The Doppler Quarterly Fall 2016 | Page 62

Real-time Compliance Monitoring and Audit Preparation Managing ongoing compliance in the cloud is a monumental task and most enterprises today lack a holistic view of their regulatory and corporate compliance posture. Furthermore, today’s compliance processes and tools were designed for data centers, and can’t keep up with the rapid evolution of cloud environments. Taking cloud to the next level, and quickly. In this article we explore three key concepts that will enable enterprises to take their cloud to the next level. These concepts are part of a new generation of cloud managed services. • The Cloud Business Office • Continuous Compliance • Continuous Cost Control Let’s examine each concept in detail. The Cloud Business Office Cloud adoption will have an enormous impact on your company, evolving processes that have not been seriously touched in decades. For the first time, developers are able to create and modify their infrastructure requirements using software. The implications of such power are both exciting and frightening. We recommend establishing a central control point for your cloud program as soon as the initiative gets off the ground. We call this the Cloud Business Office (CBO). The CBO serves as the central point of decision-making and communication for your cloud program – both internal and external to your company. You can think of the CBO as a command and control entity within the organization that facilitates most of the decisions and actions that occur around the use of cloud-based platforms within the enterprise (see Figure 1). Cloud Engineering App Owners Technology Center of Excellence (SMEs) (LOB, dev teams, etc.) Compliance & Risk Information Security Communications (Governance & monitoring) Third Parties Operations IT Finance (AWS, tool vendors, etc.) (Chargeback, budget, invoicing) Enterprise Supplier Management (Onboarding, training) (Contract management) HR Figure 1: The Cloud Business Office is set up to ensure that there is a central point of decision-making to drive cloud into the enterprise as quickly and efficiently as possible. 60 | THE DOPPLER | FALL 2016