Click here to close now.


Microservices Expo Authors: Elizabeth White, Yeshim Deniz, Pat Romanski, Liz McMillan, Lori MacVittie

Related Topics: @CloudExpo, Java IoT, Microservices Expo, Containers Expo Blog, Agile Computing, Cloud Security

@CloudExpo: Article

Multi-Year IT Contracts for Hybrid Cloud Delivery

CIO Priorities for 2013

Outsourcing the IT operations, support and associated infrastructure maintenance has been the norm for large enterprises over the last decade. Typically the multi-year IT outsourcing contracts cover the following aspects:

  • Application Development Services: These will be the set of resources and other costs, like environment, required to perform the custom development of various applications and sometimes customization and configuration of COTS products.
  • Application Testing Services: Even though testing is covered as part of development, to make this step more independent most enterprises outsource testing activities as a separate entity.
  • Application Sustain Services: This normally constitutes a biggest portion of outsourcing contracts, such that the applications are running without disruption to businesses and any incidents are handled within the defined SLA Levels. Also Sustain Services are governed by the well-established process of ITIL (Information Technology Infrastructure Library).
  • Infrastructure Management Services: These will cover the hosting, operations and support of servers and storage, network infrastructure systems. Sometimes they may be hosted in the data centers of the enterprise or hosted with external service providers.

Multi-Year IT Contracts in the Cloud Era
Over the last two years, most enterprises reinvented themselves with the Hybrid Delivery model, whereby the business processes have been realized with a combination of the traditional data center, private clouds and public clouds. Also SaaS (Software as a Service) has become a major force in supporting enterprise business capability needs.

CIOs need to re-assess the cost and delivery models of most multi-year IT contracts due to the following reasons.

  • Unlike standard sizing techniques like Function Point Analysis that are meant for large-scale development projects, there is no universally accepted estimation and sizing techniques available for these large outsourcing deals. Most of the time vendor organizations adopt a combination of multiple legacy techniques to come together with a final pricing model. Most of the time factors like the number of FTEs incumbent vendors already deployed, ticket volume and similar factors play a major role.
  • The estimation techniques adopted a couple of years of ago, before SaaS and Cloud become mainstream, have become largely irrelevant in now. As most of the business processes that have been served in-house have now been brokered by the enterprises and hence the supporting needs will vary drastically.
  • Enterprises have to shift their custom development budgets towards SaaS evaulation or cloud-based integration (CBI) techniques.
  • Budget allocations have to accommodate for proof of concept and innovation enabled by areas like Big Data and real-time analytics

From the above points it is a priority for CIOs to evaluate the multi-year IT contracts and shift the priorities from certain areas and move them to other areas so that the capability of IT to serve the business is adapted to the new realities.

Areas Affected by the Hybrid Cloud Delivery Model
The following are the typical line items in a multi-year IT contract that needs to be revisited so that their allocations are fully justified.

  • Problem Management: In the past much of the time has been spent on fixing the production ABENDs of various custom development code. However, with SaaS and cloud usage these are expected to be reduced a lot. Also in a SaaS delivery model IT service personnel from the enterprises will not be responsible to fix the issues, rather direct them to the SaaS vendors.
  • Production Job Management: Maintaining production jobs, scheduling them, monitoring them and restarting them have been the core activities of many production support staff in custom application management. However with automation being the key of most cloud IaaS providers or private cloud platforms, much of these tasks have been simplified and can be revisited.
  • Preventive & Adaptive Maintenance: Earlier application support staff needs to work with multiple third-party vendors to ensure that proper versions of the operating systems and patches are maintained, so that the applications don't break in the future. However, with the adoption of PaaS (Platform as a Service) and SaaS (Software as a Service) much of the effort spent on this can be shifted to the cloud providers.
  • Service Continuity Management: Setting up the recovery tests and testing for disaster recovery have been a daunting task in the past. In fact due to the complexities of this operation we have seen some enterprises don't even have proper disaster recovery sites. However cloud has simplified the creation of disaster recovery sites in different geographies and provisioning them has become much easier.
  • License Management: The enterprise licensing model in the COTS and Custom applications era is much different that the pricing models adopted by SaaS applications and hence there requires a revised planning on this front.
  • Application Development Services: In the past enterprises used to give Service Requests for custom development of various applications and a fixed pool of resources are typically allocated for the development, however the adoption of SaaS, PaaS and Cloud Based Integration will certainly alter the allocation of resources towards this. Also much of the budget allocations for new large scale custom development efforts can be revisited if the enterprises decided to utilize SaaS as a service delivery model.

An exhaustive list of services that are part of the multi-year IT contracts may vary from enterprise to enterprise; however, one of the important priorities for CIOs is to revisit them and allocate their resources appropriately towards business capabilities and innovation which is one of the major enablers of the hybrid delivery model.

More Stories By Srinivasan Sundara Rajan

Srinivasan is passionate about ownership and driving things on his own, with his breadth and depth on Enterprise Technology he could run any aspect of IT Industry and make it a success.

He is a seasoned Enterprise IT Expert, mainly in the areas of Solution, Integration and Architecture, across Structured, Unstructured data sources, especially in manufacturing domain.

He currently works as Technology Head For GAVS Technologies.

@MicroservicesExpo Stories
The last decade was about virtual machines, but the next one is about containers. Containers enable a service to run on any host at any time. Traditional tools are starting to show cracks because they were not designed for this level of application portability. Now is the time to look at new ways to deploy and manage applications at scale. In his session at @DevOpsSummit, Brian “Redbeard” Harrington, a principal architect at CoreOS, will examine how CoreOS helps teams run in production. Attende...
The APN DevOps Competency highlights APN Partners who demonstrate deep capabilities delivering continuous integration, continuous delivery, and configuration management. They help customers transform their business to be more efficient and agile by leveraging the AWS platform and DevOps principles.
Containers are changing the security landscape for software development and deployment. As with any security solutions, security approaches that work for developers, operations personnel and security professionals is a requirement. In his session at @DevOpsSummit, Kevin Gilpin, CTO and Co-Founder of Conjur, will discuss various security considerations for container-based infrastructure and related DevOps workflows.
In their session at DevOps Summit, Asaf Yigal, co-founder and the VP of Product at, and Tomer Levy, co-founder and CEO of, will explore the entire process that they have undergone – through research, benchmarking, implementation, optimization, and customer success – in developing a processing engine that can handle petabytes of data. They will also discuss the requirements of such an engine in terms of scalability, resilience, security, and availability along with how the archi...
Containers are revolutionizing the way we deploy and maintain our infrastructures, but monitoring and troubleshooting in a containerized environment can still be painful and impractical. Understanding even basic resource usage is difficult - let alone tracking network connections or malicious activity. In his session at DevOps Summit, Gianluca Borello, Sr. Software Engineer at Sysdig, will cover the current state of the art for container monitoring and visibility, including pros / cons and li...
Any Ops team trying to support a company in today’s cloud-connected world knows that a new way of thinking is required – one just as dramatic than the shift from Ops to DevOps. The diversity of modern operations requires teams to focus their impact on breadth vs. depth. In his session at DevOps Summit, Adam Serediuk, Director of Operations at xMatters, Inc., will discuss the strategic requirements of evolving from Ops to DevOps, and why modern Operations has begun leveraging the “NoOps” approa...
“All our customers are looking at the cloud ecosystem as an important part of their overall product strategy. Some see it evolve as a multi-cloud / hybrid cloud strategy, while others are embracing all forms of cloud offerings like PaaS, IaaS and SaaS in their solutions,” noted Suhas Joshi, Vice President – Technology, at Harbinger Group, in this exclusive Q&A with Cloud Expo Conference Chair Roger Strukhoff.
Between the compelling mockups and specs produced by analysts, and resulting applications built by developers, there exists a gulf where projects fail, costs spiral, and applications disappoint. Methodologies like Agile attempt to address this with intensified communication, with partial success but many limitations. In his session at DevOps Summit, Charles Kendrick, CTO and Chief Architect at Isomorphic Software, will present a revolutionary model enabled by new technologies. Learn how busine...
DevOps has often been described in terms of CAMS: Culture, Automation, Measuring, Sharing. While we’ve seen a lot of focus on the “A” and even on the “M”, there are very few examples of why the “C" is equally important in the DevOps equation. In her session at @DevOps Summit, Lori MacVittie, of F5 Networks, will explore HTTP/1 and HTTP/2 along with Microservices to illustrate why a collaborative culture between Dev, Ops, and the Network is critical to ensuring success.
IT data is typically silo'd by the various tools in place. Unifying all the log, metric and event data in one analytics platform stops finger pointing and provides the end-to-end correlation. Logs, metrics and custom event data can be joined to tell the holistic story of your software and operations. For example, users can correlate code deploys to system performance to application error codes.
Manufacturing has widely adopted standardized and automated processes to create designs, build them, and maintain them through their life cycle. However, many modern manufacturing systems go beyond mechanized workflows to introduce empowered workers, flexible collaboration, and rapid iteration. Such behaviors also characterize open source software development and are at the heart of DevOps culture, processes, and tooling.
Application availability is not just the measure of “being up”. Many apps can claim that status. Technically they are running and responding to requests, but at a rate which users would certainly interpret as being down. That’s because excessive load times can (and will be) interpreted as “not available.” That’s why it’s important to view ensuring application availability as requiring attention to all its composite parts: scalability, performance, and security.
Saviynt Inc. has announced the availability of the next release of Saviynt for AWS. The comprehensive security and compliance solution provides a Command-and-Control center to gain visibility into risks in AWS, enforce real-time protection of critical workloads as well as data and automate access life-cycle governance. The solution enables AWS customers to meet their compliance mandates such as ITAR, SOX, PCI, etc. by including an extensive risk and controls library to detect known threats and b...
Clearly the way forward is to move to cloud be it bare metal, VMs or containers. One aspect of the current public clouds that is slowing this cloud migration is cloud lock-in. Every cloud vendor is trying to make it very difficult to move out once a customer has chosen their cloud. In his session at 17th Cloud Expo, Naveen Nimmu, CEO of Clouber, Inc., will advocate that making the inter-cloud migration as simple as changing airlines would help the entire industry to quickly adopt the cloud wit...
Overgrown applications have given way to modular applications, driven by the need to break larger problems into smaller problems. Similarly large monolithic development processes have been forced to be broken into smaller agile development cycles. Looking at trends in software development, microservices architectures meet the same demands. Additional benefits of microservices architectures are compartmentalization and a limited impact of service failure versus a complete software malfunction....
At DevOps Summit NY there’s been a whole lot of talk about not just DevOps, but containers, IoT, and microservices. Sessions focused not just on the cultural shift needed to grow at scale with a DevOps approach, but also made sure to include the network ”plumbing” needed to ensure success as applications decompose into the microservice architectures enabling rapid growth and support for the Internet of (Every)Things.
For it to be SOA – let alone SOA done right – we need to pin down just what "SOA done wrong" might be. First-generation SOA with Web Services and ESBs, perhaps? But then there's second-generation, REST-based SOA. More lightweight and cloud-friendly, but many REST-based SOA practices predate the microservices wave. Today, microservices and containers go hand in hand – only the details of "container-oriented architecture" are largely on the drawing board – and are not likely to look much like S...
The web app is agile. The REST API is agile. The testing and planning are agile. But alas, data infrastructures certainly are not. Once an application matures, changing the shape or indexing scheme of data often forces at best a top down planning exercise and at worst includes schema changes that force downtime. The time has come for a new approach that fundamentally advances the agility of distributed data infrastructures. Come learn about a new solution to the problems faced by software organ...
Our guest on the podcast this week is Jason Bloomberg, President at Intellyx. When we build services we want them to be lightweight, stateless and scalable while doing one thing really well. In today's cloud world, we're revisiting what to takes to make a good service in the first place. Listen in to learn why following "the book" doesn't necessarily mean that you're solving key business problems.
Apps and devices shouldn't stop working when there's limited or no network connectivity. Learn how to bring data stored in a cloud database to the edge of the network (and back again) whenever an Internet connection is available. In his session at 17th Cloud Expo, Bradley Holt, Developer Advocate at IBM Cloud Data Services, will demonstrate techniques for replicating cloud databases with devices in order to build offline-first mobile or Internet of Things (IoT) apps that can provide a better, ...