Thanks to Chris Birmele from Microsoft Australia for presenting at the Australian Test Managers Forum 2014. If you would like any information on TMF please email tmf@kjross.com.au

1. Risks in the Cloud
KJ Ross Test Management Forum 2014
Chris Birmele
Product Technology Specialist
Microsoft Australia
cbirmele@microsoft.com

2. Why the cloud?
App provisioning, deploying Adjust to actual needs, up/down Pay as you go for what you use

3. Cloud Platform Computing Models

4. What are the risks?
Risks?Data security (privacy, integrity)? Availability?
?
on prem cloud
Impact
Probability
Risk Profile
Risk profile is similar
BUT probability and
impact are significantly
different.

5. What are the risks?
Risks?Data security (privacy, integrity)? Availability?
Impact
Probability
Risk Profile
Risk profile differs across
Cloud Computing
Models

6. Example: Scalability Risks
Applications don’t scale infinitely, you need to design for it …
?

7. Example: Storage Options
Storage
Storage Accounts
BLOBs Tables Queues Azure SQL Azure Cache Azure Backup HD Insight
Infrastructure
Networking
Application

8. Storage Accounts
Storage Account
Container(s)
•BLOBs
•Tables
•Queues
Size
Max size per account 200TB
Max accounts per subscription 20
Performance
Request Rate (1KB objects) 20’000
Ingress (inbound requests)
- Locally Redundant
- Geo-Redundant
10 gigabits/sec
5 gigabits/sec
Egress (outbound requests)
- Locally Redundant
- Geo-Redundant
10 gigabits/sec
15 gigabits/sec
Redundancy
Locally Redundant (LRS) Yes
Geographically Redundant (GRS) Yes
Read-Access Geographically Redundant Yes
Type Usage
Block BLOBs Large amount of unstructured data. Scalable, cheap.
Page BLOBs Optimised for random access and frequent updates
Tables Large amount of semi-structured data
Queues Persistent messaging
SLA
Availability 99.9% to 99.99%

9. Managing Risks
TRUST your cloud provider!

10. Cloud Risk Decision Framework
Variation of existing standard - ISO 31000
• Identify Risk
• Analyse Risk (probability & impact)
• Evaluate Risk
Greg Stone - Chief Technology Officer Microsoft Australia
Pierre Noel - Chief Security Advisor, Microsoft Asia
http://download.microsoft.com/documents/australia/enterprise/SMIC1545_PDF_v7_pdf.pdf

11. © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft,
and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
Thank You