The document discusses a webinar on cloud computing featuring a panel of industry experts who will evaluate cloud computing and examine issues surrounding adoption such as risks, opportunities, and challenges. It provides an agenda for the webinar covering topics such as cloud computing overviews, delivery challenges, legal challenges, and a panel discussion. The webinar is aimed at helping attendees understand how to evaluate and adopt cloud computing services.
12. The Cloud Computing Continuum
Private Public
Dedicated Multi-tenant
Traditional DC Virtualized DC In-house Private Managed
External Private External Private
physical hosting utility compute Cloud Public Cloud
Cloud Cloud
Capgemini or Cli t H t d
C i i Client Hosted Capgemini H t d
C i i Hosted Partner Hosted
P t H t d
Capgemini Run Partner Run
Capgemini Managed
Apparent Risk
Apparent Cost
It’s all about the applications
Together. Free your energies 12
13. Key Delivery Challenges and Cloud Learnings
Availability: Monitor the performance:
• The provider – monitor and enforce, integrate as any other DC in your network
• Your applications – monitoring the end‐to‐end performance and user experience
pp g p p
Security: Reference architectures
• Don’t accept security out of the box control it!
Don’t accept security out of the box, control it!
• For key Cloud partners, develop several reference architecture templates for
deployment scenarios, have them tested and approved by your security team
Data: Integration and synchronization
• Cloud services shouldn’t be a silo. Changes made to applications need to be cascaded
bi‐directionally between the enterprise and Cloud‐hosted systems.
bi‐directionally between the enterprise and Cloud‐hosted systems
Continuity and Portability
• Data should always be replicated into a second storage pool for continuity
• Future models may focus around brokerages, trading hosting as a commodity
Together. Free your energies 13
20. Cloud Computing Overview
From a legal perspective, the cloud:
– Makes some issues worse
– Creates other issues
– Raises lots of questions
q
– Does not eliminate any legal concerns
20
21. Issues “raining” from the Cloud
All legal data obligations continue to apply
– HIPAA/GLB/Massachusetts/Nevada
– PCI/DSS
– EU Data Transfer Concerns
– Privacy and Security Policies
Import/Export issues
License issues
– Use/processor/location/virtualization
Governing Law Issues
21
22. Issues “raining” from the Cloud
How are these issues addressed in the
cloud?
– Diligence
– Information Security Program
y g
– Sarbanes Oxley Compliance/General audit rights
– Security breach prevention/response/remediation
– Business Continuity/Disaster Recovery
22
23. Issues “raining” from the Cloud
Stability of the cloud provider
– Bankruptcy
– Sale/Consolidation
Insurance coverage for data loss/business
interruption/security breach, et al, within the
cloud
Performance assurances
– Service Levels? Service Level Credits?
23
24. Issues “raining” from the Cloud
Allocation of risk
– Indemnities
– Limitations of Liability
Is termination even less useful than in a
traditional sourcing arrangement?
Statutes in the cloud?
– Computer Fraud and Abuse Act
– Electronic Communications Privacy Act
– Microsoft’s Cloud Computing Advancement Act
24