dynamic it – achieving efficiencies leveraging cloud computing · 2020-03-06 · dynamic it –...

Dynamic IT – Achieving Efficiencies leveraging Cloud ComputingMahendra DuraiVice President, IT Infrastructure & Operations

© Copyright 10/10/2010 BMC Software, Inc 2

San Jose, CA, USA

Houston, TX, USA

Austin, TX, USA

Pune, India

Tel Aviv, Israel

Boston, MA, USA

Houston, TX, USAPhoenix, AZ, USA

IS&T’s Customers at BMC

Major R&D Centers

Production Data Centers


Cloud Computing – Definitions & Models

On Demand Service (application, Infrastructure…)

Provisioned in minutes

Available on a pay per use basis

IaaS PaaS SaaS

Infrastructure Platforms Applications

Highly-Virtualized

Highly-Automated

Service-Enabled

Bus. UserDevelopersIT Admin / Developers


Managing SaaS Applications – Monitor & Operate


IaaS - Building the Internal Cloud

R&D Labs for ESM Product Lines

1500 Developers- 100+ concurrent projects- 3-9 month average project duration

6470 Physical Servers

9160 Virtual Servers / 405 Physical Hosts- x86 (Dell)- Unix (Sun, HP, IBM)

500 Terabytes distributed SAN storage


Building the Internal CloudLeveraging Virtualization

Server Utilization > 70% (Prime Shift)


Building the Internal CloudLeveraging Virtualization

Server/Admin Ratios - 540:1 – All - 200:1 – Physical

Virtual-to-Physical Replacement Cost: $30M+


Standardization is critical


Standardization

CPU Memory Disk Space Platform Technology OS APPS

Small 1 2GB 40GB Alpha VPAR HP UX 11.23 Oracle

Medium 1 4GB 60GB HP Itanium VPAR HP UX 11.31 Sybase

Large 2 8GB 100GB HP PA-RISC VPAR Redhat Ent Linux 64 Informix

Xlarge 4 8GB 180GB Power 5 LPAR Suse Linux DB2

Custom X X X Power 6 LPAR Ubuntu Linux MS SQL

Power 7 LPAR Windows 2003 64i SAP

Ultra Sparc LDOM Windows 2008 64i

Ultra Sparc T LDOM Windows 2008 R2 64i

X86 Vmware AIX 5.3

X86_64 Vmware AIX 6.1

Solaris 8

Solaris 9

Solaris 10

Windows 2003

Windows 2008

Windows 2008 R2

Windows XP

Redhat Ent Linux 5.x


Managing the Internal Cloud Quarterly Performance

• 2260 Virtual Servers

• 90% Virtual Servers

• 2043 Virtual Servers

• 1884 requests for new environments

Developer Productivity50% of the requests satisfied in less than 1 day95% of the requests satisfied in less than 5 days

Avoided Cost$1M avoided server expense


Managing the Internal CloudTools

• BMC Capacity Management• BMC Atrium Orchestrator• BMC BladeLogic Ops Manager• vmWare Virtual Center• vmWare Lab Manager• EMC Control Center • BMC Performance Management

• BMC ProactiveNet

BMC IT Service Management


Exploiting Disruptive Technologies

Mgmt Server

Fibre ChannelEthernetEthernet

Typical Data Center Architecture – TodayStorage Virtualization and Stateless ComputingIntegrated Fibre Channel / Ethernet capabilityHigh performance blade serverExpandable Architecture

Cisco UCS – Unified Computing System

FabricInterconnect

Switch


Moving to Hybrid - Leveraging the Public Cloud

Amazon VPC/EC2

BMC Private Cloud

Service RequestManagement

Discovery BMC

BladeLogic

© Copyright 10/10/2010 BMC Software, Inc 14© Copyright 10/10/2010 BMC Software, Inc 14

Managing and Automating the Internal Cloud

8000 Virtual

Servers


Provisioning Efficiencies - Before

• Budgeted• Architectural Fit• Environments

(DEV/QA/PRD/DR)

Approved Projects

• Sandbox• POCs• Transitions

Temporary Systems

• Ticket Creation• Architectural Design• VM Questionnaire

Request & Requirements

Gathering

• Architecture Planning

• Licensing• Build Server Change Request

Capacity/Resource

Availability

• Build Server• Post Build Tasks• Delivery of Server

Build & Delivery

Duration – 7 – 10 Business Days (depending on user responsiveness and time zone differences)

2 Hours Effort

Est. Cost $125

1 Hour 20 Min Effort

Est. Cost $85

1.5 Hours Effort

Est. Cost $80

Total

5+ Hours

Est. $290


Provisioning Efficiencies - After


BMC Business Process Model

CONCEPT TO PRODUCT MARKET TO CASH

Manage Product Portfolio

Manage Projects

Manage Ideas & Concepts

Manage Market & Product Research

Develop and Test Software

Manage Sales Force

Manage Channels

Manage Professional Services

Introduce New Products

Manage Customer Accounts

Manage Contracts

Manage Channel Sales

Process Quotes

Manage Receivables

Process Orders

Manage Billing

FORECAST TO DELIVERY

Manage Purchasing and Payments

Manage Sourcing

Manage Education Services

Fulfill Orders

Manage Licenses & Entitlements

Plan & Execute Campaigns

Manage Product & Pricing Data

Manage Opportunities

Manage Product Lifecycle

Market Products & Services

STRATEGY TO PLAN

Set Goals

Align Organization

Gather Corporate Intelligence

Plan Strategy

Manage Plan

SUPPORT TO CONTROL

Manage Facilities

Information Technology Mgmt.

Legal

ACCOUNT TO REPORT

Audit &Compliance

Customer Billing & Invoicing

General Financial Accounting

HIRE TO RETIRE

Planning & Policy

Source & Select

Manage Treasury Operations

Management Accounting

Develop & Council

Reward & Retain

Redeploy & Retire

ManageInformation

Manage Customer Care

Manage Technology Alliances

LEVEL 1

LEVEL 2LEGEND

© Copyright 10/10/2010 BMC Software, Inc 18© Copyright 10/10/2010 BMC Software, Inc.18

Business Process based Services


Business Process Model based operations


An integrated framework for service management


Services/Application dashboard


The role of Automation


IT Service Support –Conventional work breakdown structure (people/process)

Architecture (Plan/Design)- Long term technology strategies

Engineering (Build)- Service management processes- Project planning and management- Reference technical designs- Capacity, configuration, change management

Operations (Run)- Project Execution- Installation, configuration, testing, certification- Availability, Incident, Problem management

Key ProcessesArchitecture

Engineering

Operations


IT Service Structure

IT Process Automation is a key defense in moving activity/work down or out of the service support structure

Tier 3

Tier 2

Tier 1

In Theory…

Tier 3

Tier 2

Tier 1

In Practice

Architecture

Engineering

Operations


Architecture

Engineering

Operations

Architecture

Engineering

Operations

IT Process Automation at all tiers

Work

Work

Work

BSM allows for the identification and automation of activity that make up IT processes.Makes processes repeatable, reusable and predictable.


Ten Tech Enabled Trends to watch….- McKinsey Quarterly – August 2010

1. Distributed co- creation moves into the mainstream2. Making the network the organization3. Collaboration at scale4. The growing ‘Internet of Things’5. Experimentation and big data6. Wiring for a sustainable world7. Imagining anything as a service8. The age of the multisided business model9. Innovating from the bottom of the pyramid10. Producing public good on the grid


2. Making the Network the Organization

Management orthodoxies still prevent most companies from leveraging talent beyond full-time employees who are tied to existing organizational structures.

Adhering to these orthodoxies limits a company’s ability to tackle increasingly complex challenges.

Pilot programs that connect individuals across organizational boundaries are a good way to experiment with new models, but incentive structures must be overhauled and role models established to make these programs succeed.

In the longer term, networked organizations will focus on the orchestration of tasks rather than the “ownership” of workers.


Automation Initiatives

The Automation Framework- Agenda- Roles

Zero Effort Compliance

Zero Console Operations- Measurable, Consistent, Repeatable, Re-usable


Automation Agenda

Why Automate?- Allows staff to focus on higher value work.- No need to teach support personnel system specific expertise.- Eliminate Operator Errors by employing automated processes.- Automated processes are built on best-practice standards and ensure compliance with corporate policies

and regulatory requirements every time.- Improve operational efficiency through orchestration that bridges tools and organizational silos.- Reduce meant time to repair (MTTR) through accelerated, standardized and policy-based responses to

events.

Benefits- Fewer incidents due to operator error.- Reduced outage time.- Fewer resources spent on repetitive tasks.- TIER-2 and TIER-3 Engineering being performed by TIER-1 Engineers.- Automated Processes.


Automation Framework/ Automation Engineer


Methodology – Closed Loop Remediation


Methodology – Operator Initiated Remediation



BMC has a number of controls and security procedures that require manual activity- These controls are required for SOX compliance- Negative impact for failure to comply- Labor intensive, inconsistent processes



Use BMC Event Manager and Atrium Orchestrator to develop a consistent strategy for compliance and control activities- Integrate with standard processes – syslog, SEM- Use Atrium Orchestrator to automate processes and integrate with common tools- Data base integration, Remedy, email, FTP

Use BMC tools to automate compliance and control processes- Consistent audits - Continuous compliance- Cost effective means for following controls and ensuring compliance

Zero Effort Compliance- Improved audit quality- Protect BMC financial assets



Started with four Information Security SOX controls to automate- Password compliance Some level of automation already existed Good first choice for collecting and reporting on domain controller events

- Network Intrusion Detection Very labor intensive Large amount of data collected and correlated Most benefit

- Data Center Access and Logging Manual process utilizing data from two disparate data centers Requires input from most IT managers Prone to error and delays


Zero Effort Compliance – Leveraging an integrated solution platform

Leveraging an integrated solution platform- BMC Event Manager

Event management Workflow initiation

- Atrium Orchestrator Workflow integration Task execution

- Remedy Task assignment Approvals Reporting

- BMC IdM Identity management Password remediation

- Atrium CMDB Asset definition Notification lists


ZEC - Methodology


GCC833 – Network vulnerability detection

Network intrusion incidents are remediated in a timely mannerRisks- Manual process to analyze incidents- High degree of “noise” – tend to treat as false positive- System owner might not respond- Potential for data loss before system is found and remediated- Possible spread to other internal systems- Possibility of SOX audit failure- Difficult to consistently gather and maintain SOX artifacts



Automate identification, notification, and escalation of incidentsAutomate SOX controls and evidence gatheringCreate repeatable processes for notifying system owners of malware



#1 - Inbound Intrusion Detection event from syslog

#2 - Interrogate the machine in question

#3 - Create a Remedy ticket



Example Remedy ticket generated by this process



Password Management- Annual savings of $51,000- Ensure compliance and evidence collection with no engineering time required- Continuous alignment with policy

Network Intrusion Detection- Annual savings of $52,000- Remove manual steps in IDS process- Faster response to incidents

Data Center Access- Annual savings of $13,000- Automated manual, error prone processes- More detailed accountability



Substantial cost savings- Cost reduction of over $120K on just four controls This includes a learning curve for Atrium Orchestrator and BEM

- Other controls can be similarly automated for additional savings- Developed a number of “foundation components” to be reused on other controls

Improved compliance posture- Monitoring is continuous and is automated- Evidence collection and retention is integrated into the process- Financial and other key assets are continuously monitored

Better use of Tier 2/Tier 3 resources- Free up resources to address other need areas- Eliminate manual, error prone tasks



Total of 30 SOX controls- Information Security - 12- Platform Operations - 5- Business Continuity - 7- Applications - 6- Most of these can be automated

Other Automation Opportunities- CMDB for host owner information - CMDB for certificate expiration and automatic renewal- BladeLogic for compliance drift management and notification via Remedy- BCAC integrated with Remedy for drift detection and remediation- ADDM for network discovery integrated with BEM and Remedy for compliance monitoring of

host deployments


People

Facilities and PowerHardware & SoftwareBenefits• 5000 servers eliminated• $10M saved in h/w + s/w asset management• $3M server costs avoided in labs• $10M reduction in IT labor costs

Benefits• 50% reduction in DC capacity ($10M avoided)• 23% reduction in DC power consumption • 900K lbs of annual CO2 emissions eliminated

Benefits• Server provision times reduced by 50%• FCR increased from 70% to 90%• Service recovery times reduced by 30%

How has BSM impacted the productivity?


The Optimization and Automation payoff

Design (Architecture) Build (Engineering) Run (Operations)


10/10/2010

QUESTIONS

dynamic it – achieving efficiencies leveraging cloud computing · 2020-03-06 · dynamic it –...

Documents