A third-party identity provider.

The customer organization.

The SaaS provider.

A user.

Cloud providers will do application development.

The development process needs to change.

The role of the IT department will change.

This can speed up the development process.

Consult the company's exit plan.

Move the company data to the backup provider that was selected earlier.

Re-host all critical applications on the company's internal servers.

Evaluate the company's strategic options for an alternative provider

Involvement of external staff

Improved flexibility

Reduced expense

Shorter time to market

Provisioning services

Incident management

Technology upgrade monitoring

Security and risk management

Assemble functional requirements for application development

Configure application clusters with Web services

Enable and disable load balancers

Manage the starting and stopping of application server clusters

Desire for vendor lock-in reduction

Desire for improved security

Desire for improved user experience

Desire for reducing compliance issues

Information standards and applications

User names and hardware providers

Virtual machine images and applications

Virtual machine images and identity information standards

increases

reduces

shifts

equates

companies, others

companies, themselves

individuals, others

individuals, themselves

Capacity management

Troubleshooting management

Project management

Request fulfillment management

Web services

Websites

Web hosting providers

Data integrations

Manage the risks associated with bringing in external providers

Continuously execute performance analytics to monitor providers

Open up internal databases with Web service access for easier access

Standardize on a limited set of virtual machines to increase security

The need for better application development

The need for better security management

The need for good performance monitoring and management

The need to improve the fulfillment and provisioning process

Current cost structure of IT

Quality of web-based user interfaces

Security of current IT solutions

Technical maintenance of current IT assets

Pay as you go agreements

Short-term financial commitment

Tailor-made applications based on client needs

Vendor lock-in potential

It allows the underling physical server hardware to be shared

It allows the virtual machines to be dependent on each other

It allows the virtual machines to be load balanced

It prohibits the use of virtual machines by unauthorized users

Select a machine image to run, select an application set to run, select security credentials.

Select a machine image to run, select an application set to run, select the size of the virtual machine.

Select a machine image to run, select security credentials, select the size of the virtual machine.

Select an application set to run, select security credentials, select the size of the virtual machine.

HTML, IDM, JSON

HTML, IDM, XML

HTML, JSON, XML

DM, JSON, XML

IaaS.

SaaS.

PaaS.

On-demand software.

None of the above.

Network bandwidth

Network QoS

Network latency

Network speed

By becoming an external cloud provider

By becoming an internal cloud provider

By outsourcing all IT services

By solely focusing on security issues

Improving cost structure

Improving customer satisfaction

Increasing control over IT systems

Decrease of security issues

Applications that are currently expensive to maintain because of interconnections

Applications that are easy to migrate and have some business value

Applications with high risk and little business value

Legacy applications that are coupled to specific hardware and systems software

Visualization technology

Application service procurement

Customer relations

Security and risk management

Losing network connectivity

Not having enough software licenses

Not knowing what the cloud provider will charge

Storing customer data at a provider

The management tools present a vendor lock-in

The management tools are indispensible above a specific scale of operation

The migration may not be successful

Too many software licenses are needed

New vendors have to be accommodated

Users can procure SaaS solutions themselves

The number of virtual machines can fluctuate with demand

Maintenance will become easier

Maintenance becomes irrelevant

Cloud provider takes care of it

Hardware vendor takes care of it

Operating system vendor takes care of it

Security features

Federated identities

Shared hardware

Sourcing challenges

Handling credit cards for purchasing cloud services

Keeping track of cloud provider performance

Managing users and their rights across multiple providers

Software assets that are introduced and can expire

Take inventory of the application portfolio and select external suppliers

Standardize on a limited set of virtual machines.

Continuously execute performance analytics to monitor providers

Open up internal databases with Web service access.

PaaS

IaaS

On-demand software.

None of the above.

SaaS

It reduces financial risks to the business

The IT department does not accommodate variable costs

They can better measure the provider's quality

They can use their own payment options

All processes must become automated.

Processes must be redesigned with the user experience in mind.

The IT service team must be expanded.

Users should be aware of the benefits before changes to the process are incorporated

governmental

specific

for-profit

multiple

Cloud computing is low cost and does not accommodate charge back fees

Cloud computing can be more expensive than in-house capacity

Licensing models can become outdated quickly

Resources that are used can fluctuate throughout the budget cycle

Easier access by users outside of the organization

Faster deployment of applications

Rapidly growing and shrinking capacity

All of the above are correct

Credit cards must be used for handling transactions

Eliminating legacy IT systems

Making sure that cloud assets are generating revenue

Renegotiating license agreements

Incomplete Service Level Agreements (SLAs)

Network connectivity interruption

Privacy laws

Providers going out of business

An application for external use only, on company-owned assets.

An application for external use only, on public cloud-based systems.

An application for internal use only, on company-owned assets.

An application for internal use only, on public cloud-based systems.

Help understand and explain the application lifecycle

Help understand performance parameters

Help understand provider quality

All of the above are correct

User populations which steadily increase in size.

User populations that vary and are unpredictable.

User populations that are of fixed size.

User populations that vary in size on a seasonal basis.

IaaS

SaaS

PaaS

None of the above.

Inability to deploy new services quickly

Inability to rapidly change to a different technology

Capital tied up in hardware that might become obsolete

Additional resources must be hired to maintain each server

Cloud computing delivers IT capabilities that scale with demand.

Cloud computing delivers a wide range of services that are easily accessible to users

Cloud computing delivers IT capacity on demand.

Cloud computing negates the need for a procurement department.

It facilitates movement from one provider to another.

It helps encourage innovation.

It leads to a more mature stage of the cloud computing landscape

It leads to more efficient machine utilization.

better, secure

better, up to date

worse, secure

worse, up to date

Compliance risk

Legal risk

Privacy risk

Security risk

SaaS

IaaS

PaaS

QoS

Identify the location of the physical machine

Select identity providers

Select security credentials

Select the application set that will run on it

IaaS

PaaS

SaaS

None of the above

Capacity can be more elastic.

External providers can deny a capacity increase when required.

Providers measure their own performance.

Scarcity of resources can occur if not monitored

Budgets to be fixed

Costs that are related to number of users

Costs that are related to profits

Costs to be fixed

It makes it harder to know where a company's important assets are.

It is harder to limit the provider's liability in the contract.

It makes it harder to know where a company’s physical assets are.

Industry regulations change more frequently to ensure compliance.

PaaS

SaaS

IaaS

QoS

High CPU usage and low network bandwidth

High network latency and high volume of data stored

Low network bandwidth and high network latency

Low network bandwidth and high volume of data stored

Cloud computing is typically based on open Internet technology

Cloud computing is typically based on web technology

Cloud computing is cheaper compared to virtualization

Cloud computing typically uses XML or JSON technologies

Data stored at the provider

Cloud management tools housed at the provider

Investment in servers at the provider

Machine capacity at the provider

Analyzing chargeback agreements

Analyzing cloud provider Service Level Agreements (SLAs)

Analyzing identity management and access controls

Analyzing the provider release calendar

Cloud computing is more cost effective

The provisioning of servers and services is quicker or ceases to be an issue

The provisioning of servers and services can be much slower

The security level will increase

commercial

financial

legal

service

Lack of an automated provisioning process of the virtual machines

Lack of automation of virtual machine image manufacturing

Lack of manpower to monitor the virtual machines

Lack of physical servers to accommodate the different virtual servers

recurring subscription, a yearly contract

a yearly contract, usage-based charges

recurring subscription, usage-based charges

number of users, a yearly contract

Increased security of accessing credit card information

Regulations need to be updated more frequently

Storing passwords in the Configuration Management Database (CMDB)

Working with multiple providers of user identities

Identity provider

Relying party

SaaS provider

User

Virtualization is a method to organize servers in a more efficient manner to double the number of accessible users

Virtualization is a set of techniques for hiding software resources behind hardware abstractions.

Virtualization is a set of techniques for hiding hardware resources behind software abstractions.

Virtualization is a method to structure data in a more efficient manner with less cost to the user.

Company information can be transmitted electronically

Digitizing information makes it easier to copy

Government regulations require data to be disclosed

Having files stored on the servers of a cloud provider

Financial chargeback

Security management

Hardware maintenance

Software distribution

Cloud computing services are typically much more scalable.

Cloud computing is much cheaper.

Hardware and software assets are typically customizable.

IT outsourcing promotes innovation.

Standardize on a limited set of virtual machines

Continuously execute performance analytics

Open up internal databases with Web service access

Take inventory of the application portfolio and select external suppliers

Change the system applications

Change the cloud provider

Re-host in-house

All of the above

How existing company data is integrated in or migrated to the application.

How the application will be integrated with other applications.

The number of users that will access the application simultaneously

Where or by whom will digital identities be issued for logging on to the application.

Desktop productivity applications

Marginal applications

Mission-critical applications

Legacy applications

High degree of confidentiality and operational assurance

The associates cost and infrastructure needs

Constantly changing and unpredictable workloads

Constantly changing data and accessibility needs

Dependence on an external provider.

Dependence on internal IT

Increase in users who can change data.

Network connectivity

Servers and storage can be added quickly.

Servers and storage can be released quickly.

Users can be added and removed quickly.

All of the above is correct.

Continuity risk

Financial risk

Legal risk

Confidentiality risk

Hypervisors

Image factory

Security procedures

Trained IT staff

Clarity and budgeting ease of upfront costs

Improvement of employee skills sets

Reduction of capital expenditures

Flexible contracts

Hardware maintenance

Installing operating system patches

Performance monitoring

Server maintenance

Cloud computing is more cost-efficient

IT assets are not owned by the customer

Servers are better utilized

Staff is no longer hired by the customer

Business users will bypass the IT department

Cloud providers will take over the role of the IT department

Service providers will bypass the IT department

All of the above are correct

Access rights that are handled by a cloud provider

Capacity management that is handled by a cloud provider

Cross-charging policies that are handled by both clients

Provider reputation

The service levels of cloud computing are much better.

IT outsourcing is not based on open standards.

Contracts with cloud providers can be changed much quicker.

Only IT outsourcing works with external staff.

Cloud computing makes it easier to have a backup available.

Cloud computing makes it easier to monitor access and usage of data.

Cloud computing makes it easier to give people access to data in the cloud.

Cloud computing makes it easier to have redundancy capabilities.

Improve the reuse of internal databases in an organization.

Improve the speed of the internal development and deployment processes.

Reduce cost and reliance on internal technical skills.

Simplify interfaces for specific user groups.

The organization must perform and successfully complete a cloud readiness assessment.

The organization must have used virtualization technology in the past.

The organization must have an unlimited budget for allocation of cloud resources.

The organization must have an in-house IT department.

Typically, industry definitions state that cloud computing and IT outsourcing are synonymous terms with the same meaning.

Cloud computing only works when there is satisfactory Internet connectivity whereas
outsourcing requires dedicated WAN links.

Cloud computing generally allows for on-demand utilization, whereas outsourcing is typically defined by contract terms.

Cloud computing provides only external IT equipment to a company whereas outsourcing involves external only resources managing internal company equipment.

Cloud provisioning models have a risk of not maintaining flexibility once services have been migrated.

When choosing services to migrate into the cloud, there should be a focus on ensuring that future migration between different cloud providers can be facilitated.

Cloud providers need to provide countermeasures to any consequences of not maintaining flexibility of services in a strategic manner.

When choosing services to migrate into the cloud, it should be ensured that the cloud provider can change underlying hardware platforms in case the customer needs change.

Centralized management of user access to the application.

Aversion of the software that will be accessed in the cloud.

The ability to perform fine grained customizations to the software.

The ability to access the application from the internal company network.

PaaS

CaaS

SaaS

IaaS

Hardware independence

Security

Distribution over the Internet

Time to market

PaaS

XaaS

IaaS

SaaS

Ensure that as part of the change management process the events are sequenced to include the cloud provider and that they have resources available.

Ensure that monitoring controls are implemented by the cloud provider to ensures that the system is highly available and that performance can be measured.

Ensure that the SLA's for availability have been well documented and agreed to as part of the contract arrangement between the two companies.

Ensure that the capacity and storage is available to meet the current and future demands of the solution of the cloud provider's infrastructure.

Distributed Computing

Service-Oriented Architecture (SOA)

Virtual Private Networks (VPNs)

Desktop Virtualization

Operation

Design

Transition

Strategy

Increased security of applications and data due to virtualization

Decreased downtime due to increased control over hosted servers

Increased internal focus on IT when hosting with proven providers

Increased scalability to meet usage demands

Private cloud

Community cloud

Hybrid cloud

Public cloud

Data integrity

Server type

Firewall specifications

Network hardware

Application access levels

Client background checks

Availability

User acceptance

Services are restricted to members of the same organization

Infrastructure is managed by an independent service provider

Services are managed by a third-party provider

Services are accessed by members outside of the organization

PaaS providers do not allow customers with their own software development teams to write new applications on the cloud platform.

Cloud environments only support agile development. The software development team will need to change from their waterfall SDLC methodology before migrating.

Familiarization will be required with cloud provider-based APIs, web services, and development frameworks.

No expected change in software development process when migrating from in-house to PaaS.

Resource spending

Legal requirements

Employee morale

Controllable response time

An advertising company

A public library

A recreational park district

A hospital and outpatient facility

Service Strategy

Service Operation

Service Design

Service Transition

All hardware is maintained on-site by current IT staff and managers

Both a cloud and a virtual solution will provide additional programmers for application
development

Boxed, retail versions of office suite software must be used for consistent licensing

Cloud computing may use visualization, while visualization does not require cloud services

It lowers the company's overall application processing availability.

It is difficult to implement problem management.

It is more difficult to ensure policy compliance.

It slows down the company's ability to deal with server capacity issues.

IaaS can test network configurations.

SaaS is accessible anywhere.

SaaS is used for only public clouds.

IaaS can be secured and encrypted.

Internet bandwidth and packet latency

Service Level Agreement

Data backups

Infrastructure availability

By using cloud computing, businesses are able to realize lower asset utilization for personnel.

By paying for actual usage, cloud computing allows businesses to convert fixed costs into variable costs.

By using cloud computing, businesses are able to lower server utilization.

By paying for actual usage, cloud computing allows businesses to convert variable costs into fixed costs.

Time to market

Scalability

Hardware independence

Security

Hardware dependence

Scalability

Fixed costs

Security

Organizational direct attached storage

Organizational SAN

Vendor leased co-hosted storage

Encrypted shared drive

The elimination of company driven application maintenance and backups

The lowering of thin client management costs

The decrease of company-owned physical system downtime

The increase of web presence

'Cost allocation' focuses on recovering costs from consumers of cloud-delivered services whereas 'chargeback' relates to identifying costs and assigning them to specific cost categories.

'Cost allocation' and 'chargeback' are synonymous terms that relate to allocating costs of cloud services and ensuring that billing occurs for the services being delivered.

'Cost allocation' relates to identifying costs and assigning them to specific cost categories. 'Chargeback' is focused on recovering costs from consumers of the cloud-delivered services.

'Cost allocation' and 'chargeback' relate to ensuring that cloud computing delivery services are a profit center instead of a cost center. This leads to a positive return on investment for both cloud provider and cloud consumer.

Utilizing services as needed.

Increasing available data storage.

Utilizing local resources.

Increasing sales potential.

Return on investment

Integrity

Elasticity

Vendor lock-in

Allowing a third party to manage service delivery ensures lower staffing costs.

It is more cost effective to pay for what is needed rather than pay for peak demand upfront.

Fewer in-house servers lower the power consumption of the datacenter.

Shorter contracts and less capital expenses reduce expenditures to the IT budget.

Open authentication

Single sign-on

Biometric scanning

Multifactor authentication

Assess, proof of concept, migrate data, migrate application, automation/scaling, and optimizing

Migrate the data and rebuild the application using APIs

Purchase service from cloud provider, migrate the user accounts, and disable the internal infrastructure

Decommission the internal infrastructure, purchase service from the cloud provider, and enable for business users

Simplified continuity of operation and disaster recovery plan

Lack of internal control over function and design of applications

Locking into the cloud provider and increasing costs over the long term

Reassignment of roles and responsibilities would be necessary

IaaS

SaaS

PaaS

CaaS

Service Transition

Service Operation

Service Strategy

Service Design

Allowing only cloud administrators to have access to cloud resources

Removing firewalls and access control routers from the network

Implementation and enforcement of a comprehensive security policy

Removing virtualized hardware from the organization

XaaS

IaaS

SaaS

PaaS

SaaS

IaaS

CaaS

PaaS

Automation and self service

Backup and recovery

Federation

Virtual servers

The company is moving their email to a third party web application.

The company is consolidating their 10 web servers to one physical server located in the datacenter.

The company is going to leverage hosted servers to handle any additional processing power needed for the application developers.

The employees will now access their hosted finance application via their web browser.

Journaling file systems

Two-factor authentication

Data de-duplication

Data encryption

Supply manager

Commercial manager

Infrastructure project manager

Credit risk manager

A retail company that has a history of peaks and troughs throughout the year with its online shopping application.

A family business that does not have any IT applications, but runs off manual processes and good customer service.

A financial services company that is having a number of security issues with its customer internet banking platform.

An insurance company that has a mature, low cost and efficient IT infrastructure that does not have significant change.

Offer multi-tenancy software as a service with segregated physical infrastructure.

Offer a single-tenancy software service with segregated virtualized infrastructure.

Offer multi-tenancy software as a service with logically segregated infrastructure.

Offer a single-tenancy software service with monitored intrusion detection systems.

Strategy

Operation

Design

Transition

Regular patching applied by the university

Governance and oversight by the cloud provider

Antivirus checks performed by the cloud provider

SLA and metrics requested by the cloud provider

Define required security service levels, agree on security evaluation criteria, and perform regular compliance checks based on the service levels and evaluation criteria.

Perform a penetration test every 6 to 12 months and mandate that any unacceptably high issues or risks are mitigated.

Perform a risk assessment annually and mandate that any unacceptably high risks are
mitigated.

Ensure that the service provider aligns to an industry standard, such as ISO 27000 series or another regulatory compliance framework and request that they self-monitor annually.

Move from an ongoing OPEX model for infrastructure to an ongoing service charge for the life of the infrastructure

Move from a depreciation model of infrastructure to a leasing model of infrastructure with bundled support and maintenance.

Move from a CAPEX model for infrastructure to an ongoing OPEX charge with bundled support and ongoing maintenance.

Move from an OPEX model for infrastructure to an ongoing CAPEX charge with bundled support and ongoing maintenance.

LDAP

SFTP

SNMP

SSL

SaaS

IaaS

PaaS

XaaS

Yearly independent audit is performed to measure performance

Cloud provider has ability to terminate contract

One week timeframe for termination of service

Cloud subscriber maintains ownership of their data

Hardware independence

Scalability

Variability

Security

Service strategy

Service transition

Service operation

Service design

Private cloud solutions are dedicated for use by a single organization.

Private cloud solutions are never accessible via the public Internet.

Private cloud solutions do not provide incremental scalability.

Private cloud solutions save considerably more money than a public cloud solution.

Capacity

Scalability

Network path

Cost

Service Transition

Service Design

Service Operation

Service Strategy

Scalability

Federation

Virtualization

Self service

Backups synchronize with the hot site

Servers are on-site

Software is hosted

Multiple servers are clustered

Scalability

Security

Integrity

Distribution

When securing cloud resources, only the most sensitive data should be secured.

When securing cloud resources, it is always a best practice to encrypt all data stored in the cloud.

When securing cloud resources, data security is not an issue.

When securing cloud resources, it is always a best practice to use the strongest security on the most sensitive data.

Perform security testing of the application to ensure that there are no new security vulnerabilities being introduced.

Perform testing to confirm that all the customer data can be mapped/migrated during the allocated change window.

Communicate with customers that they will be moving to a new CRM system which will be hosted in the cloud.

Perform a physical site assessment on where the application is hosted to ensure adequate controls are in place.

SaaS allows for open-source application development.

SaaS delays the time to market for most applications.

SaaS inhibits vendor interoperability on application platforms.

SaaS allows for a shorter time to market for some applications.

Scalability

Reliability

Integrity

Availability

Cost of service

Availability of service

Maintainability of service

Location of service

Project management

Customer service

Industry best practices

Visualization

Complexity

Time to market

Cost saving

Elasticity

Confirm a continual assurance framework is in place to measure the cloud provider's
performance in line with organizational objectives.

Have independent security testing performed against the cloud provider to ensure that the business's customer data is safe.

Ask the cloud provider to lower the cost before each contractual renewal so that the business is obtaining value for money.

Have independent stress and volume testing performed against the cloud provider to measure the availability SLA.

Increased costs

Larger knowledge base

Increased free hard drive space

Improved service level

Increasing the company carbon footprint

Upgrading the company datacenter

Implementing new IT strategies

Increasing the MTTR after an incident

On-demand self-service

Measured service

Resource pooling

Rapid elasticity

Desktop virtualization throughout the company

Client-server application modules

Web-based application modules

Client-based training modules

The company's fee varies based on the projected quarterly revenue of the client's company.

The company's fee varies based on the number of their IT staff required to support the
infrastructure.

The company's fee varies based on the number of servers needed to house data in the
datacenter.

The company's fee varies based on the energy consumption of each server in the datacenter.

VPN

Public cloud

Private cloud

VTP

Mean Time to Recovery

Risk Assessment

Business Impact Analysis

Request for Proposal

Public Cloud

VLAN

Private Cloud

VPN

A security organization that performs a large percentage of penetration testing.

A financial organization that must keep all data under their control.

A retail organization that needs to maintain all processing in their own datacenter.

A large development firm that creates applications for the customer to host on their cloud.

What cloud computing product will fit the business need?

What is the vendor policy on telecommuting?

What is the timeline for transition to the vendor?

What is the datacenter's power consumption?

Amount of data stored

Connectivity speed

Confidentiality of the data

Uptime requirements

It cannot be applied to IaaS.

It is complex.

It is less accurate.

It only works with SaaS.

Insist that the provider switch to secure protocols, such as SSH instead of Telnet.

Insist that the provider use authentication to connect to the non-secure applications.

Insist that the provider place firewalls and routers at the border of the cloud environment.

Insist that the provider implement username/password on all protocols.

Online library

Social media sites

Large marketing agencies

Medical facility

Outsourcing

Virtualization

PaaS

IaaS

Periodic integrity testing

Periodic penetration testing

Review of operating system configuration

Application load testing

An organization has identified services, investments, partners, and delivery channels designed to meet requirements.

An organization has identified patterns of business activities that use services and manage activities to influence demand.

An organization has managed the investment portfolio for services available to users of the cloud services.

An organization has managed budgeting and accounting for cloud services needed for the organization.

Integrity

Confidentiality

Availability

Scalability

Business continuity plan

Email restoration process

Archival procedures

Retention policy

Gather stakeholder requirements, select potentially suitable cloud providers, perform a pilot, and select the most appropriate provider.

Choose the most well known cloud provider for the given service and negotiate a short-lived contract with strong penalty clauses.

Request a list of reference sites from the potential cloud provider and interview a reference from within the same industry sector. If the site reference check is positive, then choose the cloud provider.

Workshop selection criteria items with company management and choose the service provider based on the strongest formal responses from cloud providers.