Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (7)
Similar to Track A-3: Drive Innovation & Reduce Costs with Managed Services
Similar to Track A-3: Drive Innovation & Reduce Costs with Managed Services (20)
More from scoopnewsgroup
More from scoopnewsgroup (20)
Recently uploaded
Recently uploaded (20)
Track A-3: Drive Innovation & Reduce Costs with Managed Services
- 1. © 2015 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential. Adobe Cloud Solutions for Government
- 2. © 2016 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential. Adobe: FedRAMP Authorized Cloud Service Provider (CSP) Adobe Experience Manager Managed Services Web Content Management: Create, manage and deliver digital experiences across websites, mobile sites and on-site screens that are global in reach, yet personally relevant and engaging. Adobe LiveCycle Managed Services Digital Forms and Content Security (DRM): Simplify the creation, processing and securing of electronic forms and documents. Adobe Connect Managed Services Collaboration and E-Learning: Adobe offers immersive online meeting experiences for collaboration, large-scale virtual conferences and virtual classrooms. 1 2 3
- 3. © 2016 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential. FedRAMP SOC2 ISO27001 HIPAA GLBA Adobe Experience Manager (SaaS) Create, manage and deliver digital experiences across websites, mobile sites and on-site screens that are global in reach, yet personally relevant and engaging. • Sites Web content management • Assets Digital asset management • Apps Mobile app development and management - • Communities Online community experiences, forums, COIs, and learning - Simplify the creation, processing and securing of electronic forms and documents. • Forms Document management to make forms, documents, and processes paperless • DRM Digital rights management Adobe Connect (SaaS) Online meetings experiences for collaboration, conferences and classrooms. • Adobe Connect Collaboration and eLearning • FedRAMP – Federal Risk and Authorization Program • SCO2 – Service Organization Controls • ISO27001 – Family of standards to managed the security of assets • HIPAA – Health Insurance Portability and Accountability Act • GLBA – Gramm-Leach-Bliley Act Adobe Cloud Services for Government 1 2 3
- 4. © 2016 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential. Customer Expectations Personalized Relevant Real-time Global Availability, Secure and Always On
- 5. © 2016 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential. Adobe’s Evolution to Cloud Services Product Adobe increases its value to a customer Infrastructure: Dev Begins: Platform updated: Customer Focus: Adobe Focus: Months Months after Not often, if ever IT / Mission Product Weeks Weeks after Not often, if ever IT / Mission Cloud enabled product Days Days after Quarterly / as desired Less on IT / more on mission Service / customer mission
- 6. © 2016 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential. Software as a Service Adobe’s Evolution to Cloud Services Product Adobe increases its value to a customer Infrastructure: Dev Begins: Platform updated: Customer Focus: Adobe Focus: Months Months after Not often, if ever IT / Mission Product Weeks Weeks after Not often, if ever IT / Mission Cloud enabled product Days Days after Quarterly / as desired Less on IT / more on mission Service / customer mission
- 7. © 2016 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential. Adobe Cloud Solutions SaaS Cloud Infrastructure IaaSVPCCENTRALIZED AUTHORING AEM Author DISTRIBUTED DELIVERY AEM Publish 1 Web Server Dispatcher 1 Balancer Load AEM Author* AZ 1 AZ 2 AEM Publish 2 Web Server Dispatcher 2 • Increased Speed & Agility • Reduce Capital Expenses • Scalable / Elastic / Secure • Globally Available It’s all bits; These tiers become repeatable; “Intelligent” Automation is now possible; etc. Adobe Platform PaaS • Faster Innovation • Rapid Construction of Applications • Reduces Complexity • Engaging, Personalized, Relevant, Real-time, Always On, Cross Channel Experiences Application
- 8. © 2016 Amazon Web Services, Inc. or its Affiliates. All rights reserved. Wilfred Justin Senior Manager, ISV Alliances wilfredj@amazon.com AWS World Wide Public Sector Amazon Web Services Security and Compliance
- 9. “Based on our experience, I believe that we can be even more secure in the AWS cloud than in our own datacenters.” -Tom Soderstrom, CTO, NASA JPL Voice of the customer For more details, see Re:Invent 2013 presentations by NASA JPL cyber security engineer Matt Derenski (http://awsps.com/videos/SEC205E-640px.mp4)
- 10. “… We’ll also see organizations adopt cloud services for the improved security protections and compliance controls that they otherwise could not provide as efficiently or effectively themselves.” Security’s Cloud Revolution is Upon Us Forrester Research, Inc., August 2, 2013 Forrester Study
- 11. Security is No.1 Priority at AWS Comprehensive Security Capabilities to Support Virtually Any Workload People & Procedures Network Security Physical Security Platform Security
- 12. Cloud Security is a Shared Responsibility Cross-service Controls Service-specific Controls Compliance of the Cloud Compliance in the Cloud Cloud Service Provider Controls Optimized Network/OS/App Controls https://aws.amazon.com/compliance awscompliance@amazon.com • Customers and Partners implement their own Application and Service controls • Multiple customers with • FISMA ATOs • DIACAP ATOs • DoD P-ATO • SAS-70 Type II • SOC 1 and 2 • ISO 27001/ 2 Certification • Payment Card Industry (PCI) • Data Security Standard (DSS) • NIST Compliant Controls • DoD Compliant Controls • FedRAMP Compliant Controls • HIPAA and ITAR Compliant
- 13. Customers Refocus on Systems and Apps Security experts are a scarce resource! Refocus your security pros on a subset of the problem Facilities Physical security Compute infrastructure Storage infrastructure Network infrastructure Virtualization layer (EC2) Hardened service endpoints Rich IAM capabilities Network configuration Security groups OS firewalls Operating systems Application security Proper service configuration AuthN & acct management Authorization policies + = More secure and compliant systems than any single entity could achieve on its own. In this case, extremely secure and compliant Adobe Managed Services
- 14. © 2016 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential. Adobe Cloud Solutions Application Adobe Platform Cloud Infrastructure Continuous Delivery Continuous Diagnostic Mitigation • Fuels Innovation • Rapid Response for Security • Rethink DevOps • Increases Value / Time • Increased Protection • More Transparency • Direct tie to Adobe Engineering: Drastically reduce latency with Issue Resolution SaaS PaaS IaaS
- 15. © 2016 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential. Adobe Cloud Solutions: Three Keys to Success PaaS / SaaS • SLA [99.5% to 99.99%] • 24/7 Support • CDM • Continuous Delivery AEM2. Adobe Experience Manage r Develop Immersive, Digital Experiences Open Standards / OSGi Model Leader in Gartner MQ: WCM SaaS 3. Amazon Web Services Compute, Analytic and Storage Services Stability, Flexibility, Reliability Leader in Gartner MQ : IaaS . AWS 1. Customer Success Engineer Expert in AEM and Amazon Direct line to Adobe Engineering and Amazon CSE
- 16. © 2016 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential. Customer Success Engineers (CSE) 24/7 Monitoring & Event Response Patching OS / AEM • Reporting Backup / Restore Performance, Load, Penetration Testi ng War Gaming Disaster Recovery Support Requirements Captured in a digital “Run Book” High-Touch Coaching Strong Partnership with Professional Services / Customer Go-Live Process Maintenance Customization & Upgrades
- 17. © 2016 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential. Global Infrastructure & Service Centers Choice of operating AEM in one or more Regions each consisting of multiple Availability Zones Single Tennant Servers, Network, Mass Storage, Backup Plus entire software stack All QA’d / Known Good Starting Point Cloud Regions Availability Zones 50k-80k Servers Data Centers Managed Service Centers CSE CSE CSE CSE Command/NOC Command/ NOC #
- 18. © 2016 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential. Adobe Cloud Services for Government Adobe’s Advantage People, Process, and Technology • Provide more business value • More Resilient - Direct tie to Adobe Engineering and Support • Improved Compliance / Security Value Capability
- 19. 1 9
- 20. © 2016 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential. VF Production Architecture: 99.9% SLA (AEM Sites + Assets co-mingled) CENTRALIZED AUTHORING AEM Author DISTRIBUTED DELIVERY AEM Publish 1 Web Server Dispatcher 1 Balancer LoadAZ 1 AZ 2 AEM Publish 2 Web Server Dispatcher 2 m3.medium m3.medium m3.large m3.largem3.xlarge Production: 1 - 2 -2 Architecture (High Availability; Clustering across AZ1 and AZ2) 20 Users 40 Million Page Views / Month CDN (AWS Cloud Front) ELB✏ Increase instance by 2 vCPU
- 21. © 2016 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential. VF Staging Architecture: AEM Sites + Assets co-mingled / Similar to Production Staging: 1 - 2 -2 Architecture (High Availability; Clustering across AZ1 and AZ2) CENTRALIZED AUTHORING AEM Author DISTRIBUTED DELIVERY AEM Publish 1 Web Server Dispatcher 1 Balancer LoadAZ 1 AZ 2 AEM Publish 2 Web Server Dispatcher 2 m3.medium m3.medium m3.large m3.largem3.large Generic Instance Large Non Production: 3 Generic Instance Medium Non Production: 2
- 22. © 2016 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential. VF Development Architecture: Non HA Development: 1 - 1 -1 Architecture (Non - High Availability) AUTHORING AEM Author DELIVERY AEM Publish 1 Web Server Dispatcher 1 m3.mediumm3.mediumm3.medium Generic Instance Medium Non Production: 3
Editor's Notes
- Big Idea: We’ve discussed the solution, let’s talk about what it means to be a software company in 2015: it’s more about service than ever before. That means we care of denial of service attacks as much as we care about product features. It means we understand what your mission critical application does and how well it’s performing instead of sitting back and waiting for you to call 1 800 Adobe Support. It means we’ve made investments in cloud security models such as FedRAMP because that is what Government needs.
- Adobe has evolved from merely selling software products to becoming part of the customer team. It’s one thing to simply add consulting services or training to a software product; it’s entirely different to bring the Adobe Engineering and Support teams closer to the customer than ever before. As you progress from left to right – Adobe is solving more of the problem, further reducing risk for our customers, and playing a larger role in ensuring overall success. Stage 1: Simply a product sale (we don’t know how its being used, if its being used) Stage 2: Customer puts Adobe product into the cloud – infrastructure benefits result, but the complexity of IT is still a burden to the customer and Adobe is not any closer to helping customers use, track, improve, and maximize the benefits of our products. Enterprise Service = Managed Service by Adobe = Amazon is the IaaS, Adobe is the SaaS – our team supports, runs, ensures SLAs, etc.) Customers get infrastructure and AEM platform in place quickly, development can begin quickly with our advice, the platform is updated to be most current (capabilities and security), customers focus more on mission / less on IT, and Adobe now brings it’s full resources to the table for “outcome as a service”
- Adobe has evolved from merely selling software products to becoming part of the customer team. It’s one thing to simply add consulting services or training to a software product; it’s entirely different to bring the Adobe Engineering and Support teams closer to the customer than ever before. As you progress from left to right – Adobe is solving more of the problem, further reducing risk for our customers, and playing a larger role in ensuring overall success. Stage 1: Simply a product sale (we don’t know how its being used, if its being used) Stage 2: Customer puts Adobe product into the cloud – infrastructure benefits result, but the complexity of IT is still a burden to the customer and Adobe is not any closer to helping customers use, track, improve, and maximize the benefits of our products. Enterprise Service = Managed Service by Adobe = Amazon is the IaaS, Adobe is the SaaS – our team supports, runs, ensures SLAs, etc.) Customers get infrastructure and AEM platform in place quickly, development can begin quickly with our advice, the platform is updated to be most current (capabilities and security), customers focus more on mission / less on IT, and Adobe now brings it’s full resources to the table for “outcome as a service”
- GE and Capitol One
- Since AWS and its customers share control over the IT environment, both parties have responsibility for managing the IT environment. AWS’ part in this shared responsibility includes providing its services on a highly secure and controlled platform and providing a wide array of security features customers can use. The customers’ responsibility includes configuring their IT environments in a secure and controlled manner for their purposes. While customers don’t communicate their use and configurations to AWS, AWS does communicate its security and control environment relevant to customers. AWS does this by doing the following: • Obtaining industry certifications and independent third party attestations described in this document • Publishing information about the AWS security and control practices in whitepapers and web site content • Providing certificates, reports, and other documentation directly to AWS customers under NDA (as required)
- There are not enough great security professional in your organization today. But the cloud can help. The cloud paradigm hugely reduces the total “security surface area” that customer security experts need to take care of for themselves. They rely on us (as verified by our auditors) for all the low level infrastructure security. They can then refocus their expertise on the higher level OS and application security issues. With that narrower focus, that “reduced security surface area,” comes better security. Your experts can focus and achieve better results in the areas that are more closely related to the differentiated value for your business or mission, as opposed to the generic “undifferentiated heavy lifting” that applies to low-level security and compliance work as well as infrastructure management itself.
- Big Idea: Service is about people. That’s why there is a new role at Adobe = Customer Success Engineer. Our software solution sits on top of Industry leading, Amazon Web Services, and is managed by the CSE to provide a service with a guaranteed up time, cloud expertise, support, continuous diagnostic mitigation, and continuous delivery.
- The CSE plays a central role towards the service being highly available, scalable, and reliable. But the CSE is obviously a player in the overall team. For instance, the solution itself might be about forms or a web site or a mobile app, or actually a combination of all 3. It is the consultant, partner, or customer IT that builds the content, sets up identity management, creates a data model, etc. Once the solution has been developed, then the CSE plays a critical role in best practices for cloud environments and assists with the “go-live” process for a production environment. At this point, the CSE is in a continuous mode of: Patching the OS and dot releases to the Adobe software Setting up nightly backups Continuous Diagnostic Mitigation – Monitoring and responding to events Reporting all changes to a runbook Behind the scenes, running performance, load, and penetration testing Providing high-touch coaching back to the developers Performing maintenance on Adobe and Amazon layers Continuous training for disaster recovery support
- Let’s look at why the Amazon relationship makes so much sense to Adobe. Here we see 11 regions that span the globe. Note that within a single region, you have high availability architectures with respect to technology strategically placed in different flood zones, tectonic plates, energy grids, etc. Each Region breaks down into 2 or 3 AZs; which break down into a couple data centers; which then house between 50k to 80k severs each. At this scale – they are larger than all other competitors combined. To match this global footprint, Adobe drops in managed service experts whose sole purpose is customer success.