Forecast 2014: Board Best Practice with SAP

Best Practice: SAP Cloud
Wesley Mukai
September 23, 2014

EU US
China

1
0
© 2014 SAP AG or an SAP affiliate company. All rights reserved.
3
2
Platform Technology
Cloud Security
Intro

In the new networked economy, organizations need to ACCELERATE
their INNOVATION agenda across all business units…
IT organizations need to SUPPORT THIS CHANGE with a technology agenda
that includes brokering innovative solutions and services to the business.

The right mix - Finding the silver linings
managed on prem

Staying relevant – Changing responsibilities for a CIO
Manage End User Devices
Manage Applications
Operate Middleware
Operate Core Infrastructure
Drive Business –– IT Innovation
Improve User Experience
Improve Organizational Insight
Cloud solutions
On-premise stack
Enable Real-time Business

SAP Solutions Today
Applications Analytics
New User Experience for Mobile
Innovation Platform SAP HANA
Choice and
Flexibility
Cloud

SAP HANA Enterprise Cloud
Infrastructure Managed Services
SAP HANA Enterprise
Cloud
Innovate
with the Leader in
In-Memory
Transformation
One Stop Shop
Closed Loop
Support
Build Your
Business Innovation
Roadmap

HANA Enterprise Cloud Set-Up
Customer
Customer’s
Private Cloud
Applications
SAP HANA
Infrastructure
SAP SERVICES
Plan
Define Business &
Roadmaps
Build
Deploy Initially or Expand
Run
Operate &
Incrementally Improve
SAP HANA
ENTERPRISE CLOUD
SAP Data Center
Applications
SAP HANA
Infrastructure

SAP Cloud Data Center World Map
SAP coverage –
complemented by SAP
HANA Enterprise Cloud
Netherlands
Available Today Planned for 2014 partners
Canada
US west US east
Mexico
Brazil
Germany
China
Russia
Japan
Australia

What are the benefits for SAP and to Customers?
Award Winner and role model: The ODCA carbon
footprint and energy efficiency usage model and
proof of concept project.
SAP will power all its data
centers and facilities globally
with 100 percent renewable
electricity starting in 2014.

Winning German Data Center award for Integrated Energy
Efficiency
The Decathlon of Data Center Energy awards…
SAP’s data centers in St. Leon-
Rot have been awarded with the
first place of the „Deutsche
Rechenzentrumspreis 2014“
(German Data Center award)
in category 10 for
“Integrated Energy Efficiency”.

1
0
3
2
Technology
Platform Cloud Security
Intro

Enterprise In Memory Clouds are Different
Traditional Clouds Enterprise In-Memory
Clouds
Large Enterprise
Mission Critical
Large Servers
RAM, RAM and RAM
Physical
Consumer
Web-scale apps
Small Servers
Disk
Virtualized

Mid-term Cloud Infrastructure Technology Disruptors
• More and more cores
• In Memory
• Increased Parallelism
Compute
Increased pressure
on memory system
and interconnects
Persistence
• High Density DIMMs
• NVRAM/Flash
• Hot/Warm/Cold Data
Find the right balance
of price and performance
for the cloud
Interconnects
• Ethernet (10 to 40 to
100)
• Non Ethernet
• Silicon Photonics
Groundbreaking speed
over new mediums
allowing for rack and data
center-level systems
Software Defined Infrastucture
• SDN
• Cloud Computing
Software (e.g. Openstack)
Flexible and open
management and
orchestration

The Approach: Software Defined Data Center
Interconnect
Control Plane
Management Plane
Data Plane
Compute
SAP HANA
In-Memory
SAP HANA
In-Memory
SAP HANA
In-Memory
SAP HANA
In-Memory
Persistence

Peta-Scale Design with Cell Lifecycle Management
App Tier
Cell Cell Cell Cell Cell Cell Cell
HANA Provisioning API
HANA Tier
New Hardware
Use is Premium
EoL Hardware
Old Hardware
Use is Discounted
Innovation
Operations
Next Gen
Hardware

HANA Cell Architecture Evolution
Production Development R&D
10GbE
Cell 1.0
36
Nodes
40GbE 100GbE
Cell 2.0 Cell 3.0 Cell 4.0
10GbE 40GbE
8
Nodes
NVRAM PCIe-3
100GbE
Today Tomorrow Future

HANA Cell 2.0:
Next Gen Cloud Infrastructure within SAP Cloud
Brings a simpler, more efficient, more capable future in the cloud
• 2x HANA compute performance
• 3x memory capacity
• >5x HANA recovery performance
• >10x network/storage throughput
• Cloud infrastructure lifecycle management
SAP-initiated strategic development with industry leaders and
startups
 Intel, DSSD/EMC

HANA Cell 2.0 – Key Features
Compute
• 8 Nodes (4 sockets Ivybridge-EX per node)
• 32 CPU sockets per rack, 480 cores/960 Threads
• 24TB DRAM per rack, 3TB DRAM per node
• 2x HANA compute performance
• 3x memory capacity compared to Cell 1.0
Shared Persistence
• High Performance flash memory
• 100-500 TB of shared flash
Switches & Networks
• PCIe3.0 (up to 384Gb/s per node)
• 40Gb Ethernet (80 Gb/s per node)
• 2.9 Tb/s Bisection Bandwidth
Cloud management software
• SAP Software for infrastructure lifecycle management
HANA Network
SAP Cloud Management CELL 2.0
Compute
Memory
C
M
C
M
C
M
Storage Network
Flash Storage

HANA Cell 2.0 - Key Capabilities
Performance Scalability
Always Available
Unified Data

HANA Cell 2.0: Showcased at SAP Sapphire 2014
Industry leading performance and simplification of cloud systems for HANA

How Security should NOT work…
Procedure of an ineffective team…
 Security team works decoupled from Operations team.
 Missing implementation check and regular monitoring of security implementation
Typical procedure driven by an ineffective security department:
Security team is releasing a new security standard and hands
over to operational team for implementation.
1.
Operations responsible reads through it and either
a. has no time to implement and puts it in the drawer – or –
b. has no clue what security wants and puts it in the drawer – or –
c. implements the requirement but only partially.
2.
Several months later either
a. Internal audit performs a review and identifies issues – or –
b. an attacker identifies the issues, leverages the gap to
steal information and makes it public…
3.
Security Operations

General Risks in a Cloud Environment
Top cloud risks (according ENISA)
2 – Loss of Governance
7 – Isolation Failure
8 – Malicious Insider
9 – Management Interface Compromise
11 – Insecure or Incomplete Data Deletion
14 – Service Engine Compromise
19 – Subpoena and e-discovery
20 – Changes of jurisdiction
21 – Data Protection Risk
All cloud related risks are assigned to one of the
following categories:
 Policy and organizational risks
 Technical risks
 Legal risks
The following table shows the distribution of the risk probabilities and impacts:
PROBABILITY
2
IMPACT
22
3
5
15
1
7
4
8
6
19
11
9
10
14
12
13
21
23
24
18
20
17
Legend: medium risk Top risk
16

Why SAP Cloud is different…
SAP has a long-standing tradition in security of its solutions and takes demands from
customers on cloud security very seriously.
The key differentiator of SAP Cloud:
Strong collaboration between Security, Operations
and Product Development team
A.
Multi Layers of defense to protect our Customer’s data
in the SAP Cloud
B.
Holistic Security & Compliance approach: integrated,
monitored and validated by external audits
C.
D. Mitigating the Risks of Cloud
E. Customer can select the region of data storage

Why SAP Cloud is different…
Customer can select storage region
A. The general rule is:
The physical storage of customer
data is crucial to numerous
enterprises.
SAP Cloud Solution customers
can chose if their data is stored in
Cloud data centers located in the
USA or in Europe.
“We have clear and companywide
guidelines in place that define how we
respond to request for customer data
coming from authorities, when it comes to
law enforcement and national security
concerns. We take our commitment to our
customers and legal compliance very
seriously. Customer data is only shared if the
request is legally valid. Our legal department
evaluates every inquiry in detail. In addition,
we will question a request if there are grounds
for assuming that they are not in conformity
with the law.”
B.

All of us are leading the way
Co-innovate with startups – No fear
SAP Cloud is different, in a good way

Security, Compliance & Data Protection @ SAP Cloud
Extension of certification strategy & verification of the control system
SOC 1
SOC 2
SOC 3
ISO27018*)
German
(cloud specific)
Standards*)
Further
Certifica-tions**)
ISO 27001
ISO9001
e.g. BSI „Grundschutz
Baustein“ Cloud
EU
(cloud specific)
Standards*)
e.g. EU Cloud
Certification
e.g. FDA, FISMA, PCI-DSS
Data Protection
in the Cloud
State-of-the-art controls for
security, availability, integrity and
confidentiality / data protection
State-of-the-art Security
and Quality Manage-ment
System

Invitation to connect
Wesley Mukai
VP, HANA Cloud Computing, SAP SE
wesley.mukai@sap.com
scn.sap.com
twitter.com/wmukai

Forecast 2014: Board Best Practice with SAP

Recommended

Recommended

More Related Content

More from Open Data Center Alliance

More from Open Data Center Alliance (20)

Recently uploaded

Recently uploaded (20)

Forecast 2014: Board Best Practice with SAP