CIOs who want to adopt Cloud often come up with questions such as: what will happen to their existing assets?; who will ensure adherence to regulations and compliances for their IT environment on Cloud?; how will the security and privacy of their data be ensured in the Cloud? Kalyan Kumar, AVP & Head, CFS, HCL Technologies discusses two approaches to build a secure Private Cloud. Read to know more.

1. Dataquest Fri, 30 Sep-11 Pg# :78 Size : 995 sq.cm.
Why Building Private
Clouds Makes Sense
T h e r e a r e 2 a p p r o a c h e s t o build a P r i v a t e Cloud—Top D o w n
approach, s t a r t i n g f r o m service m a n a g e m e n t and governance, and
moving d o w n t o w a r d virtualization; t h e B o t t o m Up a p p r o a c h being
vice v e r s a
E
nterprises today are looking at reveal difficulty and confusion when
cloud computing for various scratching the surface. Few questions
reasons—some need to take that often linger in the minds of CIOs
advantage of capex to opex wanting to adopt cloud are:
conversion while others are looking at • What will happen to my existing
streamlining IT Services support and assets?
maintenance. • Who ensures a d h e r e n c e to regula-
From a CEO's perspective cloud tion and compliance for my IT environ-
computing can reduce time for 'Go-to- ment on Cloud?
Market' and eliminate capital expendi- • How to ensure security and pri-
ture; on the other hand, for a CIO it can vacy of my data in the cloud?
provide quick scale-up and scale-down While public cloud is one option
options, savings from maintenance and that provides easy and economical scale
upgrades and enable self service and up and down for compute and platform
increased control. requirements, organizations have their
While cloud computing to some may own reservations in adopting public
seem to be a magic bullet, certain areas clouds that include accountability, SLAs,
24 | September 30, 2011 visit www.dqindia.com DATAQUEST | A CyberMedia Publication

2. and compliance. Public Cloud SLAs and Bottom Up approach, which begins from WHILE PRI-
contracts are vague for which providers virtualization and moves up to govern-
can seldom be held accountable. ance and service management.
VATE CLOUD IS
This leads organizations to look at No matter what approach you take, CREATING THE
an alternate delivery model—Private the most important question to think BIGGEST IM-
Clouds, wherein enterprises can have about is the aspect of service governance
more control and can enforce account- and IT service management on Cloud. Is
PACT, ENTER-
ability. What organizations are looking ITIL still relevant in this new model? If PRISES MUST
from a private cloud is participation by ; so in what shape and form? REMEMBER
different internal departments who can Broadly speaking, ITIL processes like
subscribe and participate in its usage. incident management, change manage-
THAT THERE
Few things to note before adopting a ment, problem management, release IS ALWAYS AN
private cloud: and deployment, etc work the same way ALTERNATE TO
• Maturity of Virtualization in in cloud environment as they work in a
the Enterprise: More maturity leads non-cloud environment. The processes
CREATE ONE'S
to easy adoption. If maturity is less, mostly affected in cloud environment are OWN PRIVATE
organizations can leap frog with the right financial management, service catalog CLOUD USING
approach management, service level management,
• Maturity of ITSM Processes event management, and configuration
REFERENCE
Implemented: Service Catalog, Finan- management. ARCHITECTURE
cial Management, SLA management etc Another important question is around
• IT Organization Culture: A d o p - monitoring and management of IT
tion of private cloud essentially changes environment on cloud. Depending on
how services are delivered internally. which delivery model you eventually
Does the organization have service choose, there will be a difference in the
provider aspects to benefit from private way monitoring and management works
cloud? for the IT landscape. In public clouds it
• Is the Organization mature enough is the operating system and above that
to adopt the ownership model for private needs to be taken care, in private clouds
cloud? it is hardware onwards that needs to be
• Has the Application Assessment taken care.
been done for private cloud adoption? The ideal way to go around this is to
• Bandwidth is a neglected piece have an on-demand model for monitoring
and should be taken care while estimat- and management, wherein users have the
ing costs option to choose services from a service
catalog. An option for start and stop of
Executing the Big 'C' these services as and when required is
Private cloud is being seen as creating also a desired option.
the biggest impact on the way cloud will Cloud means different things to dif-
shape in the coming future. It is there- ferent people. One should have a well
fore no surprise that many hardware/soft- defined objective for adopting cloud. G o -
ware vendors who on their own or jointly ing forward we will see more and more
are bringing their private cloud offerings organizations adopting cloud. One of
to the market. However enterprises must the biggest hindrances for public cloud
remember that there is always an alter- adoption is around security and compli-
nate to create one's own private cloud ance, which makes the case for building
using reference architecture. public clouds very strong. For enter-
Usually there are 2 approaches to prises looking at eliminating concerns
build a private c l o u d — t h e Top Down around security and compliance along KALYAN KUMAR
with maintaining control over their IT The author is the associate vice
approach, which starts from service
president and head. CFS, HCL
management and governance and moves set-up, private cloud indeed might be Technologies
down towards virtualization and the the manna from heaven! • nuiildqindia@cybemiedia.co.in
DATAQUEST | A CyberMedia Publication visit www.dqindia.com September 30, 2011 | 73