{"id":466,"date":"2020-07-05T20:00:00","date_gmt":"2020-07-05T19:00:00","guid":{"rendered":"https:\/\/www.ituziast.com\/?p=466"},"modified":"2021-11-26T14:34:50","modified_gmt":"2021-11-26T13:34:50","slug":"cloud-adoption-in-the-era-of-accelerated-digital-transformation-part-3","status":"publish","type":"post","link":"https:\/\/www.ituziast.com\/index.php\/2020\/07\/05\/cloud-adoption-in-the-era-of-accelerated-digital-transformation-part-3\/","title":{"rendered":"Cloud adoption in the era of accelerated Digital Transformation (Part 3)"},"content":{"rendered":"\n

In Part 1, of the series, we set the stage for Cloud Adoption Framework, focusing on Strategy. After that, in Part 2, we talked about Plan Phase and its major components and activities. However, we still have ground to cover, especially in the Adopt Phase. In conclusion, lets focus on the quick win areas, from the technical standpoint.<\/p>\n\n\n\n

If You missed the previous two parts, refer to the links bellow
Cloud adoption in the era of accelerated Digital Transformation –
Part 1<\/a> and Part 2<\/a>.<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

In this article, we will focus on the Ready <\/strong>Phase, specifically around the team Azure readiness, and map some quick win projects that will evolve around Governance, Security, and Management, as well as specific First workloads.<\/p>\n\n\n\n

Governance and Security<\/h4>\n\n\n\n

Usually, there is tension between innovation and security\/identity strategies. Business innovation, encompasses transformation, modernization, improving efficiency, driving costs down. On the other hand, security and\/or identity strategies look at the security risks, that might emerge from the business innovation process \u2013 data loss, downtime, breach, malware attacks.<\/p>\n\n\n\n

We also need to understand that, introducing the Cloud within our environment (hybrid model), means that the security is partnership between the cloud provider (Microsoft) and us. On one hand, we have Microsoft, which builds its cloud services on foundation of trust and security. The platform embeds security controls and capabilities that help us protect our data and application (services)<\/p>\n\n\n\n

More information can be found at the Azure Trust Center: https:\/\/www.microsoft.com\/en-ww\/trust-center<\/a><\/p><\/blockquote>\n\n\n\n

On the other side, we own the data and identities, as well as the responsibility for protecting them. We own the security of on-premises resources, and all cloud components we. The first thing to understand about cloud security is that different scopes of responsibility exist, depending on the kinds of services you use.<\/p>\n\n\n\n

For example, if you use virtual machines (VMs) in Azure, which provide Infrastructure as a Service (IaaS), Microsoft will be responsible for helping secure the physical network, physical storage, and virtualization platform, which includes updating the virtualization hosts. But we will need to take care of helping secure your virtual network and public endpoints and updating the guest operating system (OS) of the VMs.<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

Regardless of the deployment type, you always retain responsibility for the following:<\/p>\n\n\n\n