Risk management is a growing concern in today's businesses. High-profile security breaches have dominated IT news in recent years, leading to public and painful disclosures that have dramatically affected brand image and the financial health of many public companies. From the boardroom to the data center, organizations are experiencing a crisis of trust. Customers are losing trust in the ability of businesses to keep their personal data safe. IT departments are losing trust in their own ability to meet business security and compliance mandates. CxOs and compliance officers are losing trust in the certifications they're required to submit because they have no way of confirming that security, identity, and access management controls are in place and properly followed. In addition to the increase in risk, compliance challenges are a reality of current business conditions. Today's businesses must comply with a complicated and growing set of industry and government regulations. Sarbanes-Oxley, Basel II, HIPAA, PCI-DSS and others add layers of administration and complexity to already complicated networks—layers that guarantee increased risk and increased difficulty in managing it. There are two kinds of control needed - Operation control, Risk control Operational Patching Help Desk Performance Up-time Accessability Support Compatability Standardization Risk 285 Million records compromised in 2008 74 percent compromised by external sources 20 percent compromised by insiders 32 percent implicated business partners Continuing regulatory requirements Sarbanes-Oxley Basel II HIPAA PCI DSS Good guys gone bad Good guys wanting to be good Help desk bombarded when something goes wrong Enforcement side is being ratcheted up Attacks are far more advanced Attacker are far more organized Cyber espianage Aurora breach – Google Risk management HSBC news – good guys doing the right things - Good guys wanting to do the right things Advanced persistent threat Lose credibility Lose competitive advantage Connected and disconnected Location Device (corporate or personal)
We define a “workload” as everything from an integrated suite of software that includes the operating system, middle-ware and application to just the application itself. When you aggregate several workloads together, you create a business service that the end user consumes .
Anything not clear? Missing?
Best identity solutions on the market Biggest set of assets to meet your needs today and in the future Broadest support for mixed IT environments Start anywhere and move around
• Determine your business problem • Ask yourself if the solution will put you on the path • Start anywhere • Grow everywhere
Slide : Novell ® Making IT Work As One™
WorkloadIQ ™ The intelligent way to build, secure, manage and measure workloads across physical, virtual and cloud environments Your Name Here Your Title Here Your Email Here August 19, 2010
Workloads Deliver a Business Service Workloads Business Service Example: SAP inventory report seen by user Database workload on physical hardware in a legacy data center Application server virtualized in a private cloud Presentation and graphics server in a public cloud
The Customer Challenge: Manage a Siloed Infrastructure IT Service Management IT Service Management IT Service Management Business Service Management Business Service Management Business Service Management Physical Virtual Cloud Governance and Compliance Governance and Compliance Governance and Compliance Internal Cloud (On-Premise) External Cloud (Off-Premise) Firewall
Intelligent Workload Management: From Silos to Services IT Service Management Business Service Management Governance and Compliance Internal Cloud (On-Premise) External Cloud (Off-Premise) Build Secure Measure Manage Firewall Physical Virtual Cloud
Intelligent Workload Management Intelligent workload management enables IT organizations to manage and optimize computing resources in a policy-driven , secure and compliant manner across physical, virtual and cloud environments to deliver business services for end customers. Intelligent WORKLOAD Management
Enables self-regulation and management according to business policy
Recognizes when it is at capacity
Finds alternative computing capacity as required to optimize performance
Includes security controls that move with the workload between environments
Enables real-time event tracking, monitoring and alerting
Understands its security protocols and processing requirements
Delivers built-in log management and compliance reporting capabilities
Recognizes when workload contains confidential information
The intelligent way to build, secure, manage and measure workloads across physical,virtual and cloud environments
Data Center Computing Is Changing Identity Is at the Center of the Transformation Intelligent Workload Management Cloud (Public and Private) Virtualization Single-purpose Physical Systems
IDC Whitepaper: Intelligent Workload Management Enables Security from the Datacenter to the Cloud 2010 Security and identity and access management are critical to the success of physical, virtual and cloud computing. Identity Is Critical
WorkloadIQ: Integrating Identity into Management Isolated Identity Awareness Resource Management General Purpose Operating System Security and Compliance Management Service Management Service Management Security and Compliance Management Resource Management Custom, Supported Operating System
WorkloadIQ: Case Studies Build HSBC uses SUSE Linux Enterprise Server , a WorkloadIQ product, to improve operational efficiency and reduce overall IT costs. Walmart uses SUSE Linux Enterprise Server , a WorkloadIQ product, to move to lower-cost commodity server hardware while improving the customer experiences. DFS uses SUSE Linux Enterprise Server , a WorkloadIQ product, to ensure high availability and safety for its aircraft, while saving on licensing fees.
WorkloadIQ: Case Studies Secure Vancouver 2010 uses Novell Identity Manager , a WorkloadIQ product, to ensure users have the correct access rights and that they're being enforced consistently across the infrastructure. Toll Brothers uses Novell Access Manager and Novell Identity Manager , WorkloadIQ products, to increase security while reducing user management time and costs. Telecom Italia uses Novell Sentinel , a WorkloadIQ product, to reduce workload and costs by almost 50 percent, and to achieve compliance.
WorkloadIQ: Case Studies Manage BCCard uses PlateSpin Forge , a WorkloadIQ product, to protect its data and maintain availability of critical systems. Sussex Health Informatics Service uses Novell ZENworks Configuration Management , a WorkloadIQ product, to enable full remote maintenance and automated software distribution, reducing costs and improving clinical care. Essent uses PlateSpin Migrate , a WorkloadIQ product, to consolidate its servers and save approximately €2 million.
WorkloadIQ: Case Studies Measure Europo Assistance uses Novell Business Service Management , a WorkloadIQ solution, to ensure better availability for key systems and to improve reliability of support. Gothaer Systems uses Novell Business Service Management , a WorkloadIQ product, to ensure 24x7 available for critical systems, fix problems quickly and minimize downtime. The US Navy uses Novell Sentinel , a WorkloadIQ product, to automate and centralize security monitoring.