© Copyright 12/1/2015 BMC Software, Inc 1
Accelerating Digital Transformation
David Cramer
Vice President
November 2015
Digital Transformation - using technology to improve reach and drive new levels of performance
Customer
Experience
Operational
Processes
Business
Models
This shift requires alignment across the leadership team…
INCREASING THREATS
DISTRIBUTED RESOURCES
ACCELERATED EXPECTATIONS
70% Share of large enterprises that will use
hybrid cloud services by 2017
97% Percentage of CISOs who expect an
attack by an advanced threat in the
next 12 months
5x Rate at which demand for mobile app
development services will outpace IT
capacity to deliver by 2017
Source: Gartner Application Architecture, Development & Integration Summit, July 2015
Source: CEB, “IT Quarterly,” Q1 2015
Source: Gartner: “Private Cloud Matures, Hybrid Cloud Is Next,” September 2013
BUSINESS UNIT HEADS
CISO
VP INFRASTRUCTURE / CLOUD
CIO
Trends in Digital Transformation
Hybrid Cloud
Private cloud Service-users
Data center
(corporate IT)
Public Cloud
FROM:
IT-centric
On-premise
TO:
Business-centric
Multi-sourced
Canary Deployments – Testing in Production
1 - New version is deployed
2 - Small set of users are
rerouted to new version
and monitoring is used to
determine if process can
continue
3 – Process is repeated until all
users are routed to the new
version and the old version is
decommissioned
Docker and Container Management
Containers enable standardized movement of applications
Standard form factor makes
them easier to manage
Allow for greater server density
Analogous to shipping containers and standard mount points
Multi-modal shipping was a
supply chain game changer…
CHARACTERISTICS OF MICROSERVICES
The term "Microservice Architecture" has sprung up over the last few
years to describe a particular way of designing software applications
as suites of independently deployable services.
An approach to developing a single application as a suite of small services
Each service runs in its own process with lightweight communication mechanisms
Services are built around business capabilities and are independently deployable and scalable
Each Service represents a Business Capability as opposed to a technology
Microservices
Microservices vs. Traditional Approach
Microservices
Architecture with
each element of
functionality in a
separate
service….
Traditional
monolithic
application
with all
functionality
in a single
process…
Scales by replicating entire
application on multiple
servers
Scales by distributing services
across servers, replicating as
needed
http://martinfowler.com/articles/microservices.html
Accelerating Digital Transformation
BMC Automation enabling customers to accelerate with control
BMC
Digital Service
Acceleration
Dynamic
Infrastructure
INCREASED
VELOCITY
MITIGATED
RISK
IMPROVED
CONTROL
Agile Applications
BMC
Digital Service
Acceleration
Dynamic
Infrastructure
INCREASED
VELOCITY
MITIGATED
RISK
IMPROVED
CONTROL
1000s
Flood of Releases from Development
# of apps
App Releases
Daily
Waterfall Agile
10s
Yearly Release Cadence
IT Operations Development
Wall Exists between Design & Operations of Services
Design Operate Digital
Services
Development
IT Operations
Blur lines between Design & Ops through Continuous Delivery Pipelines
deploy
operate
monitor
release
test
plan code
build
Shift-left IT Ops functions into design of applications
Tomorrow
Dev IT Ops
App Packaging • Infrastructure Catalog • Monitoring Policies • Compliance Policies • Patching Policies • Placement Policies
Shift Left
Today
• App Packaging
• Monitoring as Code • Compliance as Code • Patching as Code
• Infrastructure Catalog • Placement Policies
Dev IT Ops Digital Service
s
Digital Service
s
BMC customer results
Leading US investment research firm
88% Reduction in time to deploy digital service updates
Leading North American bank
Agile
Applications
520 hours to 32 hours Time to build new custom environments for development, QA, staging, and production
Major international media enterprise
Six hours to 30 minutes Time to deploy an application on a single server
BMC
Digital Service
Acceleration
Intelligent Compliance
Dynamic
Infrastructure
INCREASED
VELOCITY
MITIGATED
RISK
IMPROVED
CONTROL
Operations Role in Protecting Digital Services
Scheduled
Responsive
Planned Patching
System
Hardening
Security Audits
Regulatory Audits
Known
Vulnerability
Remediation
New Vulnerability
Eradication
So Why Do Breaches Still Happen?
Coverage – you can’t patch what you don’t know
Downtime – hard to schedule maintenance times with users
Complexity – dependencies make it hard to isolate actions
193 Days to resolve
average vulnerability
Most Breaches Exploit Known Vulnerabilities
ATTACKS
80%
More than 80% of attacks target known vulnerabilities
99.9%
FIX READY
99.9% of exploits were compromised over a year
after the CVE was published
Remediate: Close the SecOps Gap
• Automatic correlation of discovered vulnerabilities and patches
— Filter to systems through operational views
— Deploy remediation actions
• Network vulnerability identification and remediation action capabilities
• Integrate with Change Management
Reduce vulnerabilities by reducing SecOps friction
BMC customer results
Reduction in time to validate minimum security baseline
Fortune 500 bank
Major US manufacturing company
30 minutes to < one min Reduction in time to fix known vulnerabilities
880 hours to 33 seconds
Intelligent
Compliance
Large European bank
75% Reduction in deployment errors
BMC
Digital Service
Acceleration
Dynamic Infrastructure
Dynamic
Infrastructure
INCREASED
VELOCITY
MITIGATED
RISK
IMPROVED
CONTROL
Centralized Self Service Access to Hybrid Cloud Services
Corporate
Datacenters
Corporate IT
Private Clouds Public Clouds
Self-Service Portal
Applications
Delivery of Full Stack Provisioning
Applications Platforms Infrastructure
From hardware… …to fully configured services
Dev and QA spend a considerable amount of time configuring environments instead of coding and testing
IaaS Offering (ex.
RedHat)
IaaS+ Offering (ex. WebSphere)
Fully Configured Environment
(ex. Banking App)
Configure Network
Install Middleware
Install App Code
Provision Sever
Configure Middleware
Certify Environment
Effort: 4+ hours Lead Time: 1+ days
Effort: 2+ hours Lead Time: 2+ days
Effort: 1+ days Lead Time: 1 day
Effort: 2+ hours Lead Time: 1 day
Effort: 2+ days Lead Time: 2+ days
Per Environment Total Effort: 4+ days
Total Lead Time: 7+ days
BMC customer results
90 days to hours Faster provisioning of IT multi-cloud services
5,000 employees US software consultancy company
Large North American energy company
$80M In policy-based, cloud-provider fee reduction through CLM
Dynamic
Infrastructure
BMC Enables Digital Transformation
Customer
Experience
Operational
Processes
Business
Models
Continuous Delivery
Shift Operation Left
Agile
Applications
Automated
Remediation of
Vulnerabilities
Self Service
Environments
Hybrid Cloud
Containers
Microservices
Thank You