Microservices Expo Authors: Liz McMillan, David Sprott, Pat Romanski, Derek Weeks, Elizabeth White

Related Topics: Cloud Security, Containers Expo Blog, Agile Computing, @CloudExpo, Government Cloud

Cloud Security: Interview

Exclusive Q&A with Rich Marcello - Unisys President, Systems & Technology

Security is a big concern as well as privacy of the data once it leaves a client's data centers

Unisys announced in September a four-part cloud computing strategy that will enable clients to move their enterprise application workloads securely to tailored cloud environments and give them confidence in maintaining the integrity of their critical information.

In this Exclusive Q&A with Cloud Computing Journal in the run-up to SYS-CON's 4th International Cloud Computing Conference & Expo (November 2-4, 2009) - Cloud Expo Conference Chair Jeremy Geelan speaks with Rich Marcello - Unisys President, Systems & Technology - about the Unisys Secure Cloud and sets the scene for the upcoming Unisys Cloud-in-a-box.

Cloud Computing Journal: Starting at 35,000 feet, what overall relationships does Unisys see between cloud computing and the increasingly real-time needs of today's enterprise?

Rich Marcello: I believe that  cloud computing will revolutionize the way enterprises obtain IT and business services because of a number of converging factors - 1) the economy has forced enterprises to rethink their traditional cost models and minimize their capital expenditures in favor of pay-as-you-go models, 2) the need for anywhere, anytime IT since data sets continue to grow exponentially, and 3) the  shift in the way IT works with,  for example,  virtualization and automation,  which enable cloud computing.

Cloud Computing Journal: So cloud computing isn't just a buzzword, it's actually a glimpse of the future of enterprise IT so far as you are concerned?

Rich Marcello: Absolutely.  When you think about "IT as a service", ease of delivery, access from anywhere at anytime, the ability to have a totally flexible IT infrastructure, and the cost benefits of a subscription or pay as you go model, you realize very quickly cloud computing, in any of its forms (internal, external, hybrid) is here to stay.

Cloud Computing Journal: I understand, though, there are some concerns with moving to the Cloud.

Marcello: That's right. Security is a big concern as well as privacy of the data once it leaves a client's data centers and the ability of a cloud provider to meet the client's compliance requirements.  Additionally, there's concern about whether or not a client's applications can be moved to the cloud without rewriting them.  Unisys addresses each of these concerns with Unisys Cloud Computing Strategy and solutions portfolio announced June 30, 2009.

Cloud Computing Journal: Tell me more about this new Strategy and what it means to your clients.

Marcello: We announced a four-part cloud computing strategy that will enable clients to move their enterprise application workloads securely to tailored cloud environments and give them confidence in maintaining the integrity of their critical information.  We're delivering on the first two parts this year beginning with our June 30 announcement and the availability of our Cloud Transformation Services, followed by our Unisys Secure Cloud Solution available on July 31.  Our "Cloud-in-a-box" solution planned for later this year is a comprehensive IT infrastructure package that will enable quick and cost-effective implementation of a private cloud.  We also plan to deliver hybrid cloud technologies early next year that will provide the best of managed and dedicated services by combining public and private cloud capabilities.
Our comprehensive Cloud Transformation Services include Advisory and Assessment services that can provide our clients with strategic guidance on how best to move to the cloud.

Cloud Computing Journal: How are you leveraging your breadth of Enterprise IT experience?

Marcello: We believe our strong heritage in Data Center Transformation and Outsourcing is foundational to cloud computing - you can't begin to offer a cloud computing solution unless you understand the data center and are true experts.  We've been helping clients transform their data centers and make the right IT sourcing decisions for a long time by leveraging our services, technology, and outsourcing capabilities so they can achieve maximum return from capital expenditures, reduce operating expenses, and increase business performance.  Our heritage of experience and innovation combined with our independent thinking, innovative infrastructure and sourcing capabilities deliver data center solutions that are secure, productive and reliable.  We see all of this as a key advantage over other cloud providers who are just entering this market.

Cloud Computing Journal: How big an issue is security for enterprises who wish to migrate toward this kind of an infrastructure wholly or in part?

Marcello: As I mentioned earlier, security is the biggest barrier to cloud adoption as cited by organizations and industry analysts, as well as our own clients in a recent survey we conducted.

When it comes to security in a cloud it's really about the workloads and how clients can confidently move them to the cloud.  A lot of vendors talk security in the cloud but we've tackled this issue head-on and believe we have an advantage.  Security is inherent in all Unisys operations and offerings and, like Data Center Transformation and Outsourcing, is one of Unisys four key areas of strength.

We address security by ensuring operational excellence.   Unisys Secure Cloud services teams operate ISO 20000-certified delivery processes that are ITIL V3-compliant.  All of this protection is delivered in independently audited and ISO 270001-certified delivery centers. We utilize security best practices - a layered multi-vendor approach to security with Intrusion Detection and Prevention Services (IDPS), firewall management, 24x7 security monitoring, advanced correlation and analytics, auditable logs, and so forth.

From a cloud perspective, our commitment is to provide a security framework that is as good as or better than any clients could establish for themselves.  We do all of this and more with the addition of our patent-pending Stealth technology that allows private communities of interest based on FIPS 140-2, 256-bit Advanced Encryption Standard (AES) encryption and cloaks the data with proprietary "bit splitting".   Unlike other approaches to security, Unisys Stealth is very simple to deploy and does not require rewriting applications.  We believe this is a key differentiator as Stealth technology allows different groups in a multi-tenant client environment to share the same IT infrastructure without fear of exposing one client's data to another, and there's no need for the client to rewrite the applications it chooses to move to the cloud.

Cloud Computing Journal: What kinds of applications need security that your cloud offers?

Marcello: Clients who have workloads that require application, database or user security will have exposure if they put such workloads onto an unsecured cloud service.  Consequently, today companies are primarily using unsecured cloud services for workloads that have few security needs, such as Application Development and Testing or basic Web services, along with some less secure email workloads.

With Unisys Secure Cloud, you can move conventional business applications that contain patient data, employee, financial, or customer information, or document management or disaster recovery applications to the cloud environment.  In addition to security, most of these applications tend to require quite a bit of IT infrastructure and staff time to manage even though they tend to run in spurts and are quite cyclical or the workloads can dramatically vary in size from one period to the next.  For example, they may only run at the end of day, end of week, month, or year.  Some good examples are: Budgeting and planning; or HR systems like employee self-service, or time reporting.  Retailers have massive swings in system demand from one season to the next and need flexible capacity.  IT also has workloads that are cyclical in nature, including back-up, disaster recovery, and quality assurance, each of which has very high security requirements.   And, most of the time they are not using all of the hardware dedicated to them. This is why the average enterprise server utilization is only 5-10%. Think of the savings in capital and IT operations if these applications could be moved to a cloud service where you only pay for what you use.

Lastly, large OLTP-based workloads, or ERP systems or web store fronts are the most critical applications for your business.  If you are a manufacturer, it could be your order, inventory and supply chain systems; for banks, it's core systems like deposits, transfers, etc;  for airlines it would be the reservation systems. When these go down, the business is all but dead. Therefore, these are the kinds of systems that make sense to continue to invest in traditional, in-house IT infrastructures. Because these kinds of workloads tend to run nearly all the time, it makes good economic sense to buy the infrastructures to support them.

Cloud Computing Journal: How would someone decide if cloud computing is right for their business and which workloads to move?

Marcello: It's really about understanding what makes the most business sense for the client and what they are trying to accomplish.  As part of the June 30th announcement, we have Unisys Cloud Transformation Services, available now, which allow clients to plan and migrate to the type of cloud environment that best meets their business goals.  These services help clients assess what application workloads can be moved to the cloud, how that can be done, and the technology, financial and security implications of their choices.

Cloud Computing Journal: How about virtualization and automation, where do they fit in the big picture?

Marcello: These are fundamental to cloud computing and for Unisys, our Real-Time Infrastructure technology powers our cloud.  Virtualization is an enabler that helps us supply only the needed amount of IT resources based on the workload demand of the business at any given time.  Automation adds elasticity to the environment, reduces the time needed for changes, and eliminates or at least simplifies the manual intervention in a potentially rapidly changing environment.

Cloud Computing Journal: And what kinds of governance and service management tools does the enterprise need?

Marcello: From a service management perspective, many vendors operate as siloed mechanisms.  Unisys, on the other hand, has built into our secure cloudware stack an integration layer that enables us to interface with our clients' service management framework as well.  The virtual data center, regardless of the location of the resources, is managed seamlessly.  Unisys makes it look like one holistic environment. A key point to keep in mind is how hard it is for any IT organization to develop world class governance and service management.  With Unisys Secure Cloud Solution and "Cloud in a Box" we have developed a broad set of ITIL best practices, which are fully automated, and which allow us and our clients to run a very efficient IT infrastructure. With this, a lot of automation occurs, and this can save money by minimizing manual tasks, reducing errors, and getting much higher utilization rates.

Cloud Computing Journal: What verticals among your customers are leading the adoption of the Cloud?

Marcello: We're getting a number of inquiries from a broad range of Unisys clients in telco's, financial institutions, transportation, and the public sector as well as partners who are interested in Unisys hosting their solutions within our Secure Cloud.

Cloud Computing Journal: What does Cloud Computing have to offer to mid-tier enterprises?

Marcello: Cloud computing is compelling for mid-tier enterprises since it minimizes the need for capital expenditures as well as lowers the need for on-going operational support.  They will be interested in our Secure Cloud Solution, especially secure Software as a Service (SaaS).

Additionally for those clients who want to build an internal cloud, the Unisys Cloud-in-a-box that we'll deliver later this year will be a cost-effective, simplified cloud deployment alternative.

More Stories By Jeremy Geelan

Jeremy Geelan is Chairman & CEO of the 21st Century Internet Group, Inc. and an Executive Academy Member of the International Academy of Digital Arts & Sciences. Formerly he was President & COO at Cloud Expo, Inc. and Conference Chair of the worldwide Cloud Expo series. He appears regularly at conferences and trade shows, speaking to technology audiences across six continents. You can follow him on twitter: @jg21.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.

@MicroservicesExpo Stories
SYS-CON Events announced today that Enzu will exhibit at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. Enzu’s mission is to be the leading provider of enterprise cloud solutions worldwide. Enzu enables online businesses to use its IT infrastructure to their competitive advantage. By offering a suite of proven hosting and management services, Enzu wants companies to focus on the core of their online busine...
In many organizations governance is still practiced by phase or stage gate peer review, and Agile projects are forced to accommodate, which leads to WaterScrumFall or worse. But governance criteria and policies are often very weak anyway, out of date or non-existent. Consequently governance is frequently a matter of opinion and experience, highly dependent upon the experience of individual reviewers. As we all know, a basic principle of Agile methods is delegation of responsibility, and ideally ...
SYS-CON Events announced today that SoftNet Solutions will exhibit at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. SoftNet Solutions specializes in Enterprise Solutions for Hadoop and Big Data. It offers customers the most open, robust, and value-conscious portfolio of solutions, services, and tools for the shortest route to success with Big Data. The unique differentiator is the ability to architect and ...
SYS-CON Events announced today that Transparent Cloud Computing (T-Cloud) Consortium will exhibit at the 19th International Cloud Expo®, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. The Transparent Cloud Computing Consortium (T-Cloud Consortium) will conduct research activities into changes in the computing model as a result of collaboration between "device" and "cloud" and the creation of new value and markets through organic data proces...
With emerging ideas, innovation, and talents, the lines between DevOps, release engineering, and even security are rapidly blurring. I invite you to sit down for a moment with Principle Consultant, J. Paul Reed, and listen to his take on what the intersection between these once individualized fields entails, and may even foreshadow.
As we enter the final week before the 19th International Cloud Expo | @ThingsExpo in Santa Clara, CA, it's time for me to reflect on six big topics that will be important during the show. Hybrid Cloud This general-purpose term seems to provide a comfort zone for many enterprise IT managers. It sounds reassuring to be able to work with one of the major public-cloud providers like AWS or Microsoft Azure while still maintaining an on-site presence.
DevOps is being widely accepted (if not fully adopted) as essential in enterprise IT. But as Enterprise DevOps gains maturity, expands scope, and increases velocity, the need for data-driven decisions across teams becomes more acute. DevOps teams in any modern business must wrangle the ‘digital exhaust’ from the delivery toolchain, "pervasive" and "cognitive" computing, APIs and services, mobile devices and applications, the Internet of Things, and now even blockchain. In this power panel at @...
A completely new computing platform is on the horizon. They’re called Microservers by some, ARM Servers by others, and sometimes even ARM-based Servers. No matter what you call them, Microservers will have a huge impact on the data center and on server computing in general. Although few people are familiar with Microservers today, their impact will be felt very soon. This is a new category of computing platform that is available today and is predicted to have triple-digit growth rates for some ...
SYS-CON Events announced today that Numerex Corp, a leading provider of managed enterprise solutions enabling the Internet of Things (IoT), will exhibit at the 19th International Cloud Expo | @ThingsExpo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. Numerex Corp. (NASDAQ:NMRX) is a leading provider of managed enterprise solutions enabling the Internet of Things (IoT). The Company's solutions produce new revenue streams or create operating...
Monitoring of Docker environments is challenging. Why? Because each container typically runs a single process, has its own environment, utilizes virtual networks, or has various methods of managing storage. Traditional monitoring solutions take metrics from each server and applications they run. These servers and applications running on them are typically very static, with very long uptimes. Docker deployments are different: a set of containers may run many applications, all sharing the resource...
When we talk about the impact of BYOD and BYOA and the Internet of Things, we often focus on the impact on data center architectures. That's because there will be an increasing need for authentication, for access control, for security, for application delivery as the number of potential endpoints (clients, devices, things) increases. That means scale in the data center. What we gloss over, what we skip, is that before any of these "things" ever makes a request to access an application it had to...
The best way to leverage your Cloud Expo presence as a sponsor and exhibitor is to plan your news announcements around our events. The press covering Cloud Expo and @ThingsExpo will have access to these releases and will amplify your news announcements. More than two dozen Cloud companies either set deals at our shows or have announced their mergers and acquisitions at Cloud Expo. Product announcements during our show provide your company with the most reach through our targeted audiences.
The Internet of Things will challenge the status quo of how IT and development organizations operate. Or will it? Certainly the fog layer of IoT requires special insights about data ontology, security and transactional integrity. But the developmental challenges are the same: People, Process and Platform and how we integrate our thinking to solve complicated problems. In his session at 19th Cloud Expo, Craig Sproule, CEO of Metavine, will demonstrate how to move beyond today's coding paradigm ...
Virgil consists of an open-source encryption library, which implements Cryptographic Message Syntax (CMS) and Elliptic Curve Integrated Encryption Scheme (ECIES) (including RSA schema), a Key Management API, and a cloud-based Key Management Service (Virgil Keys). The Virgil Keys Service consists of a public key service and a private key escrow service. 

SYS-CON Events announced today that Tintri Inc., a leading producer of VM-aware storage (VAS) for virtualization and cloud environments, will present at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. Tintri VM-aware storage is the simplest for virtualized applications and cloud. Organizations including GE, Toyota, United Healthcare, NASA and 6 of the Fortune 15 have said “No to LUNs.” With Tintri they manag...
SYS-CON Events announced today that eCube Systems, the leading provider of modern development tools and best practices for Continuous Integration on OpenVMS, will exhibit at SYS-CON's @DevOpsSummit at Cloud Expo New York, which will take place on June 7-9, 2016, at the Javits Center in New York City, NY. eCube Systems offers a family of middleware products and development tools that maximize return on technology investment by leveraging existing technical equity to meet evolving business needs. ...
All clouds are not equal. To succeed in a DevOps context, organizations should plan to develop/deploy apps across a choice of on-premise and public clouds simultaneously depending on the business needs. This is where the concept of the Lean Cloud comes in - resting on the idea that you often need to relocate your app modules over their life cycles for both innovation and operational efficiency in the cloud. In his session at @DevOpsSummit at19th Cloud Expo, Valentin (Val) Bercovici, CTO of So...
Apache Hadoop is a key technology for gaining business insights from your Big Data, but the penetration into enterprises is shockingly low. In fact, Apache Hadoop and Big Data proponents recognize that this technology has not yet achieved its game-changing business potential. In his session at 19th Cloud Expo, John Mertic, director of program management for ODPi at The Linux Foundation, will explain why this is, how we can work together as an open data community to increase adoption, and the i...
operations aren’t merging to become one discipline. Nor is operations simply going away. Rather, DevOps is leading software development and operations – together with other practices such as security – to collaborate and coexist with less overhead and conflict than in the past. In his session at @DevOpsSummit at 19th Cloud Expo, Gordon Haff, Red Hat Technology Evangelist, will discuss what modern operational practices look like in a world in which applications are more loosely coupled, are deve...
DevOps is a term that comes full of controversy. A lot of people are on the bandwagon, while others are waiting for the term to jump the shark, and eventually go back to business as usual. Regardless of where you are along the specturm of loving or hating the term DevOps, one thing is certain. More and more people are using it to describe a system administrator who uses scripts, or tools like, Chef, Puppet or Ansible, in order to provision infrastructure. There is also usually an expectation of...