Business Ramifications of Various IT Infrastructure Models Lee Williams, CEO Digital Connections, Inc. Prepared for the Financial Executives IT Committee September 16, 2010
Feb 23, 2016
Business Ramifications of VariousIT Infrastructure Models
Lee Williams, CEODigital Connections, Inc.
Prepared for the Financial Executives IT Committee
September 16, 2010
The Real Chain• Decision (Yours)
• Choice (Yours)
• Consequences (Not necessarily yours)
What we want to do is fill in the unknown blanks FIRST
Getting our Ducks in a Row
Table of Contents• Introduction and Purpose• Bibliography • List of Figures• Opening Gambit • The First Great Divide• Advantages and Disadvantages of the Public CITI models• Factors Reviewed in the Public • CITI Model and the IS2 Model• Remote CITI Models• SaaS (Software-as-a-Service)• PaaS (Platform-as-a-Service)• IaaS (Infrastructure-as-a-Service)
Table of Contents
• The IS2 Models (InfraStructure Structure)• The In House Model• The IMO Model• The Outsourcing Model• Risks, Security, and Other Gotchas• Practical Applications for the CITI and IS2 Models• About IT Transformation• Conclusion
Table of Contents• Appendices (all in Excel 2010 Format)• CITI Financial Cost Model• CITI Financial Contingencies & Considerations• CITI Operational & General Notes• CITI Risks & Security Concerns • CITI Transformation Notes • IS2 Financial Cost Model• IS2 Financial Contingencies & Considerations• IS2 Operational & General Notes• IS2 Risks & Security Concerns • IS2 Transformation Notes• Works Cited
Partial Sample - Appendices Spreadsheets(10 tabs with approximately 175 entries)
CITI to In House Financial Comparison
Additional Costs
Reduced Costs
(Annualized)
1 What is the "base rate" calculation? (e.g. number of units, hours, etc.?) 2 Are there any "up front" or "set up" fees? 3 What equipment costs will need to be added? 4 What equipment costs will be eliminated? 5 Will there be additional costs in bandwidth required? 6 What additional personnel costs will be required? 7 What personnel costs will be eliminated? (include benefits) 8 What are the costs for any personnel RIFs that come into effect?
9 Are there any reductions in personnel training costs, tool sets, vehicles? 10 Will the model require additional costs for on-site back-ups? 11 What are the security associated costs? 12 What are the redundancy associated costs? 13 What will be the costs of Software Licenses? 14 How will this effect hardware maintenance costs? 15 Are "hard dollar" space costs affected? 16 Are "hard dollar" electrical costs affected?
17 Are "hard dollar" supporting systems (AC, Power Back Up Systems) affected? 18 Will there be additional technical training costs required?
How Much Can We Improve?
• It depends on how effective and efficient current structure is
• It depends on the level of service to your users• It depends on the condition of your infrastructure
(including security and redundancy)• It depends on how ethical you are
Things to Avoid
Some Things I Would Want to Avoid
• Underutilized resources – human, hardware and software resources
• Spending money with no real benefit, or worse yet, investing with worse operational performance– “Time and time again I have seen huge, massively expensive, mission-critical
applications sit on equally huge and massively expensive storage infrastructures that are essentially idling under low load. Meanwhile, elsewhere in the data center, a collection of cheap tertiary applications are burning their storage resources to a crisp with loads many times that of the critical systems.”₁
1 Matt Prigge, “The Real Cost of Lying about IT Infrastructure Costs,” InfoWorld, April 19, 2010.
But in GENERAL…
You PROBABLY can…
• Reduce your TOTAL IT costs from 10% to 40%.• Improve all of your production operational IT
up times and improve processing speeds by 2% to 5%.
• With the average office worker on a PC 800 hours per year, that’s 16 to 40 hours per year of productivity as well as reduced frustration
But you will have to…
Before You Transform
• Have an open mind. IT doesn’t have to be done the way you do it today.
• Understand your business processes and how IT affects them.
• Understand your current costs – all of them.• Prioritize well.• Proceed slowly and cautiously.
But Doesn’t My IT Staff Do This?• Probably NOT. And here are a few of the reasons why:• 1) They may not fully understand the business logic.
First Test – Name the top 5 IT platforms that affect the business. Second Test 2 – Does your reliability, security and redundancy reflect it?
• 2) They may not be knowledgeable of what and how improvements can be made. IT is a very swiftly changing environment.
• 3) If they add certain technological improvements they will only be forced to handle more… problems, requests, additions, etc. – on your already “tight” budget?
• 4) It may be perceived that a good change for the company affects them in a negative way.
IT Infrastructure is not an end-game, it is a continually evolving process.
One thing is for certain – you will never arrive; rather, you will just be traveling towards the destination.
This is why the ability to transition the IT infrastructure is so important.
What are IT Clouds?
What are “IT Clouds”?
• Don’t get caught up in the jargon, terminology• Clouds give a user the ability to access and use
information across a network• Clouds come in two main varieties – Public &
Private• Clouds, whether public or private, provide
scalability and elasticity• Clouds have varying degrees of security and
redundancy, thus varying degrees of risk
(CITI – Public )
Lower Business Entity Control
(CITI – Private )
PaaS
Higher Business Entity Control
SW (their tools – you develop,customize)
SW (yours)
The Six Models of CITI
SW (your tools- You develop, customize)
SW (theirs) Delivery (theirs)
SWInfrastructure StaffSoftware
Infrastructure HW
SaaS
IaaS
SW (yours) Delivery (yours)
IaaS Delivery (theirs)
SaaS
PaaS
SW (yours)Delivery (yours)
In House
Lower Business Entity Control
IMO
Out Sourcing
Higher Business Entity Control
SW +
SW
SW
SWInfrastructure StaffSoftware
Infrastructure HW IS2 Infrastructures
Vendors
Help Desk NOC
X
Help Desk NOC
The Three IS2 Models
Nine Factors Reviewed in Each Model
• Illustration• Description• Advantages• Disadvantages• Financial Ramifications• Examples of Providers• Similar Models• Negotiation Points• Considerations
In House
(CITI – Public )
Lower Business Entity Control
(CITI – Private )
PaaS IMO
Out Sourcing
Higher Business Entity ControlSW
+
SW (their tools – you develop,customize)
SW (yours)
SW
SW
SW (theirs)
SWInfrastructure StaffSoftware
Infrastructure HW IS2 Infrastructures
SaaS
VendorsIaaS
Help Desk NOC
Help Desk NOC
X
PrivateSaaS
SW (Theirs)
Public
SW – Yours and you can modify
Examples: Application on your server to your workers over the network. To gain scale – virtualize.
Examples: Salesforce.com (CRM)NetSuite (business software)Rackspace
PrivatePaaS
SW (Theirs but you can develop)
Public
SW – Yours but you can develop
Examples: Company IT Personnel Vendor Provided Programmers(Any language required)To gain scale - virtualize
Examples: Google - App Engine (Python, Django)Salesforce.com – Force.com (Java)
PrivateIaaS
SW (Yours but maybe theirs on their platform)
Public
SW – Yours on your platform
Examples: Your applications riding on your platform delivered to your workers via your network. To gain scale - virtualize
Examples: Rackspace; GoGridMicrosoft – AzureAmazon – EC2 (Elastic Cloud Computing)
Public Cloud Advantages; Disadvantages
Hardware SW Advantages Disadvantages
SaaS Theirs Theirs Immediately usable Inflexible. Big target PaaS Theirs Theirs but can Temporary projects Must live with develop- be developed Web 2.0 Mashups ment platform. Big target.
IaaS Theirs Yours/may Optimum use of scale No/little control. Big target. be developed Web 2.0 Mashups Difficult to disengage.
All to some degree All to some degree may offer scale, elasticity have latency, security, fast implementation ownership, legal issues.
Some Cloud Risks
• Security of proprietary information• Security of customer information• Meeting regulatory security requirements• Legal issues – Massachusetts’ security
requirements, viability issues, litigation of information issues
• Performance• Vendor Lock In.
Survey of 547 Business Technology Professionals(Survey Results from Information Week Analytics, November 9, 2009)
The Three IS2 Models• IS2 Stands for InfraStructure Structure • From your perspective, it only applies to
Private Clouds or Your IT Network
• Like Public Clouds, there are many derivations of these three models
SW
In House
Vendors
In House – The Good, the Bad, and the Ugly
• The Good – You have total control.
• The Bad – You have no scale advantages other than virtualization. High cost model. Limited staff.
• The Ugly – You have no personnel scale advantages, and may have no technical help desk, no NOC, not have the best IT prioritization, and may be involved in day-to-day IT issues. Worse yet, you may be held “hostage”. You may not have “enforceable” Service Level Agreements.
SW
IMOIMO Provider
IMOs – The Good, the Bad, and the Ugly
• The Good – You have personnel scale advantages, technical help desk, NOC, improve IT prioritization. You should not be involved in day-to-day IT issues nor are you held “hostage”. You have enforceable SLAs. Synchronizes IT costs to budget. You own the IT assets.
• The Bad – You don’t have total control over personnel. May not have the discipline for process. Doesn’t scale. Hardware & Software applications. You own the IT assets.
• The Ugly – It may be threatening to current IT personnel.
SW
OutsourcingOutsourcer
Outsource – The Good, the Bad, and the Ugly• The Good – You have personnel and asset scale
advantages, technical help desk, NOC, improve IT prioritization. You should not be involved in day-to-day IT issues nor are you held “hostage”. You have enforceable SLAs. Synchronizes IT spend to budget, additional metrics. You may or may not own the IT assets.
• The Bad – You don’t have total control over personnel, nor software, hardware or refresh. May not have the discipline for process. May not scale hardware and software. You may or may not own the IT assets.
• The Ugly – It may be threatening to current IT personnel. Very difficult to disengage if it were the wrong choice.
Approach & Process• How does your IT align itself with your business? What is it
that you need or don’t need and what are your business priorities? What is critical and what is not? Does IT give you the information you need to operate and optimize the business? What would be your current costs to align?
• Identify and segregate your costs – by hardware, software, personnel, benefits & expenses (training), IT test equipment or vehicles, licenses, maintenance, outside vendors. What is your monthly IT cost per user by category? Estimate what one hour of downtime to a business user costs. How many total business end user business hours do you incur? If you can’t calculate, estimate your SLAs (responsiveness).
Approach & Process
• What is the health (reliable, secure, redundant) of your IT infrastructure? What would be the cost to make it healthy? Be sure to include operational costs (e.g. maintenance) as well as capital costs.
• Now you have a “total and segregated baseline”. You now can compare both Public and Private Cloud offerings as well as IS2 models.
Approach & Process• As you compare various models to your baseline:• Does it align itself with your business model?• What exact costs go away?• What exact costs remain?• What affects do you have on end user responsiveness
(SLAs)?• What are the affects to reliability, security, and redundancy?• Is the model transitional? How hard will it be to change the
model?• Go slow. Be cautious. Do your homework! Appendix to the
paper contains about 175 questions & notes!
A Few Very General Examples• SaaS (public) may be advantageous when: 1) the application meets
your exact needs. 2) You have a “temporary” or “peak load” situation. (Beware of “SaaS sprawl”, latency, security, legal and ownership issues.)
• PaaS (public) may be advantageous when: 1) You have in house programming capabilities and the application can be made to meet your exact needs. (Beware of the platform you use. You’re stuck with it. See SaaS above.)
• IaaS (public) may be advantageous if all the applications meet your needs and you want no part of IT. (Beware of latency, security, legal, and ownership issues. Also, if they go down – you go down.)
A Few Very General Examples• In House – Advantageous if you need total control. Virtualize
your servers to gain scale. (Beware that your costs may be high and responsiveness may be poor as well as reliability, security, and redundancy issues. Plus, beware of failure – VM Ware is not for the meek, nor the overconfident.)
• IMOs – Advantageous to adding significant scale and providing better service; also very translucent. Can still take advantage of Public Cloud offerings. (Beware that you still own the assets and software.)
• Outsource – Advantageous in scale, responsiveness without being in a public cloud. (Beware that you do not own the assets or software, do not control refresh of the assets, and difficult to disengage. Also, if they centralize servers, if they go down – you go down.)
Business Ramifications of IT Infrastructure
• Thank you• Inquisitions & Answers