Presentation of the White Paper - The Chain of Trust - A Cloud Service Provider evaluation Guide

1. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”1 18 June 2013P.
The Chain of Trust
A Cloud Service Provider Evaluation Guide
18 June 2013
1 January 2011
!

2. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”2 18 June 2013P.
BELTUG X-change
10:00 Introduction
Johan Schoofs, Project Manager BELTUG (Nl – Fr)
10:10 The BELTUG “Cloud Service Provider Evaluation Guide”
Peter Witsenburg (English) + panel
With Q & A and interactive audience discussion (Nl, Fr)
11:00 Coffee Break
11:20 The BELTUG “Cloud Evaluation Guide” cont.
Peter Witsenburg (English) + panel
With Q & A and interactive audience discussion (Nl, Fr)
12:20 Conclusions (Dutch, French)
12:30 End

3. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”3 18 June 2013P.
Setting the Scene
A few thoughts to get started
! Selected extracts from RightScale’s “State of the Cloud” report
(March 2013)
! RightScale is a SaaS-based cloud computing management
solution for managing cloud infrastructure across multiple cloud
providers. RightScale enables organizations to easily deploy
and manage business-critical applications across public,
private, and hybrid clouds.
! The report illustrates the adoption of cloud computing across a
broad cross-section of organisations
! 625 respondents, 30% RightScale customers
! Full report:
http://www.rightscale.com/lp/state-of-the-cloud-report.php

4. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”4 18 June 2013P.
Setting the Scene
RightScale study key findings:
! Cloud adoption is a given
! Enterprise cloud adoption is gaining steam – and it’s multi-cloud
(public, private, hybrid combinations)
! Cloud competition is heating up
! Cloud experience pays off
! Cloud adoption correlates with the DevOps trend
© 2013 RightScale, Inc.

5. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”5 18 June 2013P.
Setting the Scene
© 2013 RightScale, Inc.
What
are
the
benefits
realised?

6. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”6 18 June 2013P.
Setting the Scene
© 2013 RightScale, Inc.
What
are
the
challenges?

7. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”7 18 June 2013P.
Cloud Computing as defined by the NIST
National Institute of Standards and Technology

8. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”8 18 June 2013P.
Cloud Computing as defined by the NIST

9. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”9 18 June 2013P.
NIST Cloud Characteristics
! Cloud computing as defined by the NIST
! On-demand Self-service
A
consumer
can
unilaterally
provision
compu9ng
capabili9es,
such
as
server
9me
and
network
storage,
as
needed
automa9cally
without
requiring
human
interac9on
with
each
service
provider

10. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”10 18 June 2013P.
How much time is typically needed to provision additional resources ?
On-demand Self-service

11. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”11 18 June 2013P.
Is auto-provisioning available?
On-demand Self-service

12. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”12 18 June 2013P.
Is self-provisioning possible?
On-demand Self-service

13. !
Titel ppt13 datumP.
Cloud Computing as defined by the NIST

14. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”14 18 June 2013P.
NIST Cloud Characteristics
! Cloud computing as defined by the NIST
! Broad Network Access
Capabili9es
are
available
over
the
network
and
accessed
through
standard
mechanisms
that
promote
use
by
heterogeneous
thin
or
thick
client
pla?orms
(e.g.,
mobile
phones,
tablets,
laptops,
and
worksta9ons).

15. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”15 18 June 2013P.
What connectivity options are offered ?
Broad Network Access

16. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”16 18 June 2013P.
Does the CSP offer redundant network connectivity?
Broad Network Access

17. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”17 18 June 2013P.
What is the minimum guaranteed bandwidth?
Broad Network Access

18. !
Titel ppt18 datumP.
Cloud Computing as defined by the NIST

19. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”19 18 June 2013P.
NIST Cloud Characteristics
! Cloud computing as defined by the NIST
! Resource Pooling
The
provider’s
compu9ng
resources
are
pooled
to
serve
mul9ple
consumers
using
a
mul9-­‐tenant
model,
with
different
physical
and
virtual
resources
dynamically
assigned
and
reassigned
according
to
consumer
demand.
There
is
a
sense
of
loca9on
independence
in
that
the
customer
generally
has
no
control
or
knowledge
over
the
exact
loca9on
of
the
provided
resources
but
may
be
able
to
specify
loca9on
at
a
higher
level
of
abstrac9on
(e.g.,
country,
state,
or
datacenter)

20. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”20 18 June 2013P.
What are the redundancies offered on the level of the CSP infrastructure?
Resource Pooling

21. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”21 18 June 2013P.
With what type of customers will the customer have to share resources?
What is the projected impact? Is additional isolation possible if needed ?
Resource Pooling

22. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”22 18 June 2013P.
Backups and “no data loss” guarantee included (RPO & RTO)?
Resource Pooling

23. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”23 18 June 2013P.
Is the customer allowed to define the backup/restore policies applicable
to his environment?
Resource Pooling

24. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”24 18 June 2013P.
How many datacenters and where are the datacenters located?
Resource Pooling

25. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”25 18 June 2013P.
Are the required certificates available? Are customers/third parties
allowed to audit the CSP ?
Resource Pooling

26. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”26 18 June 2013P.
How do customers communicate with the CSP service organization?
Resource Pooling

27. !
Titel ppt27 datumP.
Cloud Computing as defined by the NIST

28. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”28 18 June 2013P.
NIST Cloud Characteristics
! Cloud computing as defined by the NIST
! Rapid Elasticity
Capabili9es
can
be
elas9cally
provisioned
and
released,
in
some
cases
automa9cally,
to
scale
rapidly
outward
and
inward
commensurate
with
demand.
To
the
consumer,
the
capabili9es
available
for
provisioning
oIen
appear
to
be
unlimited
and
can
be
appropriated
in
any
quan9ty
at
any
9me.

29. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”29 18 June 2013P.
What are the upper resource limits (CPU cores, RAM, IO bandwidth,
storage)
Rapid Elasticity

30. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”30 18 June 2013P.
Is automatic scaling of resources available?
Rapid Elasticity

31. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”31 18 June 2013P.
Are there resource reconfigurations that necessitate a server reboot?
Rapid Elasticity

32. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”32 18 June 2013P.
Does the CSP offer price protection and flexibility ?
Rapid Elasticity

33. !
Titel ppt33 datumP.
Cloud Computing as defined by the NIST

34. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”34 18 June 2013P.
NIST Cloud Characteristics
! Cloud computing as defined by the NIST
! Measured Service
Cloud
systems
automa9cally
control
and
op9mise
resource
use
by
leveraging
a
metering
capability
at
some
level
of
abstrac9on
appropriate
to
the
type
of
service
(e.g.,
storage,
processing,
bandwidth,
and
ac9ve
user
accounts).
Resource
usage
can
be
monitored,
controlled,
and
reported,
providing
transparency
for
both
the
provider
and
consumer
of
the
u9lized
service.

35. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”35 18 June 2013P.
What billing models are available?
Measured Service

36. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”36 18 June 2013P.
What resource and application monitoring tools are made available ?
Measured Service

37. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”37 18 June 2013P.
How is SLA compliance measured?
Measured Service

38. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”38 18 June 2013P.
Some Additional Questions
Does the CSP meet required compliance and security standards?

39. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”39 18 June 2013P.
Some Additional Questions
Is a service catalogue with pre-defined service templates available?

40. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”40 18 June 2013P.
Some Additional Questions
What are the contract terms such as minimum duration, the renewal
policy, termination conditions, …

41. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”41 18 June 2013P.
Some Additional Questions
What application and management APIs are made available ?

42. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”42 18 June 2013P.
Some Additional Questions
What happens to the data in case of bankruptcy of the CSP or when the
contract ends? Who owns the data?

43. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”43 18 June 2013P.
Some Additional Questions
What cloud migration options are provided? Are there additional
expenses associated with a cloud migration?

44. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”44 18 June 2013P.
BELTUG would like to thank:
! John Myklebust
! Karel Torfs
! Peter Witsenburg
for their valuable advice and technical insight used in the creation
of the BELTUG Cloud Service Provider Evaluation Guide.

45. !
BELTUG X-change “Cloud Service Provider Evaluation Guide”45 18 June 2013P.
The Chain of Trust
A Cloud Service Provider Evaluation Guide
18 June 2013
1 January 2011
!