This document discusses cloud computing, security, and service providers. It begins by asking what cloud computing is and if it is different than traditional mainframes. It then discusses concerns about cloud security if data is not within an organization's own data center. Finally, it addresses how to choose business partners as a service provider and the importance of ensuring alignment between costs and revenues.
IAC 2024 - IA Fast Track to Search Focused AI Solutions
Stay safe in the cloud - Len Padilla - Senior Director of Technology - NTT Europe
1. Stay Safe
In The Cloud
Len Padilla
Senior Director of Technology
NTT Europe
2. Cloud Computing Primer
What is it? Is it really different? Isn’t it just a new version of the
mainframe?
Cloud Security
How can this possibly be safe if it’s not in my data centre?
Service Providers
How do you choose your business partners?
3.
4. Today’s discussion
Cloud Computing Primer
What is it? Is it really different? Isn’t it just a new version of the
mainframe?
Cloud Security
How can this possibly be safe if it’s not in my data centre?
Service Providers
How do you choose your business partners?
5. Cloud Computing is an approach
to computing that leverages the
efficient pooling of on-
demand, self-managed virtual
infrastructure, consumed as a
service
8. Compute Cloud – Dynamic scaling
Increase/decrease computing capacity
100% reserved/guaranteed resources
Free burst (unguaranteed)
Resources
(Ghz/Ram) Guaranteed resources
20 Ghz
10 Ghz
Initial commitment
0 Ghz
Time
August
May
July
January
April
March
February
June
September
October
10. Today’s discussion
Cloud Computing Primer
What is it? Is it really different? Isn’t it just a new version of the
mainframe?
Cloud Security
How can this possibly be safe if it’s not in my data centre?
Service Providers
How do you choose your business partners?
11. What is Security?
• C : Confidentiality
• I : Integrity
• A : Availability
CIA
Joe St Sauver, Ph.D. - Internet2 Joint Tech Conference
12. What is Security?
Confidentiality (ISO-27001):
• C : Confidentiality
Ensuring that information is
accessible only to those
• I : Integrity
authorized to have access.
One of the cornerstones of
• A : Availability
information security.
17. Today’s discussion
Cloud Computing Primer
What is it? Is it really different? Isn’t it just a new version of the
mainframe?
Cloud Security
How can this possibly be safe if it’s not in my data centre?
Service Providers
How do you choose your business partners?
18. Service Provider
• Proof
Partnership: Your Service Provider
has become your business partner.
• Products the SP provides, the
The more
more critical to your success.
• Partnership
19. Service Provider : A True Partner
• Traditional Hosting …ensure that our costs align with the actual amount of
– Rigid, inflexible, but stable computing resources consumed…
• Utility based Hosting
…a cost structure whereby our infrastructure costs scale to
– Pay as you Use tiered proportion to the actual number of commercial
transactions (flight bookings, hotel reservations etc…
– Transparency
• Transactional Hosting
– Financial Alignment
Revenue v Cost
Online Client Revenue
Traditional Hosting
Utility Hosting
Transactional (PNR)
Time
20. Today’s discussion
Cloud Computing Primer
A valid cost-effective model. Can take your
business to the next stage.
Cloud Security
The Cloud is safe, when used correctly. Security
is more than technical.
Service Providers
Your new business partner. Choose wisely!
The final area I’d like to discuss and concerns the financial impact of Cloud / Virtualisation in the Travel / Hospitality sectorFinancial evolution hasn’t changed much over the Years, except for UtilityWhilst technology continues to evolve, the contracting / financial aspects of IT services delivery have remained fairly constant over the years. In the managed hosting space, you’ll find a mixed bag of annuity based fixed cost services, some variable or one time costs.Utility = +Pay as you use, Transparent - Complex, potentially not aligned to business, hard to compare. Step forward thoughThe development of virtualisation has enabled many service providers to adopt a utility based billing models that at least allows customers to pay for what they use, but this model can on the face of it be rather complex and ultimately doesn’t necessarily translate into what's important or meaningful for their business. For anyone that’s implemented utility based charging some of the challenges this can present are around budgeting, assigning cost, complex invoicing process, difficulty in comparing with other providers etc. On the flip side Utility based computing can provide much greater levels of flexibility together with transparency of costs / usage. So on balance I'm sure most people will look at utility based computing as a positive step forward.Next step – Transactional, to align cost base with revenue streamsFor one of our airline clients, whilst utility based computing was a requirement as part of their web services development, they also wanted a financial model that they could relate to in terms of business transactions or PNR. PNR standard term, but not currently relevant in mged hosting space. Complex, partnerships are importantFor the airline sector, PNR is a fairly standard term, but in the world of managed hosting, on a global scale its much less prevalent. The journey in exploring this was by no means an easy one. One of the greatest challenges we had to address was in obtaining enough evidential data that we could rely upon to ensure our short, medium and long term projections were sound and that they would satisfy both the client and our internal sponsors.This is not an easy internal sale!! Service Providers need business buy in, support, but benefits for both, longevity – aligned business objectivesClearly, when looking at this type of commercial model, all our internal business units needed to have input into its construction. Fortunately, we have been able to secure the internal agreement to adopt this non standard approach. Whilst the agreement is very different to the ones we would typically adopt, the valuable insight, closer working partnership and greater access to business information we would not otherwise have access to, help to drive longevity into the relationship.Not right for all, assess risks, client profileI would also like to stress that this approach whilst right for Etihad Airways, may not be right for other organisations but the consultative approach we need to go through ensure both parties are cognisant of the challenges this may present.It goes without saying that a move from Traditional hosting > Utility > PNR presents us with a greater level of risk but we believe this is what many of our customers want from us and we are trying to adapt not just technically, but commercially as well.Key Point – So in summary, the ‘business’ is expecting IT to do More with Less. Through initiatives such as this, we are excited about the opportunities this approach to commercial modelling presents as we feel this will be the next evolution in the Service Provider space, but it will require the adoption of new technologies and business partnerships to support it.MOVE TO NEXT SLIDE