Cloud - Do It Right!

"Do It Right!" This article was inspired by one of the DNA attributes of my current company - BMC Software! With so much of hype around the Cloud and every organization wanting to move to the cloud, it has become imperative to understand how to implement a cloud strategy in the right way. The Cloud marketplace is becoming more and more crowded making it more challenging for the CIOs to select the right cloud vendor with the right mix of services & capabilities. The cloud services are also moving up the value chain and into the enterprise computing realm, thereby increasing the stakes! The selection criteria for a Cloud Vendor is shifting from price advantages to things such as security, reliability, scalability, control and a trusted vendor relationship. A great focus is also being emphasized on how the End User Experience is.

Cloud computing must be enabled with effective security, resiliency, service management, governance, business planning and the end to end lifecycle management with extensive compliance reporting & auditing capabilities. These are the components of an effective and comprehensive cloud architecture that will enable the enterprise to control the environment more effectively, optimize productivity, reduce the associated labor costs and ensure a safe environment for business users. Organizations should feel secure with the Cloud services being offered - that's the key!

Basically, the cloud architecture should deliver best practices in a standardized way and should have the following characteristics:

• Should be based on open standards
• Should deliver robust security, governance, compliance and privacy capabilities
• Should combine powerful automation and service management with rich business management functions for fully integrated, top-to-bottom management of cloud infrastructure and cloud services
• Should support the full spectrum of cloud service models, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS) & Software as a Service (SaaS)
• Should enable the flexible scaling and resiliency required for successful cloud economics and ROI
• Should facilitate seamless integration into existing customers’ environments
• Should be based on best practices to enable continuous improvement 

Your Security focus areas for the Cloud services should include:

• Federated Identity Management (OpenID / Representational State Transfer - REST), Authorization & Entitlements
• Auditing & Comprehensive Compliance Reporting
• Intrusion Detection & Prevention
• Secure integration with your organization's Enterprise Security Architecture & Infrastructure
• Secure separation of Subscriber Domains

I have tried to highlight some of the key things to consider before you proceed with your cloud deployment:

1. Strategize & Plan - spend enough time on planning - this may sound so simple, yet you will be amazed at how many people don't do this!
2. Define & Document the Requirements (both functional and non-functional). This should include use cases, roles, processes, approvals, workflows, automation, integrations etc.
3. Prepare the Logical Design of the cloud solution, and yes, get your Cloud Architect & the entire teams involved at every stage with a strong buy-in from the stakeholders!
4. Layout the Physical Design that defines the details of the implementation of your Cloud.
5. Evaluate Vendors who can support your strategy, plans and designs & finalize the one whose infrastructure is capable of handling all of the characteristics mentioned above.
6. Don't forget to negotiate which I am sure you will not!

Then, your arduous journey begins on a "Do It Right" implementation of your Cloud!

Also published on BMC Communities blog - Cloud-n-more