Cloud Inevitability? Alternative Considerations and Perspectives

• Continue to strengthen premise-based services and maintain current investment and staffing patterns.

• Begin leveraging cloud services for PaaS and SaaS opportunities with government cloud contract providers.

• Consider migrating to IaaS for critical government infrastructure services.

• Begin developing and rewriting existing agency applications so they are optimized for leveraging cloud services stacks

Ten Cloud Preparedness Considerations• Business, focuses on identifying, measuring and creating business value

using technology services.

• Product considers what services agencies are providing to customers and looks at why, what, how, who, where and when services are provided.

• Cost considers careful analysis of the existing real costs of doing business. What kind of budgetary room for change is possible?

• Value considers what added values might be available if services were deployed differently with improved usability and reliability.

• People considers organizational capacity, capability and management required to implement change.

Ten Cloud Preparedness Considerations• Business, focuses on identifying, measuring and creating business value

using technology services.

• Product considers what services agencies are providing to customers and looks at why, what, how, who, where and when services are provided.

• Cost considers careful analysis of the existing real costs of doing business. What kind of budgetary room for change is possible?

• Value considers what added values might be available if services were deployed differently with improved usability and reliability.

• People considers organizational capacity, capability and management required to implement change.

Ten Cloud Preparedness Considerations• Maturity perspective can help assess the organization’s ability to

prioritize and sequence initiatives to develop execution roadmaps.

• Platform focuses on describing the structure and relationship of technology elements and services in complex IT environments.

• Process looks at processes for managing portfolios, programs and projects to deliver expected business outcome.

• Operations focuses on the ongoing operation of IT environments, operating procedures, services, change management, and recovery.

• Security emphasizes the methods for government to achieve risk management and compliance goals.

Cloud Deployment Lesson #1: Federate Identity to the Cloud

Cloud Deployment Lesson #2: Service Levels & Responsibilities Differ

More Cloud Deployment Lessons• Lesson #3 Move Applications not mess and complexity. Be careful

with “Lift and Shift” projects.

• Lesson #4 Monitor and report performance of Cloud Apps and Vendor Services.

• Lesson #5 Be sure you understand what is required to run your app today. Be aware of your own app coddling processes.

• Lesson #6 Be sure you are comfortable with disaster recovery, backup and security capabilities for your cloud vendors.

• Lesson #7 Understand how to right size and optimize cost and value with cloud deployments.

Michigan Digital Strategy

Cloud First, Mobile First

Tiziana GaleazziGeneral Manager

State of Michigan - DTMB

January 25, 2017

Michigan Digital Strategy

• Launched in 2014• Provide digital services where,

when and how employees, businessand citizens need them

Cloud First Strategy Mobile First Strategy Cyber Security Identity Management Enterprise Information

Management (EIM)

Customer Centric Governmentmichigan.gov/digitalstrategy

Cloud First

Cloud First Program - the way we do business

Virtualization First Initiative

Microsoft Office 365 Migration

Next Generation Digital Infrastructure (NGDI)o Illinois / Michigan - Medicaid

Management Information System

Mobile First

Mobile First Program – improving customer service

• Employees and the Workplace Mobile Offices Internal Application Store Mobile Device Management (MDM) Bring Your Own Device (BYOD) Program Mobile VPN Service

• Citizens MiPage app Michigan.gov Mobile Conversions and

Online Services

Michigan’s Citizen Centric Government

www.dlt.com

Assessing Your, Cloud Readiness Factor?

January 25, 2017

What is the Cloud Readiness Factor?

• An online survey to help start and guide your journey tothe Cloud by looking at the 3 big phases:

• Considering–people readiness, plans, frameworks, vendoranalysis

• Continuing—security, application readiness and fit, frameworks

• Committed—funding, acquisition, manage/monitor/run & expand

• You can view and sign up for the CRF at www.dlt.com/crf

1/30/2017 DLT Solutions LLC – Gary Danoff 19

Committed

Continuing

Considering

CRF

Topics covered today:

• Running an Application Here or There – What’s Different?

• What Workloads are Cloud Friendly

• How do you handle security in the Cloud?

• How Do You Size Your Cloud Footprint?

• Can Licenses in Your current Environment Migrate to theCloud?

1/30/2017 DLT Solutions LLC – Gary Danoff 20

1/30/2017 DLT Solutions LLC – Gary Danoff 21

1/30/2017 DLT Solutions LLC – Gary Danoff 22

In a land far away and

long ago, this is what

computing use to look

like!

The benefit of the Cloud is like a slinky.

It can contract and expand as you need it.

Flexibility and agility.

1/30/2017 DLT Solutions LLC – Gary Danoff 23

Running an Application

Here or There—What’s

Different?

1/30/2017 DLT Solutions LLC – Gary Danoff 24

Running an Application Here or There –What’s Different?

• Differences to consider in moving from OnPrem to Public

• Making the move in steps: on prem to hybrid to public• Application Performance Needs: How many CPUs, Memory and

Disk?

• Socialness of Application: What other components of the infrastructure does the application talk to?

• Application Security: How are Authentication and Authorization of the application handled?

• Version: Should the application need to be upgraded to a major or minor version?

1/30/2017 DLT Solutions LLC – Gary Danoff 25

What workloads are Cloud

Friendly?

1/30/2017 DLT Solutions LLC – Gary Danoff 26

What Workloads are Cloud Friendly

• Virtually ANY workload that does or can run on a hypervisor are prime candidates for the cloud.

• Some typical cloud-friendly workloads:• Web and Application Servers

• Email and Database Servers

• Enterprise Resource Planning (ERP) and Customer Relationship Management (CRM) systems

• Many More.

• Legacy workloads/applications can be ported to the cloud with additional discovery and migration steps.

• A typical legacy migration scenario is applications that may run on non-x86 hardware such as SPARC.

1/30/2017 DLT Solutions LLC – Gary Danoff 27

How Do You Handle Security in the

Cloud?

1/30/2017 DLT Solutions LLC – Gary Danoff 28

IMAGINE THE CASTLE IS YOUR DATA CENTER

DLT Solutions LLC – Gary Danoff

NOW IMAGINE THE CASTLE IS IN THE CLOUD

Knock twice

and say “Fe

Fi Fo Fum”

DLT Solutions LLC – Gary Danoff

3

1

AWS SHARED RESPONSIBILITY MODEL

Shared responsibility

changes everything.

Enterprises must adapt

their traditional security

& compliance

processes to address

what’s different in the

cloud.

TAKE NOTE

The majority of

attacks will

happen here at

the API

control plane

DLT Solutions LLC – Gary Danoff

DLT Solutions LLC – Gary Danoff

1/30/2017 DLT Solutions LLC – Gary Danoff 33

How Do You Size Your

Cloud Footprint?

How Do You Size Your Cloud Footprint?

• Where/how is it running today?

• Configuration; local or distributed?

• Type of network connections and speed?

• I/O requirements?

• Storage requirements?

1/30/2017 DLT Solutions LLC – Gary Danoff 34

1/30/2017 DLT Solutions LLC – Gary Danoff 35

Can Licenses in Your current

Environment Migrate to the Cloud?

Can Licenses in Your current Environment Migrate to the Cloud?

• What licenses do you have today for:• Operating Systems

• Applications & Tools

• Network Firewalls & Devices

• Databases

• Desktops

1/30/2017 DLT Solutions LLC – Gary Danoff 36

37