Presentation at Cloud Security Summit 2021 about complexity of ERP on Public Cloud. As typical example, I am talking about SAP on Azure.

1. CYBERSECURITY ERPPUBLIC CLOUD

3. 3
Cloud Security Summit
Approaching Cloud Risk & Security in 2021
http://nieminen.live
https://fi.linkedin.com/in/petenieminen
@PeteNieminen
http://www.slideshare.net/niemipet/
Pete Nieminen

4. CYBERSECURITY ERPPUBLIC CLOUD

5. WORLDWIDE PUBLIC CLOUD
MARKET 411 B€
NORDIC PUBLIC CLOUD
MARKET 5,6M€
PREFERRED PLATFORMS
AWS 60%
AZURE 31%
GCP 9%
SAP PUBLIC CLOUD GROWTH
GROWS 28% ANNUALLY
81% OF ORGANIZATIONS
HAVE MOVED AT LEAST ONE
PART OF THEIR ERP TO
THE CLOUD
75% OF SAP CUSTOMERS
HAVE SELECTED AZURE AS
THEIR CURRENT OR
FUTURE SAP-PLATFORM
Forbes, Gartner, IDC, Eurostat, Indres, METIS (2020)

6. Flexera 2020 State of the Cloud Report

9. The
Information
Security Policy
(by ISO27002)

10. Digital
Attack
Surface
Sophisticated
Threats
Ecosystem
Complexity
Compliance
ISF 2020

11. 6.000.000.000.000€
Email phishing up 667%, Social media quizzes up 400%, ransomware up 4.000%

12. MOST IMPORTANT DOMAINS IN FINNISH CYBERSECURITY
BESEC, 2019

13. Founded 1972
437.000 customers worldwide
92% of the Forbes Global 2000
98% of the 100 most valued brands
77% of the worlds transactions
230.000.000 users in the cloud
First public cloud production at 2015
…90% of customers adopting public cloud

14. No account lockout Default
passwords
Unprotected traffic
Unsecure custom
code

15. 879
PUBLISHED
VULNERABILITIES
45
HIGH-CRITICALITY
DURING THIS YEAR
OVER 6.000
SECURITY
PATCHES

17. Critical business events
such as end of support for
mission-critical technologies
Migration triggers
such as cost saving and
operations optimization
Innovation triggers
such as scaling to meet market
or geographical demands
ü Datacenter exit
ü Mergers & Acquisitions
ü Reduction in capital expenses
ü EoL of mission critical technologies
ü Regulatory compliance changes
ü Deadlines of data sovereignty
requirements
ü Recent disruptions in IT stability
ü Global economic changes
ü Cost savings
ü Reduction in vendor or technical
complexity
ü Optimization of internal operations
ü Increase business agility
ü Prepare for new technical
capabilities
ü Scale to meet market or
geographic demands
ü Improve customer experiences
or engagements
ü Transform products or services
ü Disrupt the market with new
products or services
ü Build new technical capabilities
ü Distribute organizational
responsibilities globally

19. REFERENCE
ARCHITECTURE

22. How to be ready at 2021
• Right partners and skills
• Purpose-built reference architecture
• BiModal governance model for SAP and cloud
• Cloud ready enterprise architecture
• Framework based (cloud, SAP, SIEM etc) cybersecurity solution
• DevSecOps supporting custom code
• Deployment and management automation
• Immutable solutions, containers, automation
• Continous development and optimization

23. ACCOUNT MANAGEMENT
PARTNER MANAGEMENT
BID MANAGEMENT
CONTRACT MANAGEMENT
PROJECT MANAGEMENT
CUSTOMER SUPPORT
PRODUCT MANAGEMENT
SERVICE MANAGEMENT
CLOUD ARCHITECTURE
SAP ARCHITECTURE
MANAGED CLOUD
MANAGED BASIS
COMPETENCE DEVELOPMENT
APPLICATION MANAGEMENT
AZURE ARCHITECTURE
AWS ARCHITECTURE
GCP ARCHITECTURE
BASIS ARCHITECTURE
NETWORK OPERATIONS
SECURITY OPERATIONS
OPERATING SYSTEMS
S A P O N P U B L I C C L O U D S Q U A D

25. GARTNER 2016

27. © Fortinet Inc. All Rights Reserved. 27
SecureS4HonAzure
• FortiWeb WAF protects SAP
Web Dispatcher traffic
• FortiGate NGFW frontends SAP
traffic supporting VPN termination
• FGT NGFW forwards SAP NI traffic to
SAProuter from worldwide SAP
Support Centers
• FGT NGFW segments SAP landscapes
within Hub
• FGT NGFW provides E-W & N-S
inspection within Hub

29. Lemongrass LCP automation for SAP

30. • Build a new server from a common image, with appropriate changes, packages, and
services included
• Provision the new server to replace the old one
• Validate the server
• Decommission the old server
• Infrastructure is consistent and reliable, which makes testing more straightforward.
• Deployment is simpler and more predictable.
• Each deployment is versioned and automated, so environment rollback is a breeze.
• Errors, configuration drifts, and snowflake servers are mitigated or eliminated
entirely.
• Deployment remains consistent across all environments (dev, test, and prod).
• Auto-scaling is effortless thanks to cloud services.

31. TietoEVRY continuous development
Managed Applications
• Application Lifecycle
Management
• Test automation
Cloud Native
Development
• Architectures and
technologies
• Cloud native
applications
Cloud Advisory
• Cloud Strategy
• Cloud Readiness
• Cloud Operating Model
• Cloud Platform Choice
Cloud Design &
Migration
• Cloud Assessment
• Cloud Design and Build
• Cloud Migration
Managed Cloud
• Access & Security
• Orchestration, provisioning &
configuration
• Business availability & continuity
• Capacity & cost monitoring &
optimization
• Incident & Release
• Multi-cloud management
• SAP on cloud
Cloud DevOps Enablement
• DevOps roadmap
• DevOps tooling and expertise
Application
modernization
• Application re-
factoring
• Re-architect
Duali
ty
Dual
agenda
innovate new
businesses
Renew and optimize
businesses

32. BE ready at 2021
• Right partners and skills
• Purpose-built reference architecture
• BiModal governance model for SAP and cloud
• Cloud ready enterprise architecture
• Framework based (cloud, SAP, SIEM etc) cybersecurity solution
• DevSecOps supporting custom code
• Deployment and management automation
• Immutable solutions, containers, automation
• Continous development and optimization

33. “If you can’t explain it
simply enough, you
don’t understand it well
enough”