Risks in the Cloud

KJ Ross Test Management Forum 2014

Chris Birmele

Product Technology Specialist

Microsoft Australia

cbirmele@microsoft.com

Why the cloud?

App provisioning, deploying Adjust to actual needs, up/down Pay as you go for what you use

Cloud Platform Computing Models

What are the risks?

Risks? Data security (privacy, integrity)? Availability?

?

on prem cloud

Imp

act

Probability

Risk Profile

Risk profile is similar BUT probability and

impact are significantly different.

What are the risks?

Risks? Data security (privacy, integrity)? Availability?

Imp

act

Probability

Risk Profile

Risk profile differs across Cloud Computing

Models

Example: Scalability Risks

Applications don’t scale infinitely, you need to design for it …

?

Example: Storage Options

Storage

Storage Accounts

BLOBs Tables Queues Azure SQL Azure Cache Azure Backup HD Insight

Infrastructure

Networking

Application

Storage Accounts Storage Account

Container(s)

•BLOBs •Tables •Queues

Size

Max size per account 200TB

Max accounts per subscription 20

Performance

Request Rate (1KB objects) 20’000

Ingress (inbound requests) - Locally Redundant - Geo-Redundant

10 gigabits/sec 5 gigabits/sec

Egress (outbound requests) - Locally Redundant - Geo-Redundant

10 gigabits/sec 15 gigabits/sec

Redundancy

Locally Redundant (LRS) Yes

Geographically Redundant (GRS) Yes

Read-Access Geographically Redundant Yes

Type Usage

Block BLOBs Large amount of unstructured data. Scalable, cheap.

Page BLOBs Optimised for random access and frequent updates

Tables Large amount of semi-structured data

Queues Persistent messaging

SLA

Availability 99.9% to 99.99%

Managing Risks

TRUST your cloud provider!

Cloud Risk Decision Framework

Variation of existing standard - ISO 31000 • Identify Risk • Analyse Risk (probability & impact) • Evaluate Risk Greg Stone - Chief Technology Officer Microsoft Australia Pierre Noel - Chief Security Advisor, Microsoft Asia http://download.microsoft.com/documents/australia/enterprise/SMIC1545_PDF_v7_pdf.pdf

© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Thank You