Welcome!

@CloudExpo Authors: Yeshim Deniz, Liz McMillan, Elizabeth White, Zakia Bouachraoui, Pat Romanski

Related Topics: @CloudExpo, Microservices Expo, Containers Expo Blog, Government Cloud

@CloudExpo: Article

Enterprise Cloud Governance - Plug & Play for Cloud Services Is Not Enough

Organizations should develop sound service level agreements based on overall objectives

Enterprise Cloud Governance is the specification of policies and procedures for cloud solutions and services for the organization.

Many organizations struggle with having silos of clouds without a coherent approach for governance. It is very tempting for departments or groups to go and buy new services and try to plug them and then play  to see how they work.

If specific services have their own individual policies and procedures, this can lead to problems due to lack of centralized management. Without proper alignment with enterprise architecture and security, this can lead to spaghetti like conglomeration of Cloud services without proper attention to interoperability and service management. With enterprise-level solutions that leverage hybrid services, the situation can quickly spin out of control. It is extremely important to have a strategy and vision in place to address important elements such as policy management, service management, interactions between applications and data, availability, performance and control related to services.

Organizations should develop sound service level agreements based on overall objectives. The service agreements should outline service operations and what happens if these operations are not fulfilled. The service levels should be regularly monitored and updates should be made based on service monitoring. In addition, there have to be proper change management processes and procedures to make sure any cloud service provider changes do not adversely impact operations. This may occur if the provider upgrades the service or components on their end and these updates are not compatible with internal capabilities.

Management aspects such as access, update, tracking policies for cloud related resources should also be specified. Data protection and security mechanisms should be defined to prevent the data from being compromised. A Cloud catalog that contains all available services and supporting mechanisms should be in place to facilitate effective service management.

Departments or groups that go out and buy new Cloud software as a service solutions without engaging enterprise architecture or security teams may be moving along a dangerous path. The reasoning may be "It's just a service, like an outsourced email provider or document management provider it is not infrastructure or platform as a service" However, this may lead to data redundancy and serious integration issues down the road.

The assessment of impacts and dependencies with existing and proposed services and applications is crucial. In addition, even though the data is stored by the provider, any data compromise is the organization's responsibility. Hence organizations should spend time to establish, monitor and enforce sound policies and procedures for cloud services and solutions at the enterprise level.

More Stories By Ajay Budhraja

Ajay Budhraja has over 24 years in Information Technology with experience in areas such as Executive leadership, management, strategic planning, enterprise architecture, system architecture, software engineering, training, methodologies, networks, and databases. He has provided Senior Executive leadership for nationwide and global programs and has implemented integrated Enterprise Information Technology solutions.

Ajay has a Masters in Engineering (Computer Science), and a Masters in Management and Bachelors in Engineering. He is a Project Management Professional certified by the PMI and is also CICM, CSM, ECM (AIIM) Master, SOA, RUP, SEI-CMMI, ITIL-F, Security + certified.

Ajay has led large-scale projects for big organizations and has extensive IT experience related to telecom, business, manufacturing, airlines, finance and government. He has delivered internet based technology solutions and strategies for e-business platforms, portals, mobile e-business, collaboration and content management. He has worked extensively in the areas of application development, infrastructure development, networks, security and has contributed significantly in the areas of Enterprise and Business Transformation, Strategic Planning, Change Management, Technology innovation, Performance management, Agile management and development, Service Oriented Architecture, Cloud.

Ajay has been leading organizations as Senior Executive, he is the Chair for the Federal SOA COP, Chair Cloud Solutions, MidTech Leadership Steering Committee member and has served as President DOL-APAC, AEA-DC, Co-Chair Executive Forum Federal Executive Institute SES Program. As Adjunct Faculty, he has taught courses for several universities. He has received many awards, authored articles and presented papers at worldwide conferences.

CloudEXPO Stories
Bill Schmarzo, Tech Chair of "Big Data | Analytics" of upcoming CloudEXPO | DXWorldEXPO New York (November 12-13, 2018, New York City) today announced the outline and schedule of the track. "The track has been designed in experience/degree order," said Schmarzo. "So, that folks who attend the entire track can leave the conference with some of the skills necessary to get their work done when they get back to their offices. It actually ties back to some work that I'm doing at the University of San Francisco which creates an "Outcomes-Centric Business Analytics" degree." Bill Schmarzo, author of "Big Data: Understanding How Data Powers Big Business" and "Big Data MBA: Driving Business Strategies with Data Science" is responsible for guiding the technology strategy within Hitachi Vantara for IoT and Analytics. Bill brings a balanced business-technology approach that focuses on business ou...
CloudEXPO New York 2018, colocated with DXWorldEXPO New York 2018 will be held November 11-13, 2018, in New York City and will bring together Cloud Computing, FinTech and Blockchain, Digital Transformation, Big Data, Internet of Things, DevOps, AI, Machine Learning and WebRTC to one location.
Wooed by the promise of faster innovation, lower TCO, and greater agility, businesses of every shape and size have embraced the cloud at every layer of the IT stack – from apps to file sharing to infrastructure. The typical organization currently uses more than a dozen sanctioned cloud apps and will shift more than half of all workloads to the cloud by 2018. Such cloud investments have delivered measurable benefits. But they’ve also resulted in some unintended side-effects: complexity and risk. End users now struggle to navigate multiple environments with varying degrees of performance. Companies are unclear on the security of their data and network access. And IT squads are overwhelmed trying to monitor and manage it all.
Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settlement products to hedge funds and investment banks. After, he co-founded a revenue cycle management company where he learned about Bitcoin and eventually Ethereal. Andrew's role at ConsenSys Enterprise is a multi-faceted approach of strategy and enterprise business development. Andrew graduated from Loyola University in Maryland and University of Auckland with degrees in economics and international finance.
DXWorldEXPO | CloudEXPO are the world's most influential, independent events where Cloud Computing was coined and where technology buyers and vendors meet to experience and discuss the big picture of Digital Transformation and all of the strategies, tactics, and tools they need to realize their goals. Sponsors of DXWorldEXPO | CloudEXPO benefit from unmatched branding, profile building and lead generation opportunities.