DTGOV Hybrid Cloud: Implementation, Risks, and Security Controls

This report provides a comprehensive analysis of a hybrid cloud implementation strategy for DTGOV, focusing on proposed architectures, risk assessments, security controls, and business continuity planning. It begins by introducing cloud computing and the increasing adoption of hybrid cloud infrastructures, highlighting the benefits of flexibility and cost efficiency. The report then proposes several hybrid cloud architectures, including load distribution, resource pooling, dynamic scalability, and elastic resource capacity, detailing their respective advantages and associated issues. A significant portion of the report is dedicated to risk management, identifying potential risks related to hybrid cloud and microservices, such as information loss, compliance issues, and loss of control. To mitigate these risks, the report suggests various security controls and recommends incorporating specific measures into DTGOV's Business Continuity Plan (BCP). The BCP recommendations include steps for data backup, disaster recovery, and system restoration, emphasizing the importance of regular testing and validation. The report concludes by underscoring the criticality of process optimization and continuous testing to ensure the hybrid cloud model effectively supports DTGOV's service delivery and business growth.

Running Title: Hybrid Cloud Implementation [Student name, Number]
Hybrid Cloud Implementation:
A report for DTGOV’s implementation of hybrid cloud methodology
Student name:
Professor’s name:
Affiliation:
Date:
1

Hybrid Cloud Implementation [Student name, Number]
Executive Summary
Cloud computing improves the flexibility of IT companies, and enables them to only
choose those solutions that are only appropriate and relevant to themselves, while at the same
time maximizing on cost efficiency. As more businesses continue to adopt this infrastructure,
adoption and deployment of hybrid strategies keeps going up. However, more issues keep
rising up in how to deal with this new hybrid cloud technologies. Since DTGOV will rely on
hybrid cloud model technology to support the success of its service delivery, process
optimization and constant testing is crucial. Using business process management tools, third
party vendors may work with DTGOV to ensure that the new hybrid cloud model supports the
company’s need for adoption of modern technologies to achieve high performance and
business growth.
2

Running Title: Hybrid Cloud Implementation [Student name, Number]
Table of Contents
Executive Summary....................................................................................................................................2
Introduction:...............................................................................................................................................2
PROPOSED ARCHITECTURES FOR A HYBRID CLOUD..................................................................................3
The benefits of implementing the identified architectures.......................................................................7
RISKS REPORT FOR HYBRID CLOUD AND MICROSERVICES........................................................................8
Challenges that DTGOV may face while implementing the Hybrid Cloud.......................................10
Implementation of the Hybrid Cloud and Integration with On-Premises Apps...............................12
PROPOSED INFORMATION SECURITY CONTROLS....................................................................................12
PROPOSED RECOMMENDATIONS TO BE INCLUDED IN “DTGOV” BCP....................................................15
Steps included in plan...............................................................................................................................21
The important issues that will be checked include:.................................................................................21
Conclusion:................................................................................................................................................22
1

Hybrid Cloud Implementation [Student name, Number]
Introduction:
“Cloud computing” basically is a network of hosted remote servers. Cloud computing
helps in the storage, management and processing of data. This is antitypical to what we in our
local servers and personal computers, in storage of data and hosting of applications (Krutz, &
Vines 2010).
Hybrid cloud infrastructure is fast becoming tone of the most popular cloud computing
trends, leading to the hybrid cloud deployments strategy that is now being adopted by business
companies globally. According to the (Garrison, & Wakefield 2012) hybrid cloud strategy had
been adopted by 78 percent of leading companies in the world, according to the survey.
Additionally, predicted that adoption of hybrid IT infrastructures will triple by 2018. There are
obvious benefits of adopting the hybrid infrastructure (Garrison, & Wakefield 2012). Cloud
computing improves the flexibility of IT companies, and enables them to only choose those
solutions that are only appropriate and relevant to themselves, while at the same time
maximizing on cost efficiency. As more businesses continue to adopt this infrastructure,
adoption and deployment of hybrid strategies keeps going up. However, more issues keep
rising up in how to deal with this new hybrid cloud technologies.
As a general rule, hybrid cloud environments should meet this given criteria:
1. Availability of private infrastructure or on-premises which should be operating
separate from the public cloud.
2. The public cloud and the private cloud should have infrastructures with the
ability to communicate with one another through an .
3. The public and private environments should be designed for the portability, such
that there is faster workload transfer between them.
Implementation
2

Hybrid Cloud Implementation [Student name, Number]
There are prerequisites for a company that would need to move its services and
applications to the cloud. The following is a checklist to test the readiness of DTGOV
implementing their strategy:
i. Determining the solution components needed
ii. Integration with existing systems
iii. Handling an increasing management responsibility
iv. Data security in every aspect of the hybrid cloud
v. Implementation of operational procedures
PROPOSED ARCHITECTURES FOR A HYBRID CLOUD
Choosing the best architecture to implement a hybrid cloud will depend much on the
resources and readiness of a particular organization. The choice of a particular architecture for
implementation of a hybrid cloud is based on the following factors:
i. Integrating private and public clouds that are provided by different
vendors.
ii. Using a single vendor to offer both private and public clouds as a
package.
iii. The organization uses and manages its own private cloud then integrates
it with a public cloud that is serviced by a third party vendor.
A hybrid cloud model can be implemented through more than one models, as shown in
the figure below:
3

Hybrid Cloud Implementation [Student name, Number]
Figure 1: Hybrid cloud using different cloud deployment models
A high program compatibility, ease of access of services and storage scalability are the
three major reasons why DTGOV are adopting a hybrid cloud infrastructure.
A hybrid cloud computing model combines two clouds; the public and private clouds.
This creates a hybrid cloud, which is basically a mass of virtual resources that end users can
access on –demand through portals. Hybrid architecture will allow DTGOV to operate
workloads in the public and private clouds. Resources can be pulled from one cloud to another,
and the clouds can be used interchangeably (Sutton-Grier, Wowk & Bamford 2015).
For the hybrid cloud to be successfully implemented, first of all resources will need to be
virtualized and pooled together in the cloud, after which automation software will do allocation
of the resources. It is only until the two clouds (the public cloud and the private cloud) have
been interconnected that we will have a hybrid cloud. This is possible by use of wide area
networks (WAN), compatibility programs and virtual private networks (VPNs) (Zhang, Cheng &
Boutaba 2010).
Hybrid clouds can only work through interconnectivity. Without interconnectivity, we
will just have two separate clouds. The effectiveness of a hybrid cloud largely depends on how
4

Hybrid Cloud Implementation [Student name, Number]
well connections have been made between the public and private clouds. It is important to
note that the operating system behind a hybrid cloud will either produce a strong dependable
hybrid cloud system or a weak one.
In order for the DTGOV to migrate their services to the hybrid cloud, there are many
consideration that have to be made. Migrating services and applications to the cloud is one of
the many IT problems that often require deep expertise, time and determination reach find the
desired solution. Moving services and applications to the cloud means a lot. Stored procedures
have to be turned into micro services, the databases used must be of a scalable nature and
massive data stores have to be instantiated.
Hybrid cloud can utilize resources from all architectures of cloud computing, that is,
Infrastructure as a service (IaaS) model, platform as a service model (PaaS) and Software as a
service model (SaaS). Below is a diagrammatic view of the hybrid cloud that has been
implemented using a number of deployment models:
Table showing architectures to implement this hybrid model:
Architecture Description Reasons for
deploying it
“Load Distribution
Architecture”
This architecture is
based on the principle of
reducing or eliminating over-
exploitation of IT resources.
It also considers under-usage
factors. The infrastructure
relies on runtime’s ability to
implement “load-balancing”,
logics and algorithms
(Sotomayor et al 2009).
It includes the “cloud
usage monitor” in its
package. It does this by
carrying the tracking of the
runtime workload.
Furthermore, it is very
efficient in information
processing.
5

Hybrid Cloud Implementation [Student name, Number]
“Resources pooling
Architecture”
It is based on the
principle of employing
resource pools. IT resources
of are pooled together in
groups, and system
controlling is also done. It has
also ensures that they are
synchronized automatically.
It includes a number
of “cloud usage monitors”
during the runtime process.
This is useful for effecting the
tracking and synchronization
of all the elements required
by the pooled IT resources. In
this infrastructure, some
management systems are
included.
“Dynamic Scalability
Architecture”
This infrastructure is
based on scaling systems that
are already predefined,
which trigger the IT resources
allocation dynamically from
the resource pools (Zhang et
al 2009).
It has independent
cloud usage monitors that
track utilization of the
runtime. This is to reduce
dynamic fluctuation during
runtime. This benefit is the
greatest advantage of his
infrastructure
“Elastic Resource
Capacity Architecture”
This infrastructure is
related with virtual server
provisioning dynamically. It
Cloud usage
monitoring gathers IT usage
data used previously and
6

Hybrid Cloud Implementation [Student name, Number]
uses allocation and
reclaiming systems using the
RAM and the CPUs.
during runtime, after which
scaling of resources is done.
The benefits of implementing the identified architectures
Low Cost - there are computing resources or hardware, and no monthly depreciation
and reviewing of system usage.
Scale: The infrastructure is flexible and is highly elastic: It also has the ability to fast
transfer of information from private clouds to the public clouds in testing for the most recent
applications.
Speed: The virtual resources can be easily accessed to enable the business meet its
objectives. There has been a wide expansion bandwidth of speeds, hence making it more
effective as opposed to the traditional local server storage infrastructure.
Integration: It is easy to integrate with the traditional “SQL” databases to allow for
accessibility into the private cloud. It further gives analytical opportunities to limitless business
requirements.
Issues Associated with these architectures
The decision by DTGOV to adopt a hybrid cloud strategy requires an understanding of
what hybrid clouds are. This strategy will only be successful if only the project will draw
supporting components into the scene, so as to power the connectivity of both the public and
private clouds through the Wide area network (WAN).
Organizations that choose a hybrid architecture can realize a number of issues that can
arise as follows:
7

Hybrid Cloud Implementation [Student name, Number]
i. Flexible, pricing models based on subscription
ii. Flexibility in shifting workloads based on cost and need.
iii. Advantage of access to additional cloud resources
iv. low-cost of entry
v. consistent and immediate, access to on-demand computing resources
RISKS REPORT FOR HYBRID CLOUD AND MICROSERVICES
Hybrid cloud computing grants almost an unlimited accessory online computing
resources. It also allows for easy deployment of these resources across the world, and it is
probably the reason why cloud computing is becoming popular to many organizations.
Furthermore, it allows for optimization of resources and hence leads to reduction of costs and
labor of maintaining computing resources (Krutz & Vines 2010).
Before an infrastructure is moved to the cloud, reduction of migration-related risks has
to be considered, so as to ensure that the speed of implementing the process is not
compromised by privacy, security issues or regulations of the government. This is where hybrid
cloud comes in. The foundational principle for hybrid cloud infrastructure is the shifting of
services to the cloud, where they form part of the infrastructure deployed in the data center
(Jadeja, & Modi 2012).
Strategies for cloud migration involve lift and shift models, which are one of the most
popular. The model holds that the process of migration must be organized into two steps:
i. Lift – the process of shifting already existing infrastructure to the cloud.
ii. Shift – it works on a presumption that an infrastructure is being adopted to the cloud for
optimization of an already existing cloud infrastructure.
8

Hybrid Cloud Implementation [Student name, Number]
Possible control for the risks
Operation of cloud computing services comes with a number of risks as well as
opportunities. Cloud computing service delivery is helpful but it is associated with many risks.
Some of these risks are;
 Information loss due malicious practices such as hacking. It therefore requires
frequent surveillance and maintenance so as to reduce this risk.
 Liability of running operations at low IT costs. To mitigate this risk, Organizations
may rent more servers from third party vendors to avoid maintaining servers conveniently,
without added responsibilities of updating them.
 Risking of information availability and business success risk. In cloud computing,
continuity of a Business is risked in because of internet instability. Internet stability is not
always assured in maintaining a steady business operation.
Loss of control risks Cloud security risks Compliance Risks
Hybrid cloud computing
can lead the loss of
management The responsibility
of overseeing the day to day
operations in the organization
have been taken over in
organizations. General control
on each technology section has
been done away with, as most
of these sections have been
shifted to the cloud. As cloud-
based infrastructure is being
implemented, many changes
There has been a great
deal in regards to the dangers
of the hybrid cloud computing.
The security measures of the
market have been shooting up
day by day. This indicates that
there are a number of security
risk issues with this
infrastructure.
There have been some
key challenges in security for
companies that offer hybrid
This problem is
associated with the afore-
mentioned challenges in
security. DTGOV needs to
ensure that every strategy
regarding the hybrid cloud is
consistent with standards and
regulations of the industry. It
important that information
transferred between private
and public clouds is
guaranteed.
9

Hybrid Cloud Implementation [Student name, Number]
are being witnessed in
organizations.
Applications change
from time to time. The
applications a recorded as ill-
equipped updating attempts,
since they are outside of the
organization of the
management. A single change
in a solitary application may
affect different projects,
bringing disturbances to the
normal running of applications
in business.
cloud methodologies. These
include management risk,
security administration risk,
and improperly developed
agreements on administration
levels. Many of these issues
come from these confusions.
These risks arise majorly
because private and public
clouds are both used
concurrently.
On the presumption
that organizations have been
working with “debit card” data,
it is under the regulations
outlined by international
standards on data security.
These regulations
should be abided with
appropriately, and with
particular conditions, so as to
allow the hybrid could run
successfully.
Challenges that DTGOV may face while implementing the Hybrid Cloud
1. Networking
Shifting of cloud services to the cloud is no different as setting up a data center..
However, hybrid cloud infrastructure requires not just an internet provider, but a cloud
provider. Due to this hindrance, the selected cloud provider must fulfill the following
conditions:
i. Must allow for design and implementation of the virtual private cloud networks
within a range of IP addresses
ii. Compatibility with other hardware or software
10