secure aa infrastructure as a service for production · iaas solution that is built to securely...

6
Secure Infrastructure as a Service for Production Workloads I AA S SOLUTIONS

Upload: others

Post on 29-May-2020

5 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Secure aa Infrastructure as a Service for Production · IaaS solution that is built to securely support production workloads — CSC IaaS. CSC ENTERPRISE CLOUD IaaS SOLUTIONS CSC

Secure Infrastructure as a Service for Production Workloads

IaaS SOLUTIONS

Page 2: Secure aa Infrastructure as a Service for Production · IaaS solution that is built to securely support production workloads — CSC IaaS. CSC ENTERPRISE CLOUD IaaS SOLUTIONS CSC

THE CHALLENGE

Today, solutions need to accelerate time to market and maintain the flexibility to adapt to uncertainty and rapid change while providing the scalability and reliability to deal with growth. Infrastructure as a Service (IaaS) ad-dresses today’s challenges by delivering compute, stor-age and network resources as a service.

IT business as usual is no longer an option. It is not only the cost of power and space, personnel, management and maintenance that is driving the need for change. Organizations today must be able to react quickly to changing requirements and market dynamics. More virtualization alone is inadequate to meet today’s challenges. Agile organizations require IT to deliver IaaS to accelerate cycle time, eliminate IT barriers to innovation, streamline operations and preserve capital:

Accelerate Cycle Time. Scale IT resources on demand, and expand and contract resources as needed; react to market challenges, competition and opportunities more quickly.

Innovate. Mitigate risks and improve return on investment for new business initiatives by eliminating the IT barriers and hurdles required for additional capital or resources.

Align IT with Business. Reduce waste of under-used resources, and refocus IT staff on adding value to the organization instead of maintaining the infrastructure.

Preserve Capital. Shift from a capital investment (capex) to an operating expense (opex) model for building and consuming IT services.

The advantages of an IT as a Service delivery model are compelling, but security, reliability and integration have prevented many organizations from moving aggressively forward. Now business and government organizations can capture the advantages the cloud delivers with an IaaS solution that is built to securely support production workloads — CSC IaaS.

CSC ENTERPRISE CLOUD IaaS SOLUTIONSCSC Cloud IaaS delivers secure, reliable and elastic public, private and hybrid clouds for the enterprise. Our enterprise cloud services — CSC CloudCompute™, BizCloud™ and BizCloud VPE, all VMware vCloud Datacenter Services — are built to support production applications as well as quality assurance and development environments.

Our enterprise cloud services deliver convenient, on-demand network access to a pool of compute, storage and network resources. They deliver a highly resilient, standardized cloud platform, security and network services, as well as resource and service management using a converged cloud infrastructure, leading technologies and innovative CSC intellectual property. We have incorporated CSC managed services and cybersecurity best practices honed from more than 50 years of experience in providing highly secure, high availability infrastructure services to global commercial enterprises and government organizations.

CSC provides choices to meet your application needs. Choices that will allow you to match each of your appli-cations with the right cloud deployment, service level tier and management option. Choices that let you gain the greatest economies while meeting your requirements for availability, security, resiliency and portability.

CloudCompute delivers compute, storage and network resources as a service with leveraged resources in a multi-tenant environment from CSC Cloud Data Centers. Dedicated Virtual Private Network connections and VLANs are available.

BizCloud is a private cloud delivered from the customer’s choice of premises with dedicated resources offered in a consumption, opex-based model. BizCloud can be deployed in the customer’s data center, a collocation center, or from CSC Cloud Data Centers.

Now more than ever, business and government

are facing the challenge of balancing conflicting

demands. Market pressures to become more agile

and innovative must be addressed while conserv-

ing capital and lowering overall operational costs.

1

Page 3: Secure aa Infrastructure as a Service for Production · IaaS solution that is built to securely support production workloads — CSC IaaS. CSC ENTERPRISE CLOUD IaaS SOLUTIONS CSC

BizCloud VPE (Virtual Private Edition) is a hosted private cloud that delivers dedicated compute and network access with logical segregation of storage, deployed from CSC Cloud Data Centers.

BizCloud for Government offers federal agencies an on-premises private cloud to achieve the environmental controls necessary for the FISMA C&A process.

We use the same hardware and software stack and a consistent management discipline across all our cloud deployment models to allow federated cloud operation and simplify the implementation and management of a hybrid cloud.

Our IaaS cloud offerings include a portal that provides operational transparency into the service; pre-configured service catalogs to rapidly build and manage multiple application environments; and cloud orchestration for developing and managing operational processes. From the CSC cloud portal, you can access your enterprise’s cloud service catalog from which application platforms and operating system servers can be selected for use. With the portal, you also gain visibility into your cloud’s usage and service performance for ongoing operations, security and budget management. Cloud orchestration automates life cycle and workflow tasks, enables rapid

configuring, provisioning and decommissioning of re-sources, and supports service management requests for activities such as security scans, backup and restore, and image loading.

CSC IaaS offers the security, backup, disaster recovery and high-availability options to support office productiv-ity and line-of-business and enterprise applications. You can manage your cloud, or you can choose to have CSC manage it for you. With CSC management, we support you in building out your virtual environment. Then we run and maintain it for you, providing patch management, software distribution, VM monitoring and threat protec-tion. If you choose a high-availability service support level, you have three disaster recovery options to choose from with recovery point and recovery time objectives to meet your needs.

Our enterprise cloud provides the ability to select, for each application deployed, the tier of service support, storage tier and disaster recovery option that best matches the application requirements. You have the choice of four service levels, with availability guarantees from 99.0% to 99.95%, three options for storage en-abling cost-effective support for archive and high-volume transaction data, multiple backup options and disaster recovery alternatives.

CSC Infrastructure as a Service — Designed to support any x86 applications for any deployment model

2

Page 4: Secure aa Infrastructure as a Service for Production · IaaS solution that is built to securely support production workloads — CSC IaaS. CSC ENTERPRISE CLOUD IaaS SOLUTIONS CSC

RESILIENT AND SECURE INFRASTRUCTURECSC IaaS is built on the VCE Vblock™ platform, a power-ful and fully integrated cloud fabric that combines the leading virtualization software from VMware; unified networking, security and management technologies from Cisco; and storage, security and management technolo-gies from EMC. The VCE environment is enhanced with the VMware vCloud™ Director, vShield™ and vSphere™ products to secure the cloud end to end, from the edge to the endpoint. Collectively, these technologies enable:

• Encryption of VPN traffic entering and leaving the CSC cloud

• Use of VLAN within the cloud to separate and protect traffic and data

• Firewalls or virtual firewalls between organizations and between virtual applications in the organization’s cloud environment

• Protection against network-based threats — network intrusion protection

• Active Directory integration for authentication and security policies

• Group and role-based access control (RBAC)

Technologies alone, however, are not enough for a secure, resilient enterprise cloud environment. We combine leading, proven technologies with CSC processes and best practices developed and fine-tuned on the basis of more than 50 years of global managed service experi-ence. Our CSC Cloud Controls Program covers areas such as compliance, data governance, facility security, risk management and information security.

With our cloud infrastructure, each and every component that has the potential to affect service performance has a failover mechanism in place. For example, dual redundant power distribution units in the cloud rack ensure that a single individual power supply failure will not affect system availability. Many infrastructure components carry multiple power sources to enable failover to a secondary power support without affecting system availability or performance.

CSC IaaS is protected by our defense-in-depth security framework, which delivers the physical and logical security, access control and data integrity options need-ed to support mission-critical customer-facing and back-office applications.

All our IaaS offerings provide client or department data isolation and 24x7 incident response, virtual firewalls and network intrusion protection systems (NIPS) monitoring as standard features. Optional security services include

MANAGEMENT CHOICES

STORAGE TIER CHOICES

CLOUDCOMPUTELeveraged ResourcesClient Data Isolation

Dedicated VPN/VLAN OptionDeployed from CSC Cloud Data Centers

BIZCLOUD VPEDedicated VPN and VLAN

Dedicated Compute CapacityLogically Segregated storage

Deployed from CSC Cloud Data Centers

COMPUTE CAPACITYCompletely SegregatedDedicated to One Client

Up to 200% Headroom CapacityDeployed from Your Data Center or Ours

STANDARD100% NL SAS1,400 IOPS*

SELECTFlash (5%) and NL SAS (95%)

1,875 IOPS*

PREMIUMFlash (6%) and SAS (94%)

13,750 IOPS*

SELF-SERVICE99.0% Availability 99.5% Availability

CSC MANAGED99.9% Availability 99.95% Availability

DISASTER RECOVERY OPTIONS RECOVERY POINT OBJECTIVES/RECOVERY TIME OBJECTIVES

Same Cloud Fabric and Standard Rate Card. Billed as a Service across the deployment models.

CHOICES TO MEET YOUR NEEDS

*Performance calculations are based on random, non-sequential input and output operations assuming a blend of 50% read and 50% write operations

3

CLOUD DEPLOYMENT MODEL CHOICES

1 Hour/4 Hours24/28 Hours 8/24 Hours

Page 5: Secure aa Infrastructure as a Service for Production · IaaS solution that is built to securely support production workloads — CSC IaaS. CSC ENTERPRISE CLOUD IaaS SOLUTIONS CSC

antivirus, vulnerability scanning, host intrusion prevention systems (HIPS) and CSC Audit Log Assurance Service. CSC Audit Log Assurance supports companies obligated to comply with government mandates such as Sarbanes–Oxley and the Gramm–Leach–Bliley Act (GLBA). This CSC service ensures that all vital network and system logs are centrally stored, correlated and analyzed by our team of security experts to increase our clients’ ability to track infrastructure resources across their entire enterprise.

CSC’s Cloud Protocol facilitates the transparency of services delivered from the cloud. With transparency into our cloud, CSC is able to mitigate concerns over the loss of visibility that typically occurs when applications and data move from a client’s on-premises-based solution into a public cloud. Examples of information shared by using the Cloud Protocol include current configuration, data location, access rights and history, and event logs. The Cloud Security Alliance, chartered to promote the use of best practices for providing security assurance within cloud computing, integrated CSC’s Cloud Protocol as a pillar of its governance, risk and compliance (GRC) stack. Our commitment to full implementation of the Cloud Protocol distinguishes us as a leader in conforming to Cloud Security Alliance standards.

10 WEEKS TO A PRIVATE CLOUDCSC BizCloud, a VMware vCloud Datacenter Service, is the first and only private cloud billed as a service from a standard rate card that is ready for deployment in just 10 weeks and is deployed from the customer’s choice of premises. BizCloud combines the privacy, security and

control of a private cloud with the elasticity and con-venience of a public cloud. It is an ideal solution when security and compliance concerns prevent workloads from leaving the data center. BizCloud is installed in a data center of your choice with the network security your organization has in place. Service options available for CloudCompute and BizCloud VPE are also available for BizCloud.

With BizCloud, we captured our cumulative experience in standing up worldwide commercial cloud data centers. We combine the powerful cloud fabric and the security required for trust and transparency with our proven expertise in onboarding and managed services to deliver a ready-made private cloud billed as a service. BizCloud arrives preintegrated with a portal providing full transparency into the service; preconfigured service catalogs uniquely configured for your enterprise; and cloud orchestration capabilities for automation of operational processes. We provide the knowledge transfer necessary for you to run and manage your private cloud; or, if the convenience of a managed cloud is required, that option is available.

TEST-DRIVE YOUR CLOUDCSC’s Smart Start program allows you to minimize risk and avoid up-front capital investments while accelerat-ing your discovery and realization of the benefits of the cloud. Smart Start is a hands-on cloud proof-of-concept (PoC) program that lets you test-drive the cloud and gain the experience you need to make informed decisions.

CSC CloudHolistic CSC Defense-in-Depth Security Framework

Data/Service Integrity

• Scheduled and ad hoc security scanning*

• Backup and restore services* • Security incident

response 24x7 • Annual SAS 70 Type II

review • Antivirus services*

lortnoC sseccA

Data Integrity

Logical Security

Physical Security

Transparency

Access Control

•Authentication,authorization, and access management •Audit Log Assurance* • Secure VLANs • Virtual and network

perimeter firewalls

Physical Security

• Access-controlled Tier 2/3 data centers

• Servers in secure suites or cages

• Video surveillance monitored 24x7

• Personnel background checks

• Multifactor authentication • Separation of sta� duties

Logical Security • Hypervisor isolation for

network adapters •Network intrusion

detection • Cloud infrastructure

protection services • Cloud guest VM

protection services • ITIL standards

* Optional Services * Optional Services4

Page 6: Secure aa Infrastructure as a Service for Production · IaaS solution that is built to securely support production workloads — CSC IaaS. CSC ENTERPRISE CLOUD IaaS SOLUTIONS CSC

MOVE YOUR SAP TO THE CLOUDOur CSC Cloud Infrastructure Utility (IU) for SAP acceler-ates upgrade and deployment of SAP environments by providing a complete, ready-to-use managed service that provides the SAP infrastructure, Basis support and a menu of modular service choices to support all SAP environ-ments. Cloud IU for SAP incorporates all aspects of an SAP infrastructure, including compute, storage, backup/restore, disaster recovery and SAP Basis Layer services. SAP Basis support covers all run-time operations so that you can refocus your staff on more critical business priorities.

CSC Cloud IU for SAP is built on IaaS to deliver a secure, reliable and resilient infrastructure. Like CloudCompute, CSC Cloud IU for SAP can be delivered by using dedicat-ed or leveraged resources from CSC Cloud Data Centers or as a private cloud with CSC BizCloud in your data center or ours.

CSC’s proven expertise in SAP, managed services and cy-bersecurity makes us uniquely qualified to deliver an end-to-end SAP solution. We are one of the world’s largest SAP implementation companies, with more than 6,500 dedicated SAP consultants in 50 countries. CSC is an SAP global services partner, SAP’s highest level of part-nership, an SAP global certified cloud services, managed hosting and applications management solutions provider, as well as a leading BusinessObjects BPC implementer.

CLOUD-ENABLE YOUR APPLICATIONSThe CSC ACE Factory provides a fast, predictable and economical path to develop or transform your applica-tions for the cloud.

With the ACE Factory, applications are built to take advantage of the cloud infrastructure, and legacy custom and mainframe applications are quickly transformed to run in the cloud. The ACE Factory begins by assessing

each application to identify the optimal treatment for development or modernization. Then, we develop, rebuild or refactor the application by using the Azure™, Force.com or VMware vFabric™ frameworks. We use our standard, industrialized processes to speed transforma-tion and provide for high-quality application delivery.

CSC — COMMITTED TO YOUR SUCCESSWith more than 50 years of system integration experience, we understand the enterprise. Customer-centric and platform independent, we help you select the best technology. Security is an integral component of all our offerings, processes and systems. Our high level of support helps you minimize risks.

FIND OUT MORE http://www.csc.com/cloud

NORTH AMERICAEmail: [email protected] Call: +1.866.255.0832

EMEA Email: [email protected] Call: +44(0)845.602.4204

AUSTRALIAEmail: [email protected] Call: +61(0)2 9034.3000 

ASIAEmail: [email protected] Call: +65.6221.9095

© 2012 Computer Sciences Corporation. All rights reserved. CSC, CSC CloudCompute, CSC BizCloud, CSC Cloud IU for SAP and CSC ACE Factory are all CSC logos or trademarks or registered trademarks of CSC. All other product and service names mentioned are the trademarks of their respective companies. P2 2628-13 08/12

THE CSC ADVANTAGES Gain the CSC advantages of innovation and choice, security and delivery excellence, and end-to-end application services.

Innovation and Choice

• Let the workloads guide your choices for cloud deployment, service tier and management

• Deploy a private cloud in your data center in just 10 weeks

• Simplify hybrid cloud deployment and management with consistent IaaS onsite and offsite

Security and Delivery Excellence

• Be confident with the security embedded in our processes, tools, infrastructure and delivery

• Gain experience from more than half a century of global enterprise-grade service delivery

• Achieve cloud portability with a Certified VMware Datacenter Services provider

End-to-End Application Services

• Develop, rebuild or refactor applications to fully capture cloud advantages with the ACE Factory

• Jumpstart cloud initiatives, and provide a no-risk PoC with CSC’s Smart Start program

• Refocus your IT resources: Ask CSC to manage and maintain your cloud applications

5