Moe Abdula is a seasoned technology executive, leading the IBM Cloud Garage and IBM Cloud Architecture and Solution Engineering practice. Ingo Averdunk is an IBM Distinguished Engineer responsible for Cloud Service Management and Site Reliability Engineering with IBM Cloud Architectures and Solution Engineering. Roland Barcia is an IBM Distinguished Engineer and CTO for Microservices for IBM Cloud Architectures and Solution Engineering. Kyle Brown is an IBM Distinguished Engineer and the CTO of Cloud Architectures for IBM Cloud Architectures and Solution Engineering. Ndu Emuchay is an IBM Distinguished Engineer and the CTO for Cloud Adoption for IBM Cloud Architectures and Solution Engineering.

• Foreword xxiIntroduction xxiii1 Business Drivers 1Addressing Challenges for the Enterprise 1What Drives a Business to the Cloud? 3What Do You Gain from Cloud? 5Implications to the Enterprise 7Summary 92 Framework Overview 11The Framework 13Key dimensions of cloud adoption 15Steps in the adoption journey 16Ten Key Actions of the Framework 171. Involve the right people 172. Achieve business and technology alignment 183. Take a holistic approach across dimensions 194. Assume an outside-in, client-centered approach 205. Open the aperture to new possibilities 206. Show progress and quick wins 217. Collaborate actively 238. Balance sustained and disruptive innovation 239. Establish success criteria 2410. Account for a multicloud hybrid model 24Summary 253 Strategy 27What Does a Cloud Strategy Mean for the CIO? 28What Do We Really Mean by “Strategy”? 28Developing a Cloud Strategy 30What Are the Complete Dimensions of a Cloud Strategy? 31What Key Considerations Should a Cloud Strategy Address? 34Service types 35Deployment models 36Roles 37Controls 39Vendor relationships 41What Prescriptive Steps Are Required to Develop a Cloud Strategy? 44Step 1: Define business objectives and constraints 44Step 2: Complete analysis of your workload portfolio 46Step 3: Envision your future state and analyze your current state 48Step 4: Assess your organization’s readiness 50Step 5: Build an execution framework with defined strategic milestones 52Step 6: Define proven approaches best suited to your organization 53Summary 554 Culture and Organization 57What Does the Cloud Mean for Human Resources? 57What Do We Really Mean by “Culture”? 58What cultural elements make cloud adoption easier or harder? 59Talent and flexibility 69Basic Squad Organization 71SRE model and squads 73Tribes and guilds 74Cultural elements of the squad model 75Advantages of a COC 77What are the goals of a COC? 78Life cycle of a COC 78When a COC is not the right approach 79Summary 815 Architecture and Technology 83What Does Cloud Adoption Mean for Enterprise Architects? 83Role of Enterprise Architects in Cloud Adoption 85Workload assessment 85Reference architectures 90Example Microservices Reference Architecture 94Style introduction 94An example reference architecture 95Reference Implementations 100DevOps implementation 103Resiliency patterns 104Security 104Management 105Summary 1056 Security and Compliance 107What Does the Cloud Mean to the CISO? 107Will My People, Processes, Tools, and Approaches Change? 108How Is Cloud Adoption Affected by Compliance Issues? 111How Do I Protect Against Data Breaches and Loss? 113Key management 113Certificate management 114Data integrity 115How Do I Protect Against Networking Vulnerabilities? 116Cloud-hosted firewalls 116Intrusion prevention systems 117Distributed denial of service 117Microsegmentation 118What Does a Secure Cloud-Native System Look Like? 118Identity and Access Management for Applications 120Authentication 120Multifactor authentication 121Directory services 121Reporting 121Implementing identity and access for cloud-native applications 122Secure DevOps 123Dynamic analysis 124Static analysis 124How Do I Get Visibility to My Cloud Applications? 125Summary 1257 Emerging Innovation Spaces 127Innovation as a Business Driver 127Examples of Innovation 128Data and analytics 128Blockchain 130Containers 132IoT 134Cognitive 135Summary 1368 Methodology 137What Does the Cloud Mean for the VP of the VP of Method & and Tools? 137Introducing the IBM Cloud Garage Method 138Culture 139Think 139Code 140Deliver 140Run 141Manage 141Learn 142Connections between Cloud and Agile 142Lean Startup and Lean Development 144Why Design Thinking Is the Missing Link 145Starting a Project with the IBM Cloud Garage Method 146Wrapping Up the Workshop 150Our Approach to Project Inception 150Starting Development 151The Role of Technology Choices 154Expanding to Deliver the MVP 154The Role of Testing in the Squad Model 156Customer Example 156Summary 1589 Service Management and Operations 159What Does Cloud Mean for the VP of Operations? 159Operational Transformation 160Organizational changes 161Process changes 164Technology changes 165Cultural changes 169New Roles 171Roles and responsibilities 171Organizational alignment 173Operational Readiness 178Operationalizing the cloud 178Operationalizing application readiness 180Incident Management 182Designing resilient applications for the cloud 182Taking a fresh approach to incident management 183Event management 184Runbooks 185Log management 187Dashboards 187Ticketing 188Root-Cause Analysis and Postmortems 190Root-cause analysis 190Postmortem 192Deployment, Release Management, and Change Management 194Deployment 194Release management 197Change management 198Configuration Management 199Configuration items and relationships 200CMDB/CMS 200Discovery 201Summary 20210 Governance 203Cloud Challenges 203Regulatory requirements 204Sourcing and standardization issues 204Threats to security and reputation 205Aspects of a Governance Model 206Defining a Governance Model 207Considerations for your governance model 208Cloud center of competence 209Chapters and guilds 211Summary 213Conclusion 215Notes 219Index 223

Moe Abdula is a seasoned technology executive, leading the IBM Cloud Garage and IBM Cloud Architecture and Solution Engineering practice. Ingo Averdunk is an IBM Distinguished Engineer responsible for Cloud Service Management and Site Reliability Engineering with IBM Cloud Architectures and Solution Engineering. Roland Barcia is an IBM Distinguished Engineer and CTO for Microservices for IBM Cloud Architectures and Solution Engineering. Kyle Brown is an IBM Distinguished Engineer and the CTO of Cloud Architectures for IBM Cloud Architectures and Solution Engineering. Ndu Emuchay is an IBM Distinguished Engineer and the CTO for Cloud Adoption for IBM Cloud Architectures and Solution Engineering.

• Foreword xxiIntroduction xxiii1 Business Drivers 1Addressing Challenges for the Enterprise 1What Drives a Business to the Cloud? 3What Do You Gain from Cloud? 5Implications to the Enterprise 7Summary 92 Framework Overview 11The Framework 13Key dimensions of cloud adoption 15Steps in the adoption journey 16Ten Key Actions of the Framework 171. Involve the right people 172. Achieve business and technology alignment 183. Take a holistic approach across dimensions 194. Assume an outside-in, client-centered approach 205. Open the aperture to new possibilities 206. Show progress and quick wins 217. Collaborate actively 238. Balance sustained and disruptive innovation 239. Establish success criteria 2410. Account for a multicloud hybrid model 24Summary 253 Strategy 27What Does a Cloud Strategy Mean for the CIO? 28What Do We Really Mean by “Strategy”? 28Developing a Cloud Strategy 30What Are the Complete Dimensions of a Cloud Strategy? 31What Key Considerations Should a Cloud Strategy Address? 34Service types 35Deployment models 36Roles 37Controls 39Vendor relationships 41What Prescriptive Steps Are Required to Develop a Cloud Strategy? 44Step 1: Define business objectives and constraints 44Step 2: Complete analysis of your workload portfolio 46Step 3: Envision your future state and analyze your current state 48Step 4: Assess your organization’s readiness 50Step 5: Build an execution framework with defined strategic milestones 52Step 6: Define proven approaches best suited to your organization 53Summary 554 Culture and Organization 57What Does the Cloud Mean for Human Resources? 57What Do We Really Mean by “Culture”? 58What cultural elements make cloud adoption easier or harder? 59Talent and flexibility 69Basic Squad Organization 71SRE model and squads 73Tribes and guilds 74Cultural elements of the squad model 75Advantages of a COC 77What are the goals of a COC? 78Life cycle of a COC 78When a COC is not the right approach 79Summary 815 Architecture and Technology 83What Does Cloud Adoption Mean for Enterprise Architects? 83Role of Enterprise Architects in Cloud Adoption 85Workload assessment 85Reference architectures 90Example Microservices Reference Architecture 94Style introduction 94An example reference architecture 95Reference Implementations 100DevOps implementation 103Resiliency patterns 104Security 104Management 105Summary 1056 Security and Compliance 107What Does the Cloud Mean to the CISO? 107Will My People, Processes, Tools, and Approaches Change? 108How Is Cloud Adoption Affected by Compliance Issues? 111How Do I Protect Against Data Breaches and Loss? 113Key management 113Certificate management 114Data integrity 115How Do I Protect Against Networking Vulnerabilities? 116Cloud-hosted firewalls 116Intrusion prevention systems 117Distributed denial of service 117Microsegmentation 118What Does a Secure Cloud-Native System Look Like? 118Identity and Access Management for Applications 120Authentication 120Multifactor authentication 121Directory services 121Reporting 121Implementing identity and access for cloud-native applications 122Secure DevOps 123Dynamic analysis 124Static analysis 124How Do I Get Visibility to My Cloud Applications? 125Summary 1257 Emerging Innovation Spaces 127Innovation as a Business Driver 127Examples of Innovation 128Data and analytics 128Blockchain 130Containers 132IoT 134Cognitive 135Summary 1368 Methodology 137What Does the Cloud Mean for the VP of the VP of Method & and Tools? 137Introducing the IBM Cloud Garage Method 138Culture 139Think 139Code 140Deliver 140Run 141Manage 141Learn 142Connections between Cloud and Agile 142Lean Startup and Lean Development 144Why Design Thinking Is the Missing Link 145Starting a Project with the IBM Cloud Garage Method 146Wrapping Up the Workshop 150Our Approach to Project Inception 150Starting Development 151The Role of Technology Choices 154Expanding to Deliver the MVP 154The Role of Testing in the Squad Model 156Customer Example 156Summary 1589 Service Management and Operations 159What Does Cloud Mean for the VP of Operations? 159Operational Transformation 160Organizational changes 161Process changes 164Technology changes 165Cultural changes 169New Roles 171Roles and responsibilities 171Organizational alignment 173Operational Readiness 178Operationalizing the cloud 178Operationalizing application readiness 180Incident Management 182Designing resilient applications for the cloud 182Taking a fresh approach to incident management 183Event management 184Runbooks 185Log management 187Dashboards 187Ticketing 188Root-Cause Analysis and Postmortems 190Root-cause analysis 190Postmortem 192Deployment, Release Management, and Change Management 194Deployment 194Release management 197Change management 198Configuration Management 199Configuration items and relationships 200CMDB/CMS 200Discovery 201Summary 20210 Governance 203Cloud Challenges 203Regulatory requirements 204Sourcing and standardization issues 204Threats to security and reputation 205Aspects of a Governance Model 206Defining a Governance Model 207Considerations for your governance model 208Cloud center of competence 209Chapters and guilds 211Summary 213Conclusion 215Notes 219Index 223