Designing and Implementing Cloud Governance: Cloud, and Cloud Governance, are Emerging Capabilities

Transcription

1 Designing and Implementing Governance:, and Governance, are Emerging Capabilities Eric Marks President & CEO AgilePath Corporation

2 Designing and Implementing Governance Governance Introduction and Overview Governance Defined Governance in a Architecture Roadmap Governance in the Enterprise Governance High-Level Requirements Governance Lifecycle Overview Key Dimensions of Governance A Closer Look at Governance Activities Governance: Avoiding IT Disintermediation How Can IT Organizations Remain Relevant in the Age of? A New Role for IT Organizations? -Centric Leadership Principles Supporting IT in the Age of

3 Architecture and Interoperability Roadmap Vision & Strategy Governance Model Governance Lifecycle Transition Architecture Evolution & Sustainment Interoperability & Portability Model Reference Model Reference Architecture Prescriptive Architecture Implementation & Deployment 3

4 Computing Adoption Model POC/Pilot Project POC/Pilot Implementation Early Learning & Strategy Input Strategy & Roadmap Bus. Discovery & Assessment Most Industry segments are in early stages of Adoption Strategy & Planning Modeling & Architecture Modeling ( Ref Model & Ref Architecture) Deployment Model Implementation Planning Provider Analysis & Selection Deployment & Provisioning Plan Implementation Reference Implementation Implement Governance & Security Program Go/No Go Program Go/No Go Architecture Governance & Lifecycle Planning Implement Mgt, Monitoring & Support Mobilization & Transition Planning Ecosystem Development & Sustainment Program Go/No Go Feedback, Metrics, Strategy Evaluation Expansion Integration Collaboration Maturity Program ( Program & Mult. Projects) Integration & Interoperability Collab, Composition & Choreography Steady State

5 Five Reasons for Governance Enable Business at Speed and establish a - Centric IT operating model based on the speed, agility and cost of computing Enable appropriate decision-making without friction Integrated with existing Enterprise IT Governance processes, policies, boards and tools Balanced appropriate coverage for key decisions, investments and risks while achieving the benefits of s Proactive to anticipate and prevent Shadow s and Unauthorized activities that expose organizational risks

6 Definitions Governance refers to the decision making processes, criteria and policies involved in the planning, architecture, acquisition, deployment, operation and management of a computing capability The Governance Lifecycle describes the end-to-end requirements of Governance, from planning, architecture and deployment to bursting, switching providers, and offboarding from a

7 A Computing Reference Model (CC-RM) Overview CC-RM framework for discovering repeatable Patterns that address mission needs based on -enabled resources A robust framework for Modeling and Architecture efforts Four supporting sub-models Enablement Model Deployment Model Governance and Operations Model Ecosystem Model Applied in Federal Government, DoD and Commercial Clients

8 Governance Lifecycle & Operations Model 8

9 Risks of Poor/No Governance Security Risks Proliferation and Sprawl (vs. VM Sprawl) Integration (post proliferation) Portability & Interoperability Vendor Lock-In Applications Governance designing and migrating applications to appropriate pattern(s) Lack of Incentives for Consumers to Onboard/Consume resources Shadow IT and Hidden s

10 in an Enterprise Governance Framework Context 10

11 Challenge: Inserting Governance into Existing Enterprise Governance Models Corporate Governance Governance Enterprise/Strategic Governance New Governance Requirement(s) Bus. Ops Governance IT Governance Governance SOA Governance New compliance requirements Revised Investment Planning process Domain Governance Lifecycle/Systems Engineering Governance 11

12 Governance SPOT Framework Scope & Stakeholders Policies & Processes Organizations Tools and Enabling Technologies Governance

13 Scope & Stakeholders Scope: Is the enterprise, business unit, a project-level requirement? Stakeholders: Who owns your? Who is accountable for the decisions, the architecture, the deployment, the operations? Stakeholders: Business, IT, joint? How are they represented in the requirements, onboarding, access/consumption, management?

14 Policies (Decision Criteria) Strategic guidance (formal strategy and roadmap) Enterprise Architecture & Technology policies Acquisition, Contracts & Legal, Vendor Management Security and Privacy, Compliance Operational Policies: Access, Consumption, Bursting, Management, Monitoring

15 Governance Processes Map to Governance Lifecycle Model Strategy & Planning Governance Architecture, Technical and EA Processes Deployment and Onboarding Processes Access, Resource Management, Provisioning, Operational processes Runtime Processes: SLA management, fault alerts, monitoring, alarms, etc.

16 Governance Organizations Consumer Stakeholder Board ( Steering Group?) Obtain input for requirements, services, pricing, accounting and chargeback models IT Executive Team? Cross-functional IT construct to ensure IT governance and oversight of (end-to-end) Operations Team Day to day operations, management, resource management, provisioning, etc. Working Group? Initial start-up activities, R&D/POC Begins the adoption process prior to formalization of strategy

17 Tools of Governance Portal and Self-Service Access Service Catalog Billing and Accounting modules Lifecycle Management Tooling Services Portfolio and Contracts Management Tools Management & Monitoring Tools Application Design and Development for QA and Testing for s and -centric Applications

18 New Tools of Governance Lifecycle Management Tooling Services Portfolio and Contracts Management Tools Management Tools Monitoring Tools SOA Management Tools Application Design and Development for QA and Testing for s and -centric Applications

19 Consumers Providers Governance Decomposition Strategy and Planning Architecture, Design and Deployment ` Acquisition, Vendor Selection & Contract Negotiation ` Resource Provisioning & Management Operations & Runtime Management

20 Governance Lifecycle Overview

21 Strategy and Planning Start Strategy & Planning Business Case Pilot or POC Program Go/No Go Architecture & Standards Solution Design Security Model Integration QA & Test Vendor & Solution Selection Acquisition & Contracts Contract T&Cs, SLA, QoS Defined Deployment and/or Onboarding Access & Consumption Capacity Planning & Dmd Mgt Resource Mgt. & Provisioning Metering, Billing & Accounting Mgt & Monitoring Ops & Support Maintenance, Versioning & Sustainment Contingency Planning Bursting Provider Switching Migration (Pub to Priv) Offboarding Finish

22 Architecture, Solution Design, Integration, Security & Test Start Strategy & Planning Business Case Pilot or POC Program Go/No Go Architecture & Standards Solution Design Security Model Integration QA & Test Vendor & Solution Selection Acquisition & Contracts Contract T&Cs, SLA, QoS Defined Deployment and/or Onboarding Access & Consumption Capacity Planning & Dmd Mgt Resource Mgt. & Provisioning Metering, Billing & Accounting Mgt & Monitoring Ops & Support Maintenance, Versioning & Sustainment Contingency Planning Bursting Provider Switching Migration (Pub to Priv) Offboarding Finish

23 Vendor Management, Acquisition, Contracts & SLAs Start Strategy & Planning Business Case Pilot or POC Program Go/No Go Architecture & Standards Solution Design Security Model Integration QA & Test Vendor & Solution Selection Acquisition & Contracts Contract T&Cs, SLA, QoS Defined Deployment and/or Onboarding Access & Consumption Capacity Planning & Dmd Mgt Resource Mgt. & Provisioning Metering, Billing & Accounting Mgt & Monitoring Ops & Support Maintenance, Versioning & Sustainment Contingency Planning Bursting Provider Switching Migration (Pub to Priv) Offboarding Finish

24 Operations, Management & Support Start Strategy & Planning Business Case Pilot or POC Program Go/No Go Architecture & Standards Solution Design Security Model Integration QA & Test Vendor & Solution Selection Acquisition & Contracts Contract T&Cs, SLA, QoS Defined Deployment and/or Onboarding Access & Consumption Capacity Planning & Dmd Mgt Resource Mgt. & Provisioning Metering, Billing & Accounting Mgt & Monitoring Ops & Support Maintenance, Versioning & Sustainment Contingency Planning Bursting Provider Switching Migration (Pub to Priv) Offboarding Finish

25 Contingency, Migration Planning & Provider Start Strategy & Planning Business Case Pilot or POC Program Go/No Go Architecture & Standards Solution Design Security Model Integration QA & Test Vendor & Solution Selection Acquisition & Contracts Contract T&Cs, SLA, QoS Defined Deployment and/or Onboarding Access & Consumption Capacity Planning & Dmd Mgt Resource Mgt. & Provisioning Metering, Billing & Accounting Mgt & Monitoring Ops & Support Maintenance, Versioning & Sustainment Contingency Planning Bursting Provider Switching Migration (Pub to Priv) Offboarding Finish

26 Governance Includes Many Diverse Requirements

27 Private Governance Internal Service Provider dynamics, e.g. creating service catalogs, behaving as a true Service Provider vs. serving captive IT consumers Defining SLAs, QoS terms and Service contracts for Internal IT/Business consumers Establishing incentive models to come to the Implementing charge backs, fee for service models, other cost recovery models Provisioning resources to internal project teams Migrating legacy capabilities to the The transition from an IT Shop to a Service Provider is not an easy transition.

28 Public Governance Requirements Security, Security and Security Contract terms, SLA and QoS definition Access to and consumption of a variety of resources per Contract Business assurance, continuity of operations, failover Support, Reliability and Trust Portability, APIs, Interoperability, Integration with other internal IT capabilities and resources

29 Hybrid Governance Integrating resources from multiple providers (Internal, external, et al) API Compatibility, Platform Compatibility, Portability & Interoperability Contract T&Cs, SLA and QoS management Security, Security and Security Bursting criteria, Switching, Portability, Interoperability and Integration Management, monitoring and business assurance across entire hybrid environment

30 Hybrid - IaaS Internal Consumer Internal IT Organization External Provider Burst? Compute Compute Storage Storage Internal IT Infrastructure Acquisition, Provisioning and Configuration Management Process

31 IT Disintermediation? Business Bypasses IT Internal Consumer IT Organization External Service Provider Compute Storage Software (aas) Platform (aas) IT Disintermediation Business Consumers bypass IT governance, infrastructure provisioning and acquisition processes Compute Storage

32 Avoiding Disintermediation: The IT Organization of the Future IT must behave as a broker and integrator of IT resources and capabilities External resources Internal IT services Outsourcing services IT must transition into a true business relationship manager working to deliver best-in-class services, solutions and resources regardless of provider IT must be unafraid of external service provider comparisons, and must benchmark against them IT must become a true trusted advisor to the business

33 New Role of IT Leadership: IT Resource Broker Internal IT/ Provider Internal Consumer IT Resource Broker & Business Relationship Manager Compute Storage External Provider SaaS PaaS Compute Storage

34 Future IT & Governance Lifecycle Requirements: A New Role for IT? Enterprise Svcs Computing Strategy Business Relationship Mgt IT Resources Acquisition & Contracts Mgt IT Resource Portfolio Mgt. IT Resources Brokering Integrated Resources Management

35 Avoiding Disintermediation of IT How can IT become/remain relevant in the Age of? How can IT become/remain relevant by adding value to the business? The Resource/Relationship Broker concept is an emerging role in Enterprise Services Computing Combining Business Relationship Management, Portfolio Mgt, Contacts/Acquisition and Resource Mgt into a new IT Strategic Competency

36 -Centric IT Leadership Principles -Centric Leaders will redefine the role of the IT organization based on a model of integrated resource management, -centric governance lifecycle principles, and the relationship management/resource broker model -Centric IT will redefine its role as a unified broker of IT resources, services and capabilities, regardless of the source -Centric IT invites comparisons with 3 rd party service providers to benchmark internal IT capabilities, processes, rates and customer satisfaction -Centric Leaders will establish internal benchmarks for services to compare with those of internal and third party public service providers -Centric Leadership Organizations will achieve superior optimization of IT spending, from internal providers, external/3 rd party providers, and trusted managed services and solution partners -Centric IT will offer highly differentiated business and IT services to internal and external consumers, essentially creating new revenue opportunities and new pathways to innovation -Centric IT Leaders will spur innovation within the enterprise by seeking better, unique and differentiated IT service models, product and services for internal and external customers

37 Things to Do Tomorrow Establish clear, measurable business and IT goals for computing ( Strategy) Align and design your Governance Model to achieve business goals, e.g. Business at Speed, cost reductions, efficiencies, agility Integrate Governance with IT governance processes, policies, organizations and tools (PP/OT) Balance your governance model to achieve speed and capability enablement, without friction and politics Govern s early and often. Governance will ensure realization of business, IT and operational objectives. Risks of poor Governance are dire.

38 Thank You

39 Back-ups/Notes

40 Strategy and Planning Scope & Stakeholders: CIO, Business Stakeholders, CTO, Chief Architect Policies/Decisions Should you adopt? How? When? Strategy and Planning Process Reference Model and Reference Architecture Pilot/POC, Go/No Go Decisions Billing, Accounting, Consumption, Chargeback Models (If needed) Processes: Strategy development, review and vetting process, funding and budgeting Organizations: OCIO, Enterprise Architecture, Business/IT Alignment Tools: N/A

41 Architecture, Solution Design, Integration, Security & Test Scope & Stakeholders: CTO, Chief Architect, Enterprise Architecture, Infrastructure Engineering, Policies/Decisions Enterprise Architecture Security Industry Standards, APIs, Interoperability, QA, Testing, Assurance, Certification/Accreditation Processes: Enterprise Architecture, technology development, systems engineering, QA/Test Organizations: EA, Core Team/Working Group Tools: platform(s), management, QA/Testing tools

42 Vendor Management, Acquisition, Contracts & SLAs Scope & Stakeholders: CIO/CTO, Vendor Mgt, Contracts/Legal, IT Acquisition Policies Acquisition & Vendor Management Legal & Compliance Contracts Management SLA definition and conformance Processes: Acquisition, Contracts, SLA development, Deployment/Onboarding Organizations: IT Acquisition, Legal, OCIO/OCTO, Chief Architect, Working Group Tools: N/A

43 Operations, Management & Support Scope & Stakeholders: Operations Team, Consumers, OCIO/OCTO, Business Stakeholders Policies Capacity planning, Demand Management Bursting Resource acquisition, management, provisioning, capacity management Implementation of Accounting, Billing, Chargeback policies Processes: SLA monitoring, Management, Operations and Support, Escalation processes Organizations: Operations Team, Help Desk, Escalation Tools: management & monitoring tools, problem resolution, case management tools

44 Contingency, Provider & Migration Planning Scope & Stakeholders: Operations Team, Steering Group, OCIO/OCTO Policies Bursting, switching and consumption policies Capacity pricing strategy and authorization levels Provider management, provider migration, offboarding Processes: operations processes, capacity management, bursting processes, oversight and escalation processes Organizations: Operations Team, IT Team, Steering Group Tools: monitoring, management, capacity planning, bursting support