COMP30231 - Third-Party Cloud Providers

Overview

• Focuses on third-party cloud service providers, their models, business cases, and governance structures.
• Importance of understanding the role of enterprise architecture in cloud computing frameworks.

Lecture Breakdown

• Week 1-3: IT strategy, cloud computing adoption, enterprise architecture, gap analysis, implementation.
• Week 4: Governance in cloud computing.
• Week 5: Cost models - shift from capital to expense.
• Week 6: Business case for cloud computing.
• Week 7: Risk management in cloud computing.
• Week 8: Business models of cloud providers.
• Week 9: Contracting with cloud providers.
• Week 10-12: Review and exam support.

Types of Cloud Computing Environments

• Public Cloud: Services available to the general public.
• Private Cloud: Services for a single organization, customizable for security/resource needs.
• Community Cloud: Shared services for organizations with similar requirements.
• Industry Cloud: Specific services for industries like retail, healthcare.
• Hybrid Cloud: Combination of two or more cloud types for load balancing.

Cloud Service Delivery Models

• DaaS (Data as a Service): Internet-based data provision.
• SaaS (Software as a Service): Internet-based application access.
• PaaS (Platform as a Service): Internet-based infrastructure and development tools.
• IaaS (Infrastructure as a Service): Internet-based hardware provision.
• XaaS (Anything as a Service): General model for service provision.

Categories of Cloud Service Providers

• Cloud Technology Providers: Develop cloud technology and services (e.g., AWS, Oracle).
• Cloud Service Providers: Host and provide cloud services (e.g., Google Cloud, VMware).
• Cloud Independent Software Vendors: Offer value-added services like monitoring (e.g., SAP, Salesforce).
• Cloud Systems Integrators/Brokers: Help with cloud service implementation (e.g., Accenture, Boomi).

Market Dynamics

• Rapid changes due to mergers, acquisitions, and partnerships.
• New entrants threaten established companies with innovation.
• Competition on pricing is increasing.

Evaluating Cloud Service Providers

• Commitment to cloud models.
• Customer base and configurability.
• Integration needs and architecture compatibility.
• Upgrade/maintenance strategies.
• Service Level Agreements (SLAs).
• Security, back-up, and disaster recovery plans.

Framework for Evaluation

1. Data
   • Encryption in transit (SSL/TLS) and at rest (AES 256-bit).
   • Data multi-tenancy and retention policies.
2. Business
   • Data center locations and certifications (ISO 27001, SAS 70).
3. Legal
   • Provider jurisdiction, dispute resolution, and IP ownership.
4. User and Device
   • Authentication, device access control, multi-factor authentication.
5. Service
   • Penetration testing, IP filtering, audit trails.

Summary

• Cloud service market is rapidly evolving.
• Selection of cloud providers requires a meticulous approach considering data, business, legal, user access, and service provision.

Seminar Focus

• Importance of selecting appropriate cloud providers.
• Approach for small vs. large company interactions with providers.
• Structure to develop questionnaires for cloud providers.