Professional Documents
Culture Documents
Document Your Cloud Strategy
Document Your Cloud Strategy
Strategy
Get ready for the cloudy future with a
consistent, proven strategy.
Jeremy Roberts
Research Director, Infrastructure and Operations
Info-Tech Research Group
The answers might be different, but the questions are the same
Every organization will approach the cloud differently, but they all need to ask the same questions: When will we use the cloud? What forms will our
cloud usage take? How will we manage governance? What will we do about people? How will we incorporate new technology into our environment?
The answers to these questions are as numerous as there are people to answer them, but the questions must be asked.
• Ensure that the cloud strategy is complete and accurately reflects organizational
goals and priorities.
43%
• Develop a consistent and coherent approach to adopting cloud services.
• Design an approach to mitigate risks and challenges associated with adopting cloud
services.
• Create a shared understanding of the expected benefits of cloud services and the of respondents report progressing
steps required to realize those benefits. on a cloud-first strategy as a top
cloud initiative.
Source: Flexera, 2021.
Technology
Define Your
• Architecture
Cloud Vision • Integration and
• Mission and vision interoperability
• Alignment to other • Operations management
strategic plans • Cloud portfolio management
Vision and • Guiding principles • Cloud vendor management
alignment
• Measuring success
Governance • Finance management
• Security
• Data controls
• What questions do we need to • What steps have we already taken to • What are the next steps?
answer to complete the discussion of address this component? • Who needs to be involved?
this strategy component? What does • Does anything still need to be done? • What questions still need to be
the decision look like? • Is there anything we’re not sure asked/answered?
• What are some key terms and best about or need further guidance on? • What should the document’s wording
practices we must understand before look like?
deciding?
Info-Tech Research Group | 7
Info-Tech’s methodology for documenting your cloud
strategy
1. Document your vision and 2. Record your people 3. Document governance 4. Formalize your
alignment strategy principles technology strategy
Document official organizational
positions in these governance areas:
Documented strategy: vision and Documented cloud governance Documented cloud technology
Phase Outcomes alignment
Documented people strategy
strategy strategy
summary Separate strategy from tactics! A strategy requires building out the framework for ongoing decision making. It is
meant to be high level and achieve a large goal. The outcome of a strategy is often a sense of commitment to the
goal and better communication on the topic.
The cloud does not People problems Governance is a means Technology isn’t a
exist in a vacuum needn’t preponderate to an end panacea
Cloud Strategy Document • It is important to remember that not every cloud strategy will look exactly
template the same, but this template represents an amalgamation of best practices and
cloud strategy creation honed over several years of advisory service in the
Inconsistency and informality are the space.
enemies of efficiency. Capture the
results of the cloud strategy generation • You know your audience better than anyone. If you would prefer a strategy
exercises in the Cloud Strategy
delivered in a different way (e.g. presentation format) feel free to adapt the
Document template.
Cloud Vision Executive Presentation into a longer strategy presentation.
• Emphasis is an area where you should exercise discretion as well. A cost-
oriented cloud strategy, or one that prioritizes one type of cloud (e.g. SaaS)
at the exclusion of others, may benefit from more focus on some areas than
others, or the introduction of relevant subcategories. Include as many of
these as you think will be relevant.
• Parsimony is king – if you can distill a concept to its essence, start there.
Include additional detail only as needed. You want your cloud strategy
document to be read. If it’s too long or overly detailed, you’ll encounter
readability issues.
Info-Tech Research Group | 10
Blueprint benefits
• Document Your Cloud Strategy has been available for several years in various forms as
both a workshop and as an analyst-led guided implementation.
13 Days
• After each engagement, we send a survey that asks members how they benefited from
the experience. Those who have worked through Info-Tech’s cloud strategy material
have given overwhelmingly positive feedback.
Average reported time savings
• Additionally, members reported saving between 10 and 20 days and an average of
$46,499.
• Measure the value by calculating the time saved as a result of using Info-Tech’s
framework vs. a home-brewed cloud strategy alternative and by comparing the overall
$46,499
cost of a guided implementation or workshop with the equivalent offering from another
firm. We’re confident you’ll come out ahead.
Average cost savings
Pharmaceutical company
The unnamed pharmaceutical company that is the subject of this case study
Example output: Document your cloud strategy
was looking to make the transition to the cloud. In the absence of a coherent workshop exercise
strategy, the organization had a few cloud deployments with no easily
discernable overall approach.
Representatives of several distinct functions (legal, infrastructure, data, etc.) all
had opinions on the uses and abuses of cloud services, but it had been difficult
to round everyone up and have the necessary conversations.
As a result, the strategy exercise had not proceeded in a speedy or well-
governed way. This lack of strategic readiness presented a roadblock to moving
forward with the cloud strategy and to work with the cloud implementation
partner, tasked with execution.
Results
The company engaged Info-Tech for a four-day workshop on cloud strategy Anything in green, the team was reasonably sure they had good
documentation. Over the course of four days, participants drawn from across alignment and next steps. Those yellow flags warranted more
the organization discussed the strategic components and generated consensus discussion and were not ready for documentation.
statements and next steps. The team was able to formalize the cloud strategy
and described the experience as saving 10 days.
Info-Tech Research Group | 13
Info-Tech offers various levels of
support to best suit your needs
Guided Implementation
DIY Toolkit Workshop Consulting
“Our team has already made this “Our team knows that we need to “We need to hit the ground “Our team does not have the time
critical project a priority, and we fix a process, but we need running and get this project or the knowledge to take this
have the time and capability, but assistance to determine where to kicked off immediately. Our project on. We need assistance
some guidance along the way focus. Some check-ins along the team has the ability to take this through the entirety of this
would be helpful.” way would help keep us on over once we get a framework project.”
track.” and strategy in place.”
Diagnostics and consistent frameworks are used throughout all four options.
Info-Tech
Info-Tech Research
Research Group| 15
Group | 15
Workshop Overview
Contact your account representative for more information.
workshops@infotech.com 1-888-670-8889
controls
1.2 Discuss cloud mission and 2.2 Review culture and adoption 3.2 Review cloud portfolio
vision management 4.2 Design a monitoring
2.3 Discuss a cloud governing approach 5.1 Populate the Cloud Strategy
1.3 Discuss alignment with other body 3.3 Discuss cloud vendor
4.3 Document the workload Document
strategic plans management
2.4 Review architecture position provisioning process
1.4 Discuss guiding principles 3.4 Discuss cloud finance
2.5 Discuss integration and 4.4 Outline migration processes
management
1.5 Define success metrics interoperability and procedures
3.5 Discuss cloud security
Deliverables
This phase will walk you through the following This phase has the following outcome: Document Your Cloud
activities: • Documented strategy: vision and alignment Strategy
1. Record your cloud mission and vision
2. Document your cloud strategy’s alignment with
other strategic plans
3. Record your cloud guiding principles Info-Tech Research Group | 17
Record your mission and vision
Build on the work you’ve already done
Before formally documenting your cloud strategy, you should ensure that you must be involved/informed? What callouts must be involved at what point?
have a good understanding of your overall cloud vision. How do you plan to Do users have access to the appropriate strategic documentation (and would
leverage the cloud? What goals are you looking to accomplish? How will you they understand it if they did)?
distribute your workloads between different cloud service models (SaaS,
You must also capture some guiding principles. A strategy by its nature
PaaS, IaaS)? What will your preferred delivery model be (public, private,
provides direction, helping readers understand the decisions they should
hybrid)? Will you support your cloud deployment internally or use the
make and why those decisions align with organizational interests. Creating
services of various consultants or managed service providers?
some top-level principles is a useful exercise because those principles
The answers to these questions will inform the first section of your cloud facilitate comprehension and ensure the strategy’s applicability.
strategy. If you haven’t put much thought into this or think you could use a
Finally, this phase will walk you through the process of measuring success.
deep dive on the fundamentals of your cloud vision and cloud archetypes,
Once you know where you’d like to go, the principles that underpin your
consider reviewing Define Your Cloud Vision, the companion blueprint to this
direction, and how your cloud strategy figures into the broader strategic
one.
pantheon, you should record what success actually means. If you’re looking
Once you understand your cloud vision and what you’re trying to accomplish to save money, overall cost should be a metric you track. If the cloud is all
with your cloud strategy, this phase will walk you through aligning the about productivity, generate appropriate productivity metrics. If you’re
strategy with other strategic initiatives. What decisions have others made that looking to expand into new technology or close a datacenter, you will need to
will impact the cloud strategy (or that the cloud strategy will impact)? Who track output specific to those overall goals.
1. Cloud vision statement: This is a succinct encapsulation of your overall 2. Service model decision framework: Services can be provided as software
perspective on the suitability of cloud services for your environment – what as a service (SaaS), platform as a service (PaaS), infrastructure as a service
you hope to accomplish. The ideal statement includes a scope (who/what (IaaS), or they can be colocated or remain on premises. Not all cloud service
does the strategy impact?), a goal (what will it accomplish?), and a key models serve the same purpose or provide equal value in all circumstances.
differentiator (what will make it happen?). This is an example: Understanding how you plan to take advantage of these distinct service
“[Organization] will leverage public cloud solutions and retire existing models is an important component of the cloud strategy. In this section of the
datacenter and colocation facilities. This transition will simplify strategy, a rubric that captures the characteristics of the ideal workload for
infrastructure administration, support and security, while modernizing legacy each of the named service models, along with some justification for the
infrastructure and reducing the need for additional capital expenditure.” You selection, is essential. This is a core component of Define Your Cloud Vision,
might also consider reviewing your overall cloud archetype (next slide) and and if you would like to analyze individual workloads, you can use the Cloud
including the output of that exercise in the document as well. Vision Workbook for that purpose.
3. Delivery model decision framework: Just as there are different cloud 4. Support model decision framework: Once you have a service model
service models that have unique value propositions, there are several unique nailed down and understand how you will execute on the delivery, the
cloud delivery models as well, distinguished by ownership, operation, and question then becomes about how you will support your cloud deployment
customer base. Public clouds are the purview of third-party providers who going forward. Broadly speaking, you can choose to manage your
make them available to paying customers. Private clouds are built for the deployment in house using internal resources (e.g. staff), to use managed
exclusive use of a designated organization or group of organizations with service providers for ongoing support, or to hire consultants to handle
internal clients to serve. Hybrid clouds involve the use of multiple, specific projects/tasks. Each approach has its strengths and weaknesses, and
interoperable delivery models (interoperability is the key term here), while many cloud customers will deploy multiple support models across time and
multi-cloud deployment models incorporate multiple delivery and service different workloads. A foundational perspective on the support model is a key
models into a single coherent strategy. What will your preferred delivery component of the cloud vision and should appear early in theInfo-Tech
strategy.
Research Group | 19
model be? Why?
Understand key cloud concepts: Archetype
Once you understand the value of the cloud, We can best support the organization’s goals by:
your workloads’ general suitability for the
More Cloud
cloud, and your proposed risks and
Cloud-Centric Providing all workloads through cloud delivery.
mitigations, the next step is to define your
cloud archetype. Cloud-Focused
Using the cloud as our default deployment model. For
Cloud-First
Your organization’s cloud archetype is the each workload, we should ask “why NOT cloud?”
strategic posture that IT adopts to best support
the organization’s goals. Info-Tech’s model
Enabling the ability to transition seamlessly between on-
recognizes seven archetypes, divided into Hybrid
premises and cloud resources for many workloads.
three high-level archetypes.
After consultation with your stakeholders, and Combining cloud and traditional infrastructure resources,
based on the results of the suitability and risk Cloud-Opportunistic Integrated
integrating data and applications through APIs or
assessment activities, define your archetype. middleware.
The archetype feeds into the overall cloud Using the cloud for some workloads and traditional
vision and provides simple insight into the Split
infrastructure resources for others.
Less Cloud
• Perspective from Applications, Infrastructure, • Is there a cloud vision statement? If so, what is it?
Data • What is our preferred cloud support model? Will we be primarily hiring or training
• Executive leadership (non-IT) internal staff, working with consultants, or hiring a managed service provider?
• Are we primarily a public cloud shop? Does a private cloud or hybrid cloud model
figure into our plans going forward?
Key decisions • Could we benefit from a multicloud approach?
• Cloud archetype • How will we determine the appropriate service model for each workload? What
• Preferred cloud support model makes a workload a good candidate for infrastructure as a service, platform as a
service, or software as a service?
• Preferred cloud delivery model
• Is there any disagreement on any of these counts?
• Preferred cloud service model
• Defined mission/vision statement
1-2 hours
1. Review the questions on the previous slide and discuss them with the group.
2. Consider any additional questions that emerge during the conversation. Are they
worth including in the strategy document?
• Perspective from some service owners • What needs to change to transform the cloud vision into a reality? Are there any
policies/strategies that must be updated to reflect cloud priorities?
• Are there any stakeholders with strong opinions about the cloud vision? Do they have
input into policy or strategy areas that must be addressed as part of the cloud strategy?
Key decisions
• Policies and strategies relevant to the cloud
strategy
Info-Tech Insight
• Impact the relevant policies and procedures will
Sysadmins like to use the “scream test” if they can’t figure out what a server is
have on the cloud strategy document supporting. Unplug it and see who screams! Use the same logic to incorporate other
strategic plans into your cloud strategy. If you left them out of the cloud strategy, what
stakeholders would scream? Use this information to ensure they’re included!
1-3 hours
1. Review the questions on the previous slide. Discuss them with the group.
2. Document any specific alignments. If, for example, a strategic goal is to be more
cost-conscious, capture how the cloud can be leveraged to accomplish this. Speak
in broad terms.
Materials Participants
3. Record a summary of the conversation in the Cloud Strategy Document template.
Keep your audience in mind – help them understand why the cloud is relevant to
them. • Cloud Strategy Document • CIO
template
• Management
• Cloud strategy creation team
• Service owners (optional)
Governance
Technology
• When generating principles, think about the rules that define appropriate
People
tactical responses. If, for example, the overall vision is to reduce costs, a
principle might be pursuing standardization as opposed to customization,
while a tactic would be using SSO technology to standardize the
authentication process for end users.
• Cloud strategy creation team • When executing on the cloud strategy, what do all actors need to keep in mind?
• Is there anything in the mission/vision component of the strategy document that can
be effectively captured as a guiding principle, focusing on the “how” of the cloud
project?
• What overarching principles will inform tactical discussions around people,
Key decisions governance, and technology? What do those making decisions in these areas need to
account for?
• Guiding principles
• What misalignment potential is there? Where could an uneven application of
• Contribution of guiding principles to underlying
standards cause disruption? Can this be rectified by instituting a formal guiding
tactics
principle?
principles documentation
• Mission/vision discussion
1-3 hours
1. Review the questions on the previous slide. Discuss them with the group.
2. If the group identifies a set of guiding principles that apply to the cloud strategy,
record those principles.
3. Talk through how the principles would apply in practice. If one is “lower costs,”
discuss the projected impact of the cloud on spend. If another is “focus on more
valuable work,” ensure that all present understand what work is considered more
Materials Participants
valuable.
“If a firm measures a, b and c, but not x, y, and z, then managers begin to pay more attention
to a, b, and c. Soon those managers who do well on a, b, and c are promoted or are given more
responsibilities. Increased pay and bonuses follow. Recognizing these rewards, managers start
asking their employees to make decisions and take actions that improve the metrics. […] Soon
the entire organization is focused on ways to improve the metrics. The firm gains core
strengths in producing a, b, and c. The firm becomes what it measures.”
– John Hauser and Gerald Katz
European Management Journal, 1998
Key decisions
• List of cloud strategy success metrics
Info-Tech Insight
Consider using “tension metrics” to prevent overemphasis on one component of the
strategy. A set of tension metrics complement each other such that attempting to game
one metric will be detectable in the other. For example, “migration speed” could be held
in tension with cost or performance to ensure efficiency and quality of service.
1.4 Document success metrics • Cloud drivers • List of success metrics for
the cloud strategy
• Cloud vision
• Group discussion
1-3 hours
1. Review the questions on the previous slide. Discuss them with the group.
2. Ensure you discuss the story you want to tell about the cloud and that your
proposed success metrics align with that story.
3. Once you have a shortlist, go through each one and, with the group, discuss how
changes in its value would impact the story you’re trying to tell. If a sample metric
is uptime, should the proposed cloud migration increase or decrease it? What can
Materials Participants
you expect to see if your beliefs about the cloud are true? Refer to any drivers you
have previously identified, along with the mission/vision conversation from earlier
in this section.
• Cloud Strategy Document • CIO
4. Record the list of success metrics in the Cloud Strategy Document template. template
• Management
• Cloud strategy creation team
This phase will walk you through the following This phase has the following outcome: Document Your Cloud
activities: • Documented people strategy Strategy
1. Outline your skills and roles strategy
2. Document your approach to culture and adoption
3. Create a cloud governing body
Info-Tech Research Group | 34
The cloud changes your people strategy
Skills, roles, responsibility – the cloud changes them all
Depending on how you choose to roll it out, the cloud could represent a sea in IaaS can be tricky as well. Your cloud strategy must address these points
change in how your organization provides IT services. Managing physical and others.
infrastructure, spending hundreds of thousands of dollars on equipment in
Culture and adoption
large, relatively infrequent capital outlays, and managing the entirety of the
infrastructure stack on premises are skills that can recede in importance with If you build it, they will come, right? Maybe not. No technology rollout can
a move to the public cloud. succeed without buy-in from users. This is especially true when the cloud
spells big changes for end users (more self-service, a transition to
A complete cloud strategy must address the potential disruption caused by a
Chromebooks, etc.). Managing change at the organization level is therefore a
dislocation. The templated document included with this blueprint focuses on
critical strategic dimension and must be addressed in the document.
three key areas: skills and roles, culture and adoption, and governing bodies.
Governing bodies
Skills and roles
Decision making in the cloud is important as well. When governance
There’s a reason cloud skills are among the most sought-after in the job
proceeds in a haphazard fashion, an inconsistent deployment – which makes
market today: While similar in many ways to the skills developed on
it difficult to acquire needed skills or to convince users to adopt the service –
premises, new platforms and ways of working – favored in many shops –
becomes the norm. An understanding of who is going to make decisions (a
require staff to train and pick up new skills to succeed. Managing a SaaS
cross-functional body? A cloud architect?) is a key step in completing the
environment is very different from managing locally hosted software.
strategy document.
Amazon and Microsoft add new services and features with almost alarming
regularity. Learning how to properly manage permissions in a PaaS or costs
Lean on vendors for training: Include training and knowledge transfer as part of cloud service contracts. Cloud providers and third-
party vendors have significant experience with migrating and managing transitions to the cloud. This is how they make money. They
have valuable insight that they can share – ask questions, build this service into your contracts, and reap the benefits of the experience.
Hire a cloud architect: Go to market for an IT team member with the cloud architecture skills to provide a leadership function and help
design the environment in line with best practices. This person will also likely be involved in cloud governance, owning the strategy and
participating in the governance committee.
Acquire cloud certifications for key staff: Amazon Web Services, Microsoft Azure, and Google Cloud all have certification paths. The
same is true for many PaaS and SaaS providers. For those staff members who own/manage specific platforms, a certification can be a
great way to facilitate access to knowledge about cloud services. Certifications can be part of development plans.
Require security awareness training for all staff on an ongoing basis: The cloud represents a shifting/changing risk landscape.
Identity becomes even more critical than it has been historically as services migrate out of the datacenter and beyond perimeter defenses.
Security is everyone’s responsibility, and the cloud represents an important change in this space.
Conduct a RACI exercise: With changes in the cloud, delineating specific responsibility for operational functions is essential for clarity.
Consider conducting a RACI exercise to document how the cloud impacts staff roles and who needs to be involved in specific types of
decision making.
Info-Tech Research Group | 37
Discuss: skills and roles
Participants Questions
• IT management • Based on our preferred delivery models, service models, and support models, what
• Applications skills are going to be required to migrate to – and manage – the cloud going forward?
• Security • Must any new roles be created to accommodate additional cloud skills (e.g. billing)?
• Human resources (optional) • What is the best way to fill any skills gaps: training, hiring, outsourcing, etc.?
• Is there a chosen cloud vendor? If so, are there any relevant certifications (Azure
Fundamentals, AWS Solutions Architect, etc.) that might be prerequisites for the
Key decisions strategy to succeed?
• Strategic approach to acquiring skills necessary • Is there an organizational training function? If so, what would that group’s
to safely deploy cloud solutions involvement be in skills and roles?
• Clarification of cloud roles and changes to • Is the operating model going to shift? What are the implications for roles?
responsibilities
1-3 hours
1. Review the questions on the previous slide. Discuss them with the group.
2. Document the skills necessary to execute on the cloud vision, whether those exist
in the organization or will need to be acquired elsewhere, and the strategy for
procuring those skills (internal IT, MSPs, consultants, etc.).
3. Discuss any new roles that must be created if the skills gaps identified cannot be
properly addressed by the existing roles in the organization.
Materials Participants
4. Summarize the results of the conversation and record them in the Cloud Strategy
Document template.
• Cloud Strategy Document • IT management
template
• Applications
• Infrastructure
• Security
1. Seek and incorporate feedback 2. Show, don’t (just) tell 3. Evolve and iterate
• A top-down organizational culture can be • Wherever you can, demonstrate specifically • Like all strategies, your cloud strategy
effective in some cases, but when making what the impact of any changes would be. should not be rigid. Evolve and iterate based
significant changes, it can be difficult to Use demo environments for SaaS solutions, on new requirements, market conditions, and
bring others on board. walk stakeholders through proposed updates even new technology. Let your participants
• Incorporate end users into the decision- to provisioning workflows, and present any know that the document will evolve, and be
making process – seek out and leverage information that you’ve used to make your sure to discuss what the process for
feedback. If you involve potential detractors, decisions or that you would like interested reviewing and updating the strategy is.
they will take partial ownership of the parties to consider.
eventual decision and are less likely to cause
problems down the line.
Info-Tech Insight
Don’t ask questions you don’t want to know the answer to. If you’ve already decided or there’s some limiting factor that makes a particular path
nonviable, set those boundaries up-front instead of gathering feedback that you cannot action. Nothing is worse than filling out a survey or
participating in a focus group and later learning that the people running the show have blatantly ignored your feedback. Info-Tech Research Group | 40
Discuss: culture and adoption
Participants Questions
• IT management • How much of a change do cloud services represent for the organization? Will that
• HR/change management change be difficult?
• Application/service owners • What obstacles are likely to prevent a successful cloud transition and what steps can
be taken to mitigate the challenges posed?
• For SaaS?
• For PaaS?
• For IaaS?
Key decisions • Is there a robust organizational change management process in place that has been
• Steps necessary to overcome cultural challenges effective in bringing other services over? Are there any obvious examples of
• Organizational change management strategies successful implementations that can serve a guiding function?
• Communication plan for cloud deployment • Where does responsibility for change management sit – within the PMO or
somewhere else?
• What stakeholder groups will need to be involved?
1-3 hours
1. Review the questions on the previous slide. Discuss with the group.
Info-Tech Insight
Your IT operating model is a crucial part of your cloud governance plan. Review Optimize the IT Operating Model for advice on how to redesign
your operating model to account for the changes that come with cloud services. You can use this blueprint to create a target operating model based
on your knowledge of your users and consumers.
• Architecture • What parts of the strategy will they be accountable for? Specifically, who is
responsible for what?
• How will they collaborate? Will the cloud governance group meet monthly? Weekly?
At a different cadence?
• Why were these groups selected?
Key decisions
• Responsibility for designing and maintaining
cloud governance
1-3 hours
1. Review the questions on the previous slide. Discuss with the group.
3. Record the results in the Cloud Strategy Document template. Materials Participants
This phase will walk you through the following d) Cloud portfolio management Document Your Cloud
activities: e) Cloud vendor management
f) Finance management
Strategy
1. Document official organizational positions in these
g) Security
governance areas:
h) Data controls
a) Architecture
b) Integration and interoperability This phase has the following outcome: Info-Tech Research Group | 46
c) Operations management
• Documented cloud governance strategy
Set and formalize the rules of the game
It’s not sexy, but governance is important
Without stable, consistently applied governance, the cloud strategy cannot be Organizations fall on a spectrum when it comes to strategic direction in the
effectively implemented. Governance includes defining and enforcing cloud. This can range from those that are cloud-focused or cloud-first
architectural principles, integration practices, cloud portfolio management, (prioritizing the cloud as a strategic end) to those that are cloud-averse
and the introduction of new services into the environment. Upon reading the (avoiding the cloud for whatever reason). This organizational perspective
strategy document, IT staff and users alike should understand who is making should have been captured as part of the mission and vision exercise; there
decisions, the parameters they are using, the processes they follow, and the should be a firm mission statement that offers a position on general cloud
overarching purpose of each of the components. They should, in short, direction and should inform the steps taken to institute governance even at
understand who is allowed to do what – and why. the service level.
This section is the largest, most involved component of the strategy process Each conversation in this section should result in generalizable principles that
and requires input in many areas, ranging from architecture and governance you can use to govern decision making going forward. As you’re facilitating
to security. Ensure that you have adequate representation from each group these discussions, think about how you can effectively apply standards, any
before proceeding. As an alternative, consider proceeding in a contingent key decision points, and any stakeholders that need to be consulted.
fashion until you can secure the necessary perspective. You should also have
completed the previous section on governing bodies as well; this will help
you understand the limits of your approach.
Info-Tech Insight
Consider reviewing existing architectural guidelines for their suitability as cloud principles. Keep the fundamental cloud characteristics in mind
(on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service), and evaluate how your existing principles
need to change or what new principles must be identified to align with these characteristics.
Key decisions
• Documented list of architectural principles
• Statements on the architectural future state
1-3 hours
1. Review the questions on the previous slide. Discuss with the group.
3. Record the results of the discussion in the Cloud Strategy Document template. Materials Participants
Principles
• Lean on APIs: Application programming interfaces (APIs) are the core of the cloud integration experience. In a nutshell, APIs represent the rules of
engagement for integrating an application with another services. Some providers are more willing to expose public APIs for their SaaS solutions. Some
are not. If you own the applications you’re looking to integrate, you may wish to create an API library to enshrine API standards. REST APIs are
generally preferable to a point-to-point POST SOAP call, as they are more loosely coupled.
• Loose coupling: An integration is loosely coupled when it comprises a link that can be easily changed or replaced. New application architectures like
microservices incorporate this concept, and it may be worth exploring for your applications and services. (Capital One calls microservices that are
tightly coupled “distributed monoliths.” The overhead of managing a service like this would probably not be worth it!)
• Avoid middleware wherever possible: When multiple services need a software layer to communicate, this software layer is middleware. Middleware
can include more traditional enterprise service bus (ESB) solutions or integration platform as a service (iPaaS) offerings. Middleware solutions like
iPaaS are often used in conjunction with API management as part of common platforms. (Mulesoft’s is called “CloudHub,” for example.)
• Ensure compatibility with necessary software: You may have specific requirements for certain types of applications, like compatibility with a single
sign-on provider. This should be accounted for in the cloud strategy to ensure that users have a seamless, high-quality experience.
1-3 hours
1. Review the questions on the previous slide. Discuss with the group.
3. Record the results of the conversation in the Cloud Strategy Document template.
• Cloud Strategy Document • Application owners
template
• Enterprise/cloud architect(s)
• IT management
• Operations management o Are there any processes that are particularly important or warrant specific
attention?
• IT management
• What are the expected changes that the cloud will bring to service design, release
management, etc.?
• Does the cloud offer any opportunities to streamline/improve any of these processes?
Key decisions • Do we have the skills/expertise in house to handle changes to the operational
• List of impacted operational management management processes?
processes
• Optimal operational process changes given the
desired cloud future state
• Group discussion
operations management in
the cloud
1-3 hours
1. Review the questions on the previous slide. Discuss with the group.
3. Record the results of the conversation in the Cloud Strategy Document template.
• Cloud Strategy Document • Asset manager
template
• Service owners
• Operations management
• IT management
1. Review the questions on the previous slide. Discuss with the group.
2. Discuss the proposed lifecycle of cloud services. When are services instantiated?
By whom? Under what authority?
3. Describe any important changes to the cloud portfolio management process that
come as a result of the portfolio management process.
4. Record the results in the Cloud Strategy Document template. Materials Participants
• Group discussion
around cloud vision
1-3 hours
1. Review the questions on the previous slide. Discuss with the group.
2. Your discussion should cover the following key areas to be included in the final
strategy document:
a) Responsibility for vendor management (centralization vs.
decentralization)
b) Principles governing vendor management
Materials Participants
c) Changes to vendor management practices brought about as a result of the
cloud
3. Record the results of the conversation in the Cloud Strategy Document template. • Cloud Strategy Document • IT management
template
• Vendor management
• Asset management
• Legal
Capacity
functions/services/credits (like premium connectors in Microsoft’s Power Platform toolset,
though depending on how deep you go, this might look more like a PaaS). You should read terms
and conditions carefully to understand what is covered by your license and ensure that users
cannot incur additional costs.
PaaS: Generally billed on a transaction basis, you can expect to pay for PaaS differently
depending on the function that it serves. For example, if you’re using a serverless solution, you
may be billed only for transactions executed and for nothing else. Generally, you’re not paying
for components specifically in a PaaS environment, but sometimes pricing is based on the
underlying infrastructure (e.g. Azure SQL).
IaaS: Pricing is more granular than PaaS. Expect to provision virtual machines and pay based on
Time
their size and how long they run – often right down to the second – as well as for storage, Capacity Demand
ingress/egress, any GPU requirements, and the region the instance is running in.
Info-Tech Insight
The cloud isn’t necessarily cheaper, but the flexible pricing model can introduce cost efficiencies and allow you to free up capital that would
otherwise need to be spent on infrastructure refreshes and software licensing.
Info-Tech Research Group | 64
Review: finance management
Price Variability Complexity
The overall cost of cloud services can be The cloud may be more or less expensive, Cloud providers bill for everything. This
daunting, especially considering that they but unless you’ve entered into a fixed practice allows for granularity, but it can
are not capitalized. One goal of price contract with a provider, expect be challenging to interpret for those who
successful finance management in the your costs to vary somewhat from month are less familiar with IaaS or PaaS cloud
cloud is to ensure that cloud spend is kept to month. This can pose a challenge. solutions. How should this be resolved?
in check. Techniques Techniques
Techniques • Reserved instances and other fixed- • Look for specific skills in hiring,
• Use reserved instances, sustained use price deals can make sense for certain including experience managing cloud
discounts, or other provider workloads and will reduce variability. services. Consider employing a
incentives to keep prices low. • Monitoring spend as it’s incurred and billing analyst or even a “cloud
• Size services appropriately, including setting thresholds for spend in IaaS economist.”
right-sizing IaaS deployments and can be useful ways to manage • Incorporate those responsible for
ensuring that SaaS licensing aligns variability. purchasing into discussions about
with demonstrated need. • Build variability into the cloud future cloud services.
• Design applications to avoid budget. Make room for potential
excessive ingress/egress, take cost excess.
into account at the design stage.
• Development/operations (optional) • Are provisions currently in place to handle cost overages? Can they be built? Who
would be responsible for building them? Is there a contingency fund in place?
• Who will be responsible for right-sizing IaaS and PaaS workloads to manage cost
overruns?
Key decisions • What monitoring solutions are in place to review costs? What thresholds (if any) must
• Acceptable cloud cost models be set? Who is responsible for acting on cost alerts?
• Approach to handling cost variability • What is architecture’s role in ensuring that cost is managed effectively? Are any
specific principles to be applied?
• Responsibility for managing cost in the cloud
1. Review the questions on the previous slide. Discuss with the group.
2. Your conversation should touch on the service models you’ve chosen to employ as
part of the overall cloud strategy, the implication for those service models on
management of cloud finances, and responsibility for managing cloud spend.
3. Record the results of the conversation in the Cloud Strategy Document template.
Materials Participants
• Security standards/frameworks that must be • Are there any security tools that must be integrated/compatible with all cloud
broadly applied solutions (e.g. SSO, SIEM)?
1-3 hours
1. Review the questions on the previous slide. Discuss with the group.
Info-Tech Insight
A chain is only as strong as its weakest link. If you’ve got a mass of ungoverned data, you should treat it as though it could contain sensitive
information and act accordingly.
Info-Tech Research Group | 71
Discuss: Data controls
Participants Questions
• IT management • Do we have a solid data inventory? Do we know what data is where?
• CISO • What requirements are the various types of data subject to? Are there any specific
• Risk/compliance/privacy regulatory or contractual provisions that limit where data can go?
• Information architecture/governance • What information is required from cloud providers to ensure that they are compliant
with data sovereignty requirements?
• Are there any compliance standards that providers are expected to meet if they will be
working with sensitive data?
Key decisions • How do you expect providers to respond to a breach?
• Relevant compliance criteria • Who is responsible/accountable for data quality?
• Data quality processes and procedures
• Data protection standards, including backup and
disaster recovery
3.8 Define data controls in the • Cloud decision framework • Documented data controls in
1-3 hours
1. Review the questions on the previous slide. Discuss with the group.
2. Use your answers to these questions to develop and validate positions in the
following areas:
a) Compliance requirements related to data
b) Data quality processes and procedures
c) Data protection, including backup in the cloud Materials Participants
3. Record the results in the Cloud Strategy Document template.
This phase will walk you through the following This phase has the following outcome: Document Your Cloud
activities: • Documented cloud technology strategy Strategy
1. Formalize organizational approach to monitoring
2. Document provisioning process
3. Outline migration processes and procedures
Info-Tech Research Group | 74
Cloud technology
Monitoring, provisioning, and migrating – what does the cloud mean for you?
People and process are arguably the most important cogs in the cloud success is understanding what must be monitored, how it will be monitored,
machine, but technology – the tools used to provision, monitor, and migrate and the steps that must be taken once an alert/alarm is received.
to and from cloud solutions – cannot be overlooked. While tech alone can’t
Provisioning
solve all your problems, leveraging the right technology at the right time in
the right way can be the difference between a successful, value-driving cloud With the cloud comes speed, agility, and automation – provided you take
deployment and an abject, miserable, no-good zombie project that eats up advantage, of course! Understanding how resources are provisioned, who is
resources without anything to show for it. responsible for provisioning, what the pipeline looks like – which automation
tools are used, for example – and how these processes differ based on the
How should technology figure into your cloud strategy?
service model in question.
Cloud technology encompasses significant breadth such that it is unrealistic
Migration
to include every possible permutation here, especially when considering the
multiplicity of service/delivery models available for purchase/consumption. The act of migrating to the cloud may also be a component of the broader
That said, there are several technology components that all cloud customers cloud strategy. Based on requirements and technical capabilities, migration
are going to encounter in one form or another: paths will vary and should be systematized (rehost, replatform, refactor, etc.).
Monitoring
Monitoring in the cloud can be conducted using either the native solutions
offered by providers or a third-party toolset like SolarWinds. Critical to
• Application owners • What must be monitored? Performance? Uptime? Cost? Security? All of the above?
Something else? Ensure that you understand your monitoring requirements as part of
• Enterprise architecture
the strategy.
• Who will elicit requirements for monitoring? Who will they gather them from?
• What technology will administrators use to monitor cloud workloads? Will they use
Key decisions solution-native solutions like Azure Monitor, or third-party solutions like Datadog,
Splunk, or Dynatrace?
• Solutions that must be monitored
• Who is responsible for receiving alerts? What do they do when they receive the
• Technical solutions for monitoring
alerts? Is there a current process that can be built upon?
• Plan for actioning alerts/alarms
1-3 hours
1. Review the questions on the previous slide. Discuss with the group.
a) What is the goal of the monitoring program?
b) What services need to be monitored?
c) What solutions for this monitoring exist/need to be procured?
d) What are the gaps that still need to be addressed in providing the solution?
2. Record the results of the conversations – and the answers to these questions – in Materials Participants
the Cloud Strategy Document template.
• Application owners
• Enterprise architecture
Download the Cloud Strategy Document template
Info-Tech Insight
It might be tempting to implement governance restrictions like those you use on premises, but you should think twice before doing this. One of the
key drivers most organizations cite when moving to the cloud is the opportunity for dynamism and agility. Don’t let fear of change lock you into
the past.
• Tools used to provision resources in the cloud • How will provisioning differ in Dev/Test compared to production?
• Principles and best practices that must be • How will metadata tagging figure into the provisioning conversation?
applied in governing the provisioning of cloud • Who will be responsible for gathering requirements from cloud customers regarding
resources their provisioning needs?
4.2 Define cloud provisioning • Cloud decision framework • Cloud provisioning strategy
These migration paths reflect organizational capabilities and desired outcomes in Relocate
terms of service models – cloud or otherwise. Retention means keeping the workload • Move the workload between datacenters or to a hosted
where it is, in a datacenter or a colocation service, or relocating to a colocation or software/colocation provider.
hosted software environment. These represent the “non-cloud” migration paths. Rehost
In the graphic on the right, the paths within the red box lead to the cloud. Rehosting • Move the application to the cloud (IaaS) and continue to run
it in more or less the same form as it currently runs.
means lifting and shifting to an infrastructure environment. Migrating a virtual
machine from your VMware environment on premises to Azure Virtual machines is a Replatform
quick way to realize some benefits from the cloud. Migrating from SQL Server on • Move the application to the cloud and perform a few changes
premises to a cloud-based SQL solution looks a bit more like changing platforms for cloud optimizations.
(replatforming). It involves basic infrastructure modification without a substantial
Refactor
architectural component. • Rewrite the application, taking advantage of cloud-native
Refactoring is the most expensive of the options and involves engaging the software architectures.
development lifecycle to build a custom solution, fundamentally rewriting the
Repurchase
solution to be cloud native and take advantage of cloud-native architectures. This can
• Replace with an alternative, cloud-native application and
result in a PaaS or an IaaS solution.
migrate the data.
Finally, repurchasing means simply going to market and procuring a new solution. Info-Tech Research Group | 82
This may involve migrating data, but it does not require the migration of
Discuss: migration
Participants Questions
• IT management • Which of the four cloud-focused Rs (rehost, replatform, repurchase, and refactor) are
• Infrastructure leadership relevant for your cloud migration?
• System administrators • How will you decide what workloads fall into which category? Who ultimately makes
the decision?
• Application owners
• Are the skills/resources available to ensure that the preferred migration path can
• Enterprise architecture
proceed successfully? Do you have the engineering talent in house required for a
successful refactor, for example?
• Are any destinations temporary? If, for example, the goal is to rehost in the short term
Key decisions
and refactor in the long term, this should be captured in the strategy.
• Acceptable migration paths
• Is there an appetite for using third-party resources like contractors or vendors with
• Responsibility for the cloud migration
specific knowledge of cloud migration techniques?
• Involvement of third parties in the migration
process
4.3 Define cloud migration • Defined cloud vision • Cloud migration strategy
2. Use the 6Rs framework and align workloads and workload categories with
different migration paths (e.g. “communications and collaboration software
services belong in SaaS”).
3. Create a table with each acceptable migration path, include a description of when
you will take advantage of it, along with examples of when you will use each
Materials Participants
service.
• The components of a complete cloud strategy Contact your account representative for
more information.
• Tools for clarifying/justifying cloud spend
workshops@infotech.com
Process Optimized Deliverables Completed 1-888-670-8889
• Cloud migration
• Cloud provisioning
Info-Tech analysts will join you and your team at your location or
welcome you to Info-Tech’s historic Toronto office to participate
in an innovative onsite workshop.
Skills/roles discussion Architecture discussion
Work with Info-Tech analysts to define Define key architectural principles
roles and responsibilities that will that will be used to govern your cloud
inevitably become critical to the success environment, ensuring consistency,
of your cloud migration initiative. quality, and portability.
Info-Tech
Define your goals, drivers, cloud mission, and desired future state before jumping
headlong into a strategy conversation you’re not ready to have. Analyze some
workloads for their cloud suitability, while you’re at it.
Research
Manage Cloud Costs: Tips and Tricks
The cloud can be a wonderfully valuable tool in your toolkit, but you may want to
explore some of the implications of the transition from an overall cost perspective, a
cost variability perspective, and a cost complexity perspective. This set will help you do
that.
“Azure Monitor.” Microsoft. Accessed Jan. 2022. Henderson, Chloe. “4 Types of System Integration – Pros vs. Cons of Each Method.”
AnyConnector. 24 July 2020. Accessed Jan. 2022.
“Azure Resource Manager.” Microsoft, 4 Feb. 2022. Accessed Feb. 2022.
“List of All Premium Tier Connectors.” Microsoft. 3 Feb. 2022. Accessed Feb. 2022.
“Azure SQL Database Pricing.” Microsoft. Accessed Jan. 2022.
Mell, Peter, and Timothy Grance. “The NIST Definition of Cloud Computing.” National
Buchanan, Ian. “Infrastructure as Code: How Infrastructure as Code (IaC) Manages Institute of Standards and Technology. Sept. 2011. Web.
Complex Infrastructures.” Atlassian. Accessed Jan. 2022.
Montgomery, James. “Cloud Provisioning.” TechTarget. Accessed Jan. 2022.
Churchville, Fred. “What Is iPaaS? Guide to Integration Platform as a Service.”
TechTarget. June 2021. Accessed Jan. 2022. “Morpheus Data.” Morpheus Data. N.d. Web. Jan. 2022.
“CloudHub.” Mulesoft. Accessed Jan. 2022. Orban, Stephen. “6 Strategies for Migrating Applications to the Cloud.” Amazon Web
Services. 2016. Web.
“Datadog.” Datadog. Accessed Jan. 2022.
“Peter Drucker,” Wikiquote. Accessed Jan. 2022.
“Dynatrace.” Dynatrace. Accessed Jan. 2022.
“Shared Responsibility in the Cloud.” Microsoft. 2 Jan. 2022. Accessed Jan. 2022. “Types of Databases on Azure.” Microsoft. Accessed Jan. 2022.
“Shared Responsibility Model.” Amazon Web Services. Accessed Jan. 2022. Watkins, Michael D. “Demystifying Strategy: The What, Who, How, and Why.” Harvard
Business Review, 10 Sept. 2007. Accessed Jan. 2022.
“Snow Commander.” Snow. Accessed Jan. 2022.
“What is Cost Management + Billing?” Microsoft, 13 Feb. 2022. Accessed Jan. 2022.
“Splunk.” Splunk. Accessed Jan. 2022.
“What is Self-Service Provisioning in Cloud Computing?” CloudBolt. Accessed Jan. 2022.