Security Management and Migration Report: Hybrid Cloud Implementation

This report examines the security management and migration strategies for Regional Garden Ltd, focusing on transitioning its ICT infrastructure to a hybrid cloud architecture. It explores the benefits of hybrid cloud, which combines the advantages of both public and private clouds, including cost savings, increased flexibility, and improved resource allocation. The report details the differences between public and private cloud models, emphasizing the security and control offered by private clouds and the scalability and cost-effectiveness of public clouds. It also analyzes the cost-saving potential of hybrid cloud implementation by outsourcing infrastructure and optimizing support costs. The report highlights the advantages of cloud computing, such as reduced capital expenses and improved resource allocation, providing a comprehensive overview of the benefits for Regional Garden Ltd. The hybrid cloud approach is recommended to enhance the organization's responsiveness and flexibility while reducing ICT maintenance costs.

Running head: SECURITY MANAGEMENT AND MIGRATION
SECURITY MANAGEMENT AND MIGRATION
Name of the Student
Name of the University
Author Note

2SECURITY MANAGEMENT AND MIGRATION
Table of Contents
Introduction................................................................................................................................3
Part 1..........................................................................................................................................4
Part 1.1...................................................................................................................................5
Part 1.2...................................................................................................................................7
Part 2........................................................................................................................................10
Part 3........................................................................................................................................12
Part 4........................................................................................................................................13
Part 5........................................................................................................................................16
Part 6........................................................................................................................................17
Part 6.1.................................................................................................................................17
Part 6.2.................................................................................................................................19
Conclusion................................................................................................................................20
References................................................................................................................................22

3SECURITY MANAGEMENT AND MIGRATION
Introduction
Technology in recent times can be considered one of the criticalsectors which are
playing a role in the life of the ordinary people. In the area of the industry also technology is
dominating and helping them to advance in a more innovative and technological oriented
approach. Most of the technology is very much different in their way of assisting different
sectors toexcel in the field of the implementation. In recent times it can be stated that the
concept of cloud computing is very much in demand. This is due to the factor that it not only
helps in the sector of advancement of the organisation but also alters the internal as well as
the external working of the organisation (Chang, Kuo& Ramachandran, 2016). The field of
benefit which can be achieved from the concept due to lie in one sector but are full spreader
into different areas. This technology also helps in the industry of the less human intervention
which would be beneficial in the way ofminimising the error in the operation of the working
of the organisation. Most of technology in recent times are aimed at modifying an
organizations internal as well as external working and most of the time the organization tend
to achieve different kind of benefits which are related to the concept.
The primaryfocal point of the report is to focus on the organisation Regional Garden
Ltd. The organisation is a large display garden which opens for public inspection some days
in a year. The main aim of the organisation is to increase its responsiveness and flexibility.
On the other hand, the board of the organisation is expecting to save significant money
relating to the maintenance of the ICT infrastructure using closing the existing data centre.
The motive of the activity is to move to the concept of the cloud which according to the
organisation would be beneficial.

4SECURITY MANAGEMENT AND MIGRATION
Part 1
The cloud architecture which would be employed to assist the Regional garden
directly is the Hybrid cloud architecture. The main reason for the selection of the hybrid
cloud is due to the factor that it is a combination of both private and public cloud. Taking into
consideration the definition of the hybrid cloud which is stated by the National Institute of
standard and Technology (NIST), “Hybrid cloud is a combination of public and private
cloudsbound together by either standardised or proprietary technology that enables data and
application portability.”The aspect which is related to the concept of the hybrid cloud can be
implemented in different forms, for example, it can be included as a private cloud which
would be inside the organisation. The aspect can comprise more than one providers of public
cloud or a hosted private cloud on the third party premises with more than one providers of
the public cloud.
According to a recent survey which was made by Trend Micro, an organisation who is
working in the concept of the security of the cloud stated that the service which is related to
the public cloud eventually fails to meet the demand of the IT and the requirement of the
business relating to few of the organisation. On the other hand, they concluded that the
concept of the hybrid cloud would be very much beneficial for the purpose. It can be stated
here that the idea of the hybrid cloud can be a stage which is intermediate as an enterprise
prepare themselves to move their overall working which may include the internal as well as
external operation into the concept of the public cloud. Some of the critical issues which can
be considered in the idea of the hybrid cloud that is beneficial for the organisation would be
increasing in the sector of the flexibility of the organisation. One of the other benefits which
can beachieved from the concept is that since the overall working of the organisation is
placed in the idea of the cloud, the organisation can focus more on job’s which are more
critical for them(Chang, Kuo& Ramachandran, 2016). The cloud storage concept which is

5SECURITY MANAGEMENT AND MIGRATION
related to the data can also be beneficial in a way that the essential data of the organisation
can be saved in the idea which wouldkeep in a secured manner without any third party getting
access to the data. On the other hand, it can be stated that the data can be retrievedor access
from anywhere and at any time. This fact mainly means that the data which is stored in the
concept of the cloud computing is very much available whenever the organisation wants to
access the data. In most the cases the resources which are required by the organisation to
process their functionality are not available, but in the concept of the cloud computing can be
stated that the funds are readilyavailable and are provided by the cloud providers upon the
factor of the requesting(Almorsy, Grundy & Müller, 2016). Taking into consideration another
traditional system it can be a very much cost-oriented factor but in the concept of the cloud
computing the charges are applied according to the usage and the need of the different
services which would be used by the organisation. These are factors can be very much
beneficial for the Regional Garden Ltd,and they can achieve the advantage form the service
straightforwardly and cost-effectively. The organisation by means of moving the complete
infrastructure of the concept of the cloud they would be focusing on more of the important
tasks which are related to the internal or external working. Most of the aspects which are
related to the concept of the cloud computing would be very much beneficial in altering the
working of the organisation and helping to achieve a greater standard of working of the
organisation.

6SECURITY MANAGEMENT AND MIGRATION
Figure 1: (HYBRID CLOUD)
(SOURCE: Manvi&Shyam, 2014)
Part 1.1
Mainly in the process of the deployment, the use of two architecture would be done
which are public cloud and private cloud.
Public cloud
A public cloud can be primarilybe considered as an internet. The provider of the
service uses the concept of the internet to make the resources for example storage and
application which would be directly available to the organisation. Some of the cases which is
related to the public cloud is IBM’s Blue Cloud; Amazon Elastic compute cloud, Google
Apennine and sun cloud (to name a few).

7SECURITY MANAGEMENT AND MIGRATION
For the organisation, these type of clouds will be very much economical and can be
considered to be very much inexpensive in the sector of the implementation due to the factor
that the aspects which are related to the application, hardware and bandwidth are covered by
from the side of the providers. It can be considered as a model which is built on the aspect of
the pay per usage model,and the cost would be directly be related to the capacity of the usage
of the service(Chang, Kuo& Ramachandran, 2016).
It can be stated here that the concept of the public cloud can be very much
advantageous due to the factor of the concept being accessible from any location and by
anyone. Any user or customer or organization can directly utilize the concept and make
benefit from the aspect. On other hand one of the issues which can be stated relating to the
public cloud is that it does not involve much of the security which is related to the data of the
organization or the user. security can be one of the biggest issue in most of the aspects which
are related to the concept of the cloud computing.
Private Cloud
A private cloud can be considered as the architecture of data centre which is owned
by most of the organisation. The main advantage which can beachieved from the concept is
that it provides provisioning, scalability, monitoring and automation. The central aspect
which is related to the working of the private cloud is not to give the overall access to the
data centre of the darkness and keep some of the control to within the operation of the
organisation.
The private cloud concept can be expensive with the aspect of the typical modest
economic scale. This option of the cloud service cannot be implemented by most of the
small-scaleorganisations and is majorly performed by large enterprise groups. The private

8SECURITY MANAGEMENT AND MIGRATION
cloud concept is driven by the presence of the compliance and security and keeping the assets
within the idea of the firewall.
Private cloud are basically used by organization who have a vast range of data which
are majorly sensitive data of the organization. These type of data can be very much crucial
for the organization and if the data goes into the hand of another person it would be a great
loss for the organization (Almorsy, Grundy & Müller, 2016).
Comparing the concept of the private and public cloud it can be stated that there are
different variety of functionality of each of the approach and which can be implemented
according to the need of the organization. In most of the times organizations prefer the use of
private cloud due to the aspect of the security which is involved into the concept and how the
people can easily store their sensitive data into the concept without and concern factors such
as loss of data or data theft affecting the data. On the other hand the private data of the
organization can be sometimes so much critical for their working is that it cannot be placed
into the concept of the public cloud were anyone can directly access the data. It can be stated
here that the critical data should not be saved in the context of the public cloud being
vulnerable to the attack by any third party and it can be accessed by anyone.
Part 1.2
The concept of the hybrid cloud can be considered to be offering the aspect which is
related to the scale and benefits which are related to the public cloud and the feature of
security and control which is associated with the concept of private cloud (Hashem et al.,
2015). The concept of the hybrid cloud focus on the aspect of the security and they majorly
deal with the securing aspect of the data of the organization so that it is not into the hand of
any third party or any unauthorized user. The following points give a direct overview of the

9SECURITY MANAGEMENT AND MIGRATION
benefits which are related to the aspect of the hybrid cloud relating to the implementation of
it in the Regional garden Ltd.
Cost saving
 The concept directly reduces the capital expense due to the factor that the organisation
infrastructure wouldbe outsourced to the idea of the providers of the public cloud
 It helps in the concept of the optimisation of thesupport which is spentduring the
different stages relating to the application lifecycle. The idea of the public cloud can
be used for the infrastructure development and the design if the private cloud can be
used for the aspect of production. It can be stated here that the concept is very much
cost effective when relating to the on-premises infrastructure.
 It improves the sector of the allocation of the resources at a cost which is vastly
reduced due to the use of the concept of the public cloud removes the need which is
related to the investment in the aspect of the carrying out different projects (Oliveira,
Thomas &Espadanal, 2014).
 Comparing with traditional system it can be stated that most of the service which is
related to the cloud computing are based on two tier system. The first tier basically
consist of fixed amount of service which given to the customer and they pay for the
service and the second tier mainly consist of the facility which is related to the aspect
of usage per pay. This mainly means that the customer or the organization has to pay
according to the resources they actually use and how much they use, there are no
fixed amount involved into the concept.
Agility of business
 The deployment sector can be well managed within the aspect of the private cloud
along with the issue of the scaling which is related to the public cloud.

10SECURITY MANAGEMENT AND MIGRATION
 It directly provides improvement drastically in the sector of the organisational agility
due to the factor that is related to the ability to directly leverage the public cloud
concept. This helps in the idea of the increase in the opportunity which
wasunavailablein the sector of the traditional infrastructure or pure cloud which are
private (Almorsy, Grundy & Müller, 2016).
 The concept of the cloud bursting is also supported in the context which helps in the
aspect of the tapping of the public cloud for a need which is unexpected relating to
different computing resources.
Security consideration
 It can be stated here that since the concept of the hybrid cloud extends into the IT
perimeter outside the boundaries of the organisation, it directly opens up the large
surface area which is related to the attack with the hybrid infrastructure of the cloud
under the control of the providers of the service (Hashem et al., 2015).
 When an organisation manage the complex hybrid environment of the cloud using the
tool either as a section of the cloud platform which is in the cloud platform or the
aspect of the third party tool, the organisations should take into consideration the
element which is related to the security implication of using of each of the devices. It
can be stated here that the tools of management.
 Security can be considered one of the most vital aspect in the concept of the cloud
computing due to the factor that most of the critical data are saved in the concept of
the cloud. It can be stated here that if the data of the user gets into the hand of any
third party it would be directly affecting the overall functionality of the organization.
In most of the cases organization thin twice before they actually mitigate their data
into the concept of the cloud. This is due to the factor that they are not sure about the
security aspects which are involved into the concept. On the other hand it can also be

11SECURITY MANAGEMENT AND MIGRATION
stated that most of the service providers do not give a clear idea about the type of
security which would be included into the data.
Part 2
Risk factor Justification Control
IT architecture Design The design concept of the
hybrid cloud is complicated
which requires the involvement
of highly professional IT staff
The control measure can be to
appoint a highly professional
IT expert who would be in
control of the overall system
Data Management Most of the organisation tend
to move towards an automation
process which would involve
more security risk which is
related to the data.
The encryption of the data has
to be done majorly in each of
the data. This would be
beneficial in the aspect of
securing the data in the concept
of the cloud.
Disaster Recovery There can be different types of
the disaster which can be
facedwith the concept of the
cloud which can directly lead
to disruption in the normal
working as well as the security
of the data.
There should always be a
recovery plan which would be
related to the data. The concept
would be beneficial in a way
which helps in the platform of
securing the private
information of the user or the
organisation (Chang, Kuo&
Ramachandran, 2016).

12SECURITY MANAGEMENT AND MIGRATION
Access control The access to the concept of
the cloud can be done with the
help of private network or over
the idea of the cloud. This
mainly means that the entrance
to the data over the streamline
of the data would be a risk-
based approach which would
be delivering the aspect of the
concept (Hashem et al., 2015).
The access aspect which is
over the concept of the internet
can be very much
advantageous due to the factor
that it would be directly
securing the access and no
other person apart from the
authorised person.
Switch between Vendor In most of the cases, the aspect
of the switching between
vendors can be a big problem
which directly involved cost
aspect involved in it. The
organisation have to pay a
considerable amount to
mitigate from one service
provider to another.
In most of the cases, it can be
seen that the data of the user
are not safe in the hand of one
vendor. In such a situation it
can be seen that the allocation
of the resources should be done
in a proper manner taking into
consideration different aspects
which are related to the
working within the concept of
the cloud.
Part 3
The steps which are required for the concept control related to the hybrid cloud are stated
below: