely Will you be allowed to bring your security policies, standards and tools? Best case, you should be able to bring some of your own to enhance what they offer. 6

Some cloud services do not give you an option of where your data is physically stored in the world Do you retain ownership rights?

7 Build your dynamic cloud on SoftLayer Complete control, access, and transparency Seamless fault-tolerant, multi-site topography Single-tenant and multi-tenant environments Complete portfolio available on demand in all data centers 7

multi-site topography Single-tenant and multi-tenant

8 SoftLayer offers a broad portfolio of infrastructure choices for greater business agility Bare metal with your own stack For high input and output (I/O)- intensive apps, databases, big data Shared virtual environment For unpredictable, seasonal or research and development workloads Dedicated virtualized environment Designed to be ideal for enterprises Build and customize the environment based on what you want to achieve Fine-tune to meet changing business needs or respond to competitive pressures Additional services for compute, storage, network, security, platform management and big data are available 8

virtualized environment Designed to be ideal for enterprises Build and customize the environment based on what you want to achieve Fine-tune to meet

9 SoftLayer currently holds certifications and/or is compliant with: In place now: SOC1, SOC2, SOC3 ISO/IEC Certification Managed to NIST FFIEC Ready Privacy Standards Self Assessment PCI DSS v3.0 AoC HIPAA Ready In progress due in 2015: 9 FISMA Moderate FedRAMP Certification ITAR Certification (FedRAMP Only)

Ready Privacy Standards Self Assessment PCI DSS v3.

SoftLayer s Global footprint allows regional data residency controlled by the customer London Amsterdam Frankfurt Paris India China Hong Kong Tokyo Seattle San Jose Los Angeles Houston Denver Dallas

10 SoftLayer s Global footprint allows regional data residency controlled by the customer London Amsterdam Frankfurt Paris India China Hong Kong Tokyo Seattle San Jose Los Angeles Houston Denver Dallas Mexico City Montreal Toronto Chicago New York City Washington D.C. Atlanta Miami Singapore Brazil Sydney Melbourne 10 DATA CENTER & NETWORK POINT OF PRESENCE PLANNED DATA CENTER & NETWORK POINT OF PRESENCE NETWORK POINT OF PRESENCE IPv4/IPv6 dual stack Global DNS Global DDOS Mitigation Global Internet Exchanges & Peering

11 Useful Links go here to learn more and get smart, fast! SoftLayer Fundamentals Training webcast replays Eleven separate 60 min models; Lessons 5 - Keep safe securing your SoftLayer virtual instances and a replay of this presentation SoftLayer Security: Questions and Answers (SoftLayer Blog post - Darrel Haswell) Lance Crosby, CEO SoftLayer IBM PartnerWorld Leadership Conference 2014 General Session Data center tours DAL05, Amsterdam Power and network videos Information about all data centers Information about networks including transit, peering status Looking glass full visibility into network connections, status and latency SoftLayer Developer Network Home of all the documentation you need for leveraging the SoftLayer API SoftLayer Knowledgelayer, your single stop for learning more about all things SoftLayer. Press release: Gaming companies flock to SoftLayer s cloud, adding to 130 million players worldwide 11

http://blog.softlayer.com/2014/softlayer-security-questions-and-answers SoftLayer Security: Questions and Answers (SoftLayer Blog post - Darrel Haswell) https://www.youtube.com/watch?

12 Thank You! 12

HYBRID CLOUD Why is it important & how do you manage it?

HYBRID CLOUD Why is it important & how do you manage it? TECTONIC SHIFT IN IT 5 How disruptive can the cloud be? 6 7 8 $223B $1B Total Valuation 234 $USD $10B FinTech Innovation 9 Platform to Innovate