ten steps to transition security applications to the cloud · – sso, provisioning, etc. •...

Avago TechnologiesAvago Technologies

Ten Steps to Transition Security Applications to the CloudApplications to the CloudArcot A-OK at Avago Technologies

Thanh NguSenior Manager,

Global ITSeptember 13, 2010


Agendag

• Introduction• Pre-Cloud Avago Environment• Cloud Solutions for Avago• Ten Steps to Transition to Cloud Computing• Questions and Answers

Avago Technologies Restricted


Introduction

• Avago Technologies Overview:• Provider of semiconductor devices, components, and subsystems • >30 yrs history• 4 Markets:

Wi l i ti• Wireless communications• Wired infrastructure• Industrial and automotive electronics• Computing peripherals• Computing peripherals

• Primary Locations:• America: San Jose, Fort Collins• Asia: Singapore Malaysia Korea Japan ChinaAsia: Singapore, Malaysia, Korea, Japan, China• Europe: Germany, Italy

• Thanh Ngu’s experience:• HP Agilent Avago


g g• Web apps, SSO, Google Apps, Arcot


Pre-Cloud Avago Environmentg• Messaging and Collaboration Environment

• MS Exchange 2003 • MS Exchange 2003 • About >4,000 email addresses• Mailbox size

2GB for VIPs 200MB for the rest– 2GB for VIPs, 200MB for the rest• Blackberry users

• Internal SPAM filter

• Oracle Portal

• Oracle Messenger

• Security Application Environment• Active Directory

O l A li ti S Si l Si O• Oracle Application Server Single Sign-On• VPN with token card for authentication



Cloud Solution for Avagog• Google Apps Premier Edition

• Mail, Calendar, Contact, Talk• Docs• Sites• Video

• Postini• Message Security• Message Discovery

• Mobility Services• BlackBerry & iPhone

• Security Services• Active Directory• Oracle Application Server Single Sign-Onpp g g• Arcot Multi-factor Authentication for Google Apps & VPN



Ten Steps to Cloud Computing

1. Current assessment

p p g

• Business competitive 2. Clear requirements3. Sponsorship

Business competitive advantage

• Efficiency/productivity assessment

4. Evaluation and POCs5. Legal and security approval

assessment• Financial impacts• Security risks

6. Integration (Design/Build/Test)7. Preparation – Configure/Setup/Network8. Support planning9. Organic launch

10. Enterprise cut-over





p p g

• Why Google, Postini, and Arcot?

2. Clear requirements3. Sponsorship

• Why now?• What is good enough?• Integration with corporate apps


Integration with corporate apps – SSO, provisioning, etc.

• Making everyone happy is “NOT the GOAL”

6. Integration (Design/Build/Test)7. Preparation – Configure/Setup/Network

the GOAL

8. Support planning9. Organic launch






p p g


• Support from CEO, CFO and Business VPs

• Top down4. Evaluation and POCs5. Legal and security approval

• Top down• Corporate Initiative







p p g• Test as employee, EA, exec,

mobile user, IT support, 2. Clear requirements3. Sponsorship

ppbusiness support, etc.

• Understand the GAP

• Know what is critical and what is 4. Evaluation and POCs5. Legal and security approval

Know what is critical and what is nice to have

• Focus on key and critical functionalities


functionalities

8. Support planning9. Organic launch






p p g

• Local and corporate legal 2. Clear requirements3. Sponsorship

Local and corporate legal requirements/compliances

• Have a website addressing all security questions


security questions• Publish all white papers on

security• You MUST convince them that it


You MUST convince them that it is safe to be in the cloud (at all levels)

• Educate, educate, …8. Support planning9. Organic launch

, ,• APPROVAL from legal counsel

and security officer






p p g

2. Clear requirements3. Sponsorship • Multifactor authentication w/ SSO

• Provisioning & de provisioning 4. Evaluation and POCs5. Legal and security approval

• Provisioning & de-provisioning Process







p p g


• Create accounts• Network setup


• ISP bandwidth• Mail routing configuration







p p g

2. Clear requirements3. Sponsorship4. Evaluation and POCs5. Legal and security approval6. Integration (Design/Build/Test)7. Preparation – Configure/Setup/Network

• Business champions• Site champions

R d f l t b l 8. Support planning9. Organic launch

• Reward for people to be early adaptors

• One or two “supporting” groups






p p g

2. Clear requirements3. Sponsorship4. Evaluation and POCs5. Legal and security approval6. Integration (Design/Build/Test)7. Preparation – Configure/Setup/Network

• Change mgmt – training and communication

• Big bang or Multi phase 8. Support planning9. Organic launch

• Big bang or Multi phase • Migration labs, command center• Network monitoring






p p g

2. Clear requirements3. Sponsorship4. Evaluation and POCs5. Legal and security approval

• Stabilization 6. Integration (Design/Build/Test)7. Preparation – Configure/Setup/Network

Stabilization • Close relationship with users &

cloud providers • Decommission8. Support planning

9. Organic launch

• Decommission• Productivity gains• Cost savings



• Greater security


Ten Steps to Transition Security Applications to the CloudArcot A-OK at Avago Technologies

Q&AQ&AAvago Technologies Restricted

ten steps to transition security applications to the cloud · – sso, provisioning, etc. •...

Documents