sharepoint governance: impacts of moving to the cloud

SharePoint Governance: Impacts of Moving to the Cloud

Christian BuckleyDirector of Evangelism, Axceler

Antonio MaioSenior Product Manager, TITUS

SharePoint Governance:Impacts of Moving to the Cloud

What we’ll cover today:

• Cloud Strategy: Office 365 & SharePoint Online

• Important Considerations for Moving to the Cloud

• Investments already made in SharePoint

• Impacts to Data Sovereignty and Regulatory Compliance

About Christian Buckley, Director of Product Evangelism at Axceler

• Microsoft MVP for SharePoint Server

• Prior to Axceler, worked for Microsoft, part of the Microsoft Managed Services team (now Office365-Dedicated) and worked as a consultant in the areas of software, supply chain, grid technology, and collaboration

• Co-founded and sold a software company to Rational Software. At E2open, helped design, build, and deploy a SharePoint-like collaboration platform (Collaboration Manager), onboarding numerous high-tech manufacturing companies, including Hitachi, Matsushita, Cisco, and Seagate

• Co-authored ‘Microsoft SharePoint 2010: Creating and Implementing Real-World Projects’ link (MS Press) and 3 books on software configuration management.

Twitter: @buckleyplanet Blog: buckleyplanet.com Email: cbuck@axceler.com

Axceler Overview

• Improving Collaboration since 2007• Mission: To enable enterprises to simplify, optimize, and

secure their collaborative platforms• Delivered award-winning administration and migration

software since 1994, for SharePoint since 2007• Over 3,000 global customers

• Dramatically improve the management of SharePoint

• Innovative products that improve security, scalability, reliability, “deployability”

• Making IT more effective and efficient and lower the total cost of ownership

• Focus on solving specific SharePoint problems (Administration & Migration)

• Coach enterprises on SharePoint best practices• Give administrators the most innovative tools available• Anticipate customers’ needs• Deliver best of breed offerings• Stay in lock step with SharePoint development and market trends

About Antonio Maio, Senior Product Manager at TITUS

• Microsoft MVP for SharePoint Server

• Senior Product Manager bringing over 20 years of experience in both software development and product management to TITUS.

• Antonio's background includes formal education and experience in cryptography, public key infrastructure and information security, and he previously held positions at Corel, Entrust, and several Microsoft partner organizations. His broad knowledge and experience with Microsoft SharePoint extends over the last 8 years and centers particularly around solving security challenges while at the same time helping customers share the right information with the right people.

Twitter: @antoniomaio2 Blog: trustsharepoint.com Email: antonio.maio@titus.com

TITUS Overview

• Data Security & Classification Market Leader• Over 500 Enterprise Customers• Over 2 Million Users Deployed• Customers across Government, Military and Commercial Sectors

• Enhance SharePoint Security• Ensure the right people access the right information in SharePoint

• Email and Document Marking• Ensure every email is classified and protectively marked before it is sent• Ensure every document is classified and protectively marked

• Data Loss Prevention• Prevent inadvertent disclosure of sensitive information• User-driven DLP strategy that starts with the user

Our goal today:

To help you fill in some of the pieces of your planning strategy for the cloud

43%$6.1 billion48%$9 billion

Total spend last year

Expected growth of enterprise spending on cloud in 2013

Spend expected this year

Growth of enterprise spending on cloud in 2012

According to

What is driving cloud adoption?

Data anytime, anywhere.

It’s all about self-service.

Bring your own device.

Everything is social.

Built for the business user, not IT.

Why the cloud is becoming important to SharePoint customers

As SharePoint continues to expand its footprint, companies are demanding flexible architectures to help them better meet internal and external collaboration needs

• Reducing costs

• Reducing headcount

• Doing more with less

• Focusing less on traditional IT activities and more on activities that will help drive the business forward

Microsoft in the Cloud

• Office 365 and SharePoint Online

• Microsoft’s solution for Cloud based collaboration• Includes SharePoint, Yammer, Exchange, Lync, Office Suite, etc.

• Businesses collaborate from virtually anywhere

• World-class hosting and reliability• Avoid overhead in managing your own infrastructure

• Low barrier & cost to entry

• Pay per use service plans

• Costs shift from CAPEX to OPEX

• Assurance on scale and high availability

• Professionally managed data center, 24x7 support

• Latest and Greatest - software is always up to date

Benefits

Office 365 & SharePoint Online

• Manage own infrastructure/servers

• Some part of the business owns or focusses on IT

• Upgrades can be time consuming and costly

• Clear delineation between data ownership & management

• Clear control over business information

Contrast

Traditional SharePoint On-Premise

Considerations for

SharePoint Online Customizations• Microsoft has introduced the “App Model”

• New to Microsoft Office 2013 and SharePoint 2013• Works On-Premise and in Office 365 SharePoint Online

Considerations for

SharePoint Online Customizations• Benefits

• Enhance SharePoint & Office to solve specific business problems

• Flexible deployment models• Restrict access to server resources

to ensure high-availability• Replaces sandbox solutions

• Microsoft App Marketplace

Provider Hosted

Auto Hosted (Azure)

SharePoint Hosted

Risks with the cloud

model

Hang On!

Let’s talk about some real world scenarios

What about my existing investment in SharePoint?

• Most SharePoint deployments have included customizations to meet critical business needs

• User Management & Administration• Security and Compliance• Auditing, Reporting, Alerting• User Adoption, Records• Branding, etc…

• Consider the business problems you’ve already invested in solving

Maturity of the Office365 platform

• Perform regular security checks across your farm, down to the document level

• Proactively review, delete, and reassign user permissions as needed

• Clean up users who are no longer in Active Directory but are in SharePoint

• Review SharePoint groups• Have a process to backup and restore permissions• Document site permissions (roles) so that its easier

to duplicate them for new employees• Monitor SharePoint licensing

Managing on prem, the cloud, and hybrid:

Permissions Management

• Monitor and track the growth of sites for better planning, especially with migrations

• Analyze web part usage to determine which sites are using which web parts

• Understand and manage SharePoint features

• Ensure consistent branding and behavior: site themes, quotas, regional settings, etc.

Managing on prem, the cloud, and hybrid:

Content & Storage

• Analyze activity down to the site, page, and document level

• Identify who is accessing which documents, including details on that activity (i.e. checking in a document, editing a document, or just viewing a document’s properties)

• Isolate sites that are no longer needed and delete them

• Compare activity from the past to help anticipate the future

• Find sites with the most or least activity

Managing on prem, the cloud, and hybrid:

Usage and Activity trends

• Proactively manage architecture of your site collections, sites, lists, libraries, folders and items within your farm or across farms

• Have a plan for moving content and structure from test environment to production environment

• Understand impacts due to architectural changes or business changes

Managing on prem, the cloud, and hybrid:

Reorganizing your farm

Consider the Business Problem:

Security and Compliance

• Impacts to Governments, Intelligence Community, Regulated industries

• SharePoint has great built in security and compliance capabilities

• At scale, management of security can be challenging

• Specific industries have strict regulations on users accessing certain types of information

Consider the Business Problem:

Security and Compliance• 3rd SharePoint applications to

automate & enhance security

* AIIM report: Extending SharePoint Enterprise Security

Data Sovereignty

• Where data lives matters!• Once information is sent across borders, it’s difficult,

if not impossible, to control

• Impacts to government and regulated industries• Governments need to ask “Where is my citizens’ data?”

• What are the impacts on citizen data (PII, PHI)?

• Do I have complete control over my data?

• How do we solve this issue?

Regulatory Compliance

• Industries need to comply with regulations – ITAR, HIPAA, ISO 27001, PCI DSS, PII, etc…

• ITAR regulations - restricted access control on controlled information based on user attributes

• HIPAA regulations address security and privacy of health data

• ISO27001 regulations are formal ISO specification to bring information security under explicit management control

• ITAR – International Trade in Arms Regulations• Strict obligations dealing with international trade in weaponry• Which users can access specific controlled data, the citizenship of

those users, the physical location of those users, etc.

• Office 365 is making good progress• FISMA awarded, Certified under EU Safe Harbor, EU Model Clauses• Data Processing Agreement (DPA) for customer data privacy• FERPA, HIPAA BAA, HITEC requirements supported• ITAR service plan available (variation of O365 Dedicated Plans)

Regulatory Compliance:

Consider ITAR

Devil is in the details…Do the certifications go far enough to meet your business needs?Will the way they’re enforced fit with your organization?

Understand the risks

and develop a plan

Self QuizAs you prepare to move key workloads to the cloud, here are some governance questions to ask yourself:• What happens to your existing

reporting and metrics? Do the same KPIs apply to your new cloud components, or do they need to be reevaluated?

• Are there any changes to your ability to manage permissions across your on-premises and cloud components? Are the methods different?

Self Quiz• Do your existing policies remain

in effect, or do you need to adjust for two models?

• Can you maintain visibility into your information architecture and the Managed Metadata in SharePoint across all farms, or granularly within individual sites?

• Are you able to track storage usage across all sites and site collections?

Self Quiz• What happens to your auditing

and compliance monitoring capability? Can you still see what is being accessed, and by whom?

• With your new social capabilities, how much visibility do you have into how users are interacting, where content is being shared, and how well collaboration is being achieved?

Self Quiz• If moving content, sites and users

between platforms, how much visibility will you have around storage, content database reports, inactive users, administrative cleanup of orphaned users?

• Are you able to setup management policies and procedures that span the various systems? Are you able to organize and automate complex preventive and responsive actions?

SharePoint Governance Maturity Benchmarkhttp://tinyurl.com/SPgmb

Governance and Administrationfor Hybrid Deploymentshttp://tinyurl.com/SPga4hd

Protecting Business Information With a SharePoint Data Governance Modelhttp://tinyurl.com/d62j3nl

Thank you!Christian Buckleycbuck@axceler.com @buckleyplanetwww.Axceler.comhttp://tiny.cc/buckleypresentationshttp://tiny.cc/buckleybloghttp://tiny.cc/buckleybookhttp://tiny.cc/buckleygovernance4hybrid

Antonio Maioantonio.maio@titus.com @antoniomaio2www.TITUS.comhttp://www.slideshare.net/AntonioMaio2/http://www.trustsharepoint.com http://www.titus.com/blog