Planning & Management Methods for Migration to a Cloud ...

1 Author(s): First MI. Last First MI. Last First MI. Last Month Year Author: Donn K. Kearns December 2017 Planning & Management Methods for Migration to a Cloud Environment The views, opinions and/or findings contained in this report are those of The MITRE Corporation and should not be construed as an official government position, policy, or decision, unless designated by other documentation. 2018 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for Public Release; Distribution Unlimited. Case Number 17-4029 Department No.: T863 McLean, VA i This page intentionally left blank. ii Executive summary The purpose of this document is to introduce and describe a set of high-level Planning and Management concepts and approaches to support efforts to migrate a data center ( , services, applications and data) to a Cloud -based architecture. It identifies and introduces a variety of best practice Management approaches to help a project manager begin the Planning process and to manage key aspects of its execution and operation.

2 While it is focused on Cloud Migration activities, much of the content is applicable to Planning any large-scale, complex Information Technology (IT) transformation. The primary target audience is an organization or a team who intends to migrate its data services from a local data center to a Cloud environment but may not be experienced in Planning such a large-scale Migration . It is not aimed at qualified acquisition program managers who are trained, certified, and experienced in such activities. Further, it is not a technical document, and does not address the technical aspects of Migration activities. This document was written and is maintained by the Computing Infrastructure and IT Service Management Department (T863) within the MITRE Infrastructure and Engineering Technical Center (T860). Within this Center, the Computing Infrastructure and IT Service Management Department (T863) is available for consultation on any initiatives that may utilize or depend on its core capabilities.

3 Iii This page intentionally left blank. iv Table of Contents 1. Purpose and Scope .. 1 2. Introduction to Cloud Computing .. 2 3. Planning Approaches .. 5 5 Gap/Redundancy Analysis .. 9 Analysis of Alternatives (AoA) .. 10 Plan of Actions and Milestones (POA&M) .. 11 4. Planning Considerations .. 11 Strategy (WBS ) .. 12 Implementation (WBS ) .. 13 Acquisition (WBS ).. 15 Performance (WBS ) .. 16 Resources (WBS ) .. 16 Transition (WBS ) .. 17 Security/Privacy (WBS ).. 17 5. Processes .. 17 6. Technology .. 19 7. Data .. 22 8. Governance .. 23 9. Facilities .. 24 10. Organizational Impacts .. 24 11. summary .. 26 Attachment 1. Analysis of Alternatives (AoA) Process .. 27 Attachment 2. Analysis of Alternatives (AoA) Example .. 31 Attachment 3. Planning Checklist .. 37 Attachment 4. References .. 43 Attachment 5. List of Acronyms .. 45 v List of Tables Table 1.

4 ITIL Framework .. 8 Table 2. P3M3 Process Areas .. 9 Table 3. Risk Level Assessment .. 14 Table 4. Threats and Impacts .. 14 Table 5. Processes WBS .. 18 Table 6. Notional RACI Chart .. 25 Table 7. Assessment Criteria and Associated Metrics (Examples) .. 28 List of Figures Figure 1. Cloud Services .. 4 Figure 2. WBS Framework .. 7 Figure 3. Planning WBS .. 11 Figure 4. Technology WBS .. 20 Figure 5. Assessment Process .. 27 1 Planning and Management Methods for Migration to a Cloud Environment 1. Purpose and Scope Migrating to a Cloud environment, or any other large-scale IT transformation, is a highly complex undertaking. It requires significant upfront thought and in-depth Planning to ensure effective resource use and risk Management , on-time and within budget implementation, and ultimately operational success. Without a standardized approach to Planning ( , a Planning template), each organization must independently create its plan from scratch.

5 Such an approach is inherently inefficient, slow, and duplicative of similar work done elsewhere. In addition, it may not fully leverage lessons learned and/or best practices from other activities, and may be risky due to possible oversights. This problem is compounded if personnel in charge of the Migration are not experienced in Planning complex IT projects. This document describes ways to develop an effective and efficient Planning approach, and helps provide a roadmap for an inexperienced team. Its purpose is to introduce and describe a set of high-level Planning and Management concepts and approaches to support efforts to migrate a data center ( , services, applications and data) to a Cloud -based architecture. It identifies and introduces a variety of best practice Management approaches to help a project manager begin the Planning process and to manage key aspects of its execution and operation.

6 While it is focused on Cloud Migration activities, much of the content is applicable to Planning any large-scale, complex Information Technology (IT) transformation. It identifies a broad list of considerations to help federal organizations jump-start their Planning process. It is generic in nature because it is not focused on a specific customer or solution, but rather on high level concepts and factors to help ensure important Migration issues are not overlooked. In reviewing them, if a given concept/factor is not applicable after consideration, it can be discarded. If it is applicable, however, the implementing organization needs to assess its impact, define a plan to address it, and then manage the plan. This is not a technical document. Rather, it focuses on the Planning and Management aspects of a Migration and not the technical aspects. The primary target audience is an organization or a team who may not be experienced in Planning Cloud Migration or other large-scale IT projects.

7 It is not intended for qualified acquisition program managers who are trained, certified, and experienced in such activities. It assumes (and therefore does not address) that organizational leadership has made the decision for such a consolidation/ Migration . It further assumes the reader is familiar with the basics of data center operations and Cloud computing. 2 2. Introduction to Cloud Computing Operating in a very dynamic and cost-constrained environment, the Federal Government must respond continually to operational challenges such as changing/evolving requirements; optimizing, operating, sustaining, and replacing outdated and costly IT; and addressing ever-increasing security and privacy threats. Often, federal organizations must leverage new IT capabilities to address these challenges. Although technologies can provide effective, efficient, and timely solutions, the availability of the necessary resources ( , funding) to address them is typically limited and increasingly constrained.

8 Given this environment, the Federal Government is seeking to provide best practices and guidance on using IT to better achieve operational objectives while reducing risks and costs. Federal guidance, such as the Office of Management and Budget s (OMB) Data Center Optimization Initiative (DCOI)1, seeks to transition IT operations to a more efficient infrastructure by leveraging technology advancements such as Cloud services. Federal organizations have been directed to reduce the numbers of data centers through Consolidation (to include leveraging Cloud services) can offer the following benefits: Provide high availability, scalability, and elasticity to support service on demand in terms of providing services that are available when and where needed, and that can quickly expand or reduce the use of resources (to include costs) as requirements dictate. Provide agility in operational response by leveraging existing capacity as well as available technologies such as Software Defined Networks (SDNs) to reduce the time needed to stand up mission-specific, time sensitive, ad hoc architectures.

9 Reduce the acquisition, Operations and Maintenance (O&M), and sustainment costs of data center operations through resource pooling and economies of scale. These costs include those associated with hardware, software, personnel, facilities, etc. Resource savings can then be used to support other priority functions. Increase security through more centralized control of access to internal infrastructure as well as external networks. Allow supported organizations to focus on their mission instead of the acquisition, operations, and maintenance of IT services/infrastructure. Provide a measured service in which Cloud customers only pay for the services they use. Enhance Continuity of Operations (COOP) or Disaster Recovery (DR) plans. 1 OMB Memorandum M-16-19. 2 , Data Center Consolidation and Optimization ( ). 3 As data centers are consolidated, organizational leadership must decide what IT services should be provided, and from where; , an in-house, locally owned and operated data center; an internal or external organization (federal or commercial vendor) that provides such services ( , the Cloud ); or a hybrid model.

10 Cloud services may include the following, as defined in the National Institute of Standards and Technology (NIST) Cloud Computing Reference Architecture:3 Software as a Service (SaaS). The capability provided to the consumer is to use the providers applications running on a Cloud infrastructure. The applications are accessible from various client devices through a thin client interface such as a web browser ( , web-based email). The consumer does not manage or control the underlying Cloud infrastructure including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings. Platform as a Service (PaaS). The capability provided to the consumer is to deploy onto the Cloud infrastructure consumer-created or acquired applications created using programming languages and tools supported by the provider.