Data, Data, Who Has The Data? 13 February 2015 Mari Heiser IBM STSM (Senior Technical Staff Member) Master Certified Architect IBM Cloud Security and Compliance Twitter: @MariHeiser
What is Cloud? The practice of using a remote server or computers hosted on the internet to store, manage and process data rather than on a local server or personal computer. 2
Cloud computing is continuing to transform the way organizations manage their infrastructure 80% of organizations were using cloud services by the end of 2014 Many cloud vendors stand ready to supply clouds to consumers in 2015 and beyond. 3
Cloud requires a change in mindset Logical vs physical Perimeters are dynamic rather than fixed Compliance concerns becomes a shared model between you and your provider Vendor certifications (proof of capabilities) Service type (hybrid, private, multi-tenancy) Data location Workload analysis Data ownership Ability to layer on additional security/privacy controls Incident response/disaster recovery Managed services 4
Look for these certification and/or compliance audits as proof of capabilities : ITAR Certification FedRAMP Certification 5
What is their service model? Do they offer hybrid, private, multi-tenancy or other solutions? Keep in mind, multi-tenant environments often have compliance challenges. Where are the servers located? You should be able to choose the exact location of your servers Do you know the exact location (geographical) your data will be stored? Do you have control of where it will reside? Some cloud services do not give you an option of where your data is physically stored in the world Do you retain ownership rights? Check to insure that your intellectual capital is your own Can the provider access your data? IaaS best case, no but may vary. PaaS depends SaaS likely Will you be allowed to bring your security policies, standards and tools? Best case, you should be able to bring some of your own to enhance what they offer. 6
Build your dynamic cloud on SoftLayer Complete control, access, and transparency Seamless fault-tolerant, multi-site topography Single-tenant and multi-tenant environments Complete portfolio available on demand in all data centers 7
SoftLayer offers a broad portfolio of infrastructure choices for greater business agility Bare metal with your own stack For high input and output (I/O)- intensive apps, databases, big data Shared virtual environment For unpredictable, seasonal or research and development workloads Dedicated virtualized environment Designed to be ideal for enterprises Build and customize the environment based on what you want to achieve Fine-tune to meet changing business needs or respond to competitive pressures Additional services for compute, storage, network, security, platform management and big data are available 8
SoftLayer currently holds certifications and/or is compliant with: In place now: SOC1, SOC2, SOC3 ISO/IEC 27001 Certification Managed to NIST800-53 FFIEC Ready Privacy Standards Self Assessment PCI DSS v3.0 AoC HIPAA Ready In progress due in 2015: 9 FISMA Moderate FedRAMP Certification ITAR Certification (FedRAMP Only)
SoftLayer s Global footprint allows regional data residency controlled by the customer London Amsterdam Frankfurt Paris India China Hong Kong Tokyo Seattle San Jose Los Angeles Houston Denver Dallas Mexico City Montreal Toronto Chicago New York City Washington D.C. Atlanta Miami Singapore Brazil Sydney Melbourne 10 DATA CENTER & NETWORK POINT OF PRESENCE PLANNED DATA CENTER & NETWORK POINT OF PRESENCE NETWORK POINT OF PRESENCE IPv4/IPv6 dual stack Global DNS Global DDOS Mitigation Global Internet Exchanges & Peering
Useful Links go here to learn more and get smart, fast! https://engage.vevent.com/index.jsp?eid=556&ecid=66663 SoftLayer Fundamentals Training webcast replays Eleven separate 60 min models; Lessons 5 - Keep safe securing your SoftLayer virtual instances and a replay of this presentation http://blog.softlayer.com/2014/softlayer-security-questions-and-answers SoftLayer Security: Questions and Answers (SoftLayer Blog post - Darrel Haswell) https://www.youtube.com/watch?v=t9h2cxwcuva Lance Crosby, CEO SoftLayer IBM PartnerWorld Leadership Conference 2014 General Session https://www.youtube.com/user/softlayer Data center tours DAL05, Amsterdam Power and network videos www.softlayer.com/datacenters Information about all data centers www.softlayer.com/networks Information about networks including transit, peering status http://lg.softlayer.com Looking glass full visibility into network connections, status and latency http://sldn.softlayer.com SoftLayer Developer Network Home of all the documentation you need for leveraging the SoftLayer API http://knowledgelayer.softlayer.com/ SoftLayer Knowledgelayer, your single stop for learning more about all things SoftLayer. http://www.softlayer.com/press/release/2122/ Press release: Gaming companies flock to SoftLayer s cloud, adding to 130 million players worldwide 11
Thank You! 12